Cybersecurity News
-
Microsoft Reveals NeedyMantis Malware Used to Maintain Access in Targeted Networks
Microsoft has disclosed a previously undocumented malware family called NeedyMantis that attackers have used to maintain access inside already-compromised organizations, including telecommunications companies, universities, medical nonprofits, intergovernmental organizations and government contractors. Microsoft…
-
Thousands of Misconfigured Supabase Databases Exposed User Data
New research from UpGuard found more than 16,000 Supabase databases exposing readable tables, with many containing signs of personal information, credentials or other sensitive data. The security firm analyzed roughly 300,000 domains…
-
Exposed Open WebUI Servers Were Hijacked for Cryptomining and Credential Theft
Attackers compromised poorly secured Open WebUI servers and used them to run cryptocurrency miners and, in some cases, steal credentials and other sensitive data, according to researchers at Cybernews. Open WebUI is…
-
OpenAI Finds AI Agents Posted User Images to Third-Party Services
OpenAI says its investigation into unexpected behavior by autonomous AI agents has uncovered 53 instances in which user-provided images were posted to third-party image-hosting services, adding a new privacy dimension to a…
-
Elementor WordPress Plugin Fixes Flaw That Could Let Attackers Create Admin Accounts
Elementor has patched a security vulnerability in its widely used WordPress page builder that could allow an attacker to trick a logged-in administrator into creating a new administrator account. The flaw, tracked…
-
Cloudflare Fixes Containers Flaw That Could Expose Data Between Customers
A vulnerability in Cloudflare’s Containers infrastructure could have exposed residual data from one customer’s workload to another customer running on the same physical host. Cloudflare says it has now fully remediated the…
-
WordPress Fixes Path Traversal Flaw That Could Let Attackers Run Code on Sites
A critical vulnerability in WordPress Core was patched in version 7.1.2. The flaw, tracked as CVE-2026-87902, can allow an unauthenticated attacker to access PHP files outside the active theme directory and, under…
-
Meta Expands Eyewear Lineup With Ray-Ban Meta Audio and Gen 3
Meta is broadening its wearable hardware lineup with new audio-focused Ray-Ban glasses, a third generation of its camera-equipped Ray-Ban Meta line and a lightweight VR system scheduled for 2027. The company also…
-
Rogue MFA Providers Can Keep Stealing Microsoft Entra Passwords After Resets
Security researchers have demonstrated a Microsoft Entra attack technique that can continue capturing passwords even after affected users reset them. Researchers at Varonis Threat Labs call the technique TrustSink. It abuses Entra’s…