Cybersecurity News
-
Drupal Releases Security Fixes for Vulnerabilities Across Multiple Modules
Drupal, the widely-used content management system powering millions of websites globally, has issued important security updates addressing vulnerabilities in six popular contributed modules. Among these, a critical flaw demands immediate attention from…
-
Infostealer Malware Disguised as Fake Versions of Popular Apps Targeting Macs
Security researchers at Malwarebytes have uncovered a widespread campaign using fake GitHub pages to distribute macOS information-stealing malware. The operation impersonates legitimate software projects and tricks users into installing a strain of…
-
Fortra Patches Critical Command Injection Flaw in GoAnywhere MFT
A critical vulnerability has been discovered in Fortra’s GoAnywhere MFT software that demands urgent attention from IT administrators and security teams. On September 18th, 2025, Fortra released a security advisory detailing a…
-
Vulnerability in OpenAI’s ChatGPT Could Leak Sensitive Gmail Data
A new zero-click vulnerability, dubbed ShadowLeak, has been discovered in OpenAI’s ChatGPT Deep Research agent, according to a report by The Hacker News. The flaw has the potential to expose Gmail inbox…
-
Nokia Issues Advisory on Critical Vulnerabilities in CloudBand and Container Services
In today’s rapidly evolving digital landscape, securing critical infrastructure and applications is more important than ever. Nokia, a global leader in telecommunications, has recently issued two important security advisories for its CloudBand…
-
Jenkins Issues Security Advisory for Patched Vulnerabilities
The Jenkins project has issued a new security advisory detailing multiple vulnerabilities affecting recent versions of Jenkins core. The issues include a high-severity denial-of-service (DoS) vulnerability affecting instances configured to use HTTP/2,…
-
SonicWall Confirms Cloud Backup File Incident Affecting Limited Firewall Install Base
SonicWall has confirmed a security incident involving its MySonicWall cloud backup service, after detecting a series of brute-force attacks that successfully accessed configuration files for a subset of customer firewalls. According to…
-
Cybersecurity Firm Blocks Massive DDoS Attack from Millions of Hijacked Devices
Qrator Labs, a cybersecurity company, has successfully defended against what appears to be the largest botnet-driven DDoS attack recorded this year, involving 5.76 million compromised devices targeting government infrastructure. Security researchers first…
-
New Phishing Service Bypasses Common Two-Factor Authentication
Security researchers at Okta have uncovered a previously unknown phishing-as-a-service operation called VoidProxy that represents a significant escalation in cybercriminal capabilities targeting business email and cloud accounts. Unlike traditional phishing attacks that…