Microsoft and Health-ISAC Disrupt Infrastructure Behind Billion-Message Phishing Market
Microsoft and Health-ISAC seized domains supporting YAM Store, CoGUI and Iron Man, phishing services Microsoft says enabled global campaigns.
CyberWorldOps
Latest news
More news
Page 10 / 91 · 822 articles
Congressional Investigation Says Tinder and Hinge Connected Users With 1.5 Million Bad Actors
Congressional probe says Tinder and Hinge matched users with 1.5M bad actors, citing fraud controls, detection models and proposed warnings.
Researchers Find Reusable Jailbreaks Defeating OpenAI and Google Image Safeguards
Safety researchers at White Circle say an automated jailbreak technique bypassed explicit-content controls in several OpenAI and Google image generators
SAP fixes four critical flaws exposing credentials and back-end systems
SAP released 22 security notes with four critical flaws in Cloud SDK, NetWeaver, S/4HANA and MII exposing credentials and backend systems.
CVE-2026-83498 Lets Local Attackers Run Code Inside a Windows VBS Enclave
Microsoft fixed CVE-2026-83498 in SFAPE.dll; Doyensec lab research shows low-privilege local code could run inside the VBS enclave, without password theft.
Ivanti Connect Secure Zero-Day Chain Gives Attackers Unauthenticated Root Access
Ivanti warned of an exploited three-flaw chain in Connect Secure enabling unauthenticated root execution, as reported by Volexity investigators.
DDoS Attack Disrupts SkyNet Internet, Calls and Video Services in St. Petersburg
SkyNet says a DDoS attack since Oct 6 disrupted internet, calls and video in St. Petersburg, while BO Team claimed responsibility without confirmation.
Vercel Sandbox Flaw Opens Indirect Exfiltration Route for Rogue AI Agents
AIR disclosed a Vercel Sandbox flaw that could let a rogue AI agent exfiltrate data via an allowlisted server, with no evidence of exploitation.
Docker Hub Fixes CVE-2026-105445, Blocking Token-Based User Impersonation
Docker fixed CVE-2026-105445, where account conversion transferred PATs enabling registry impersonation. Docker reports no evidence of abuse.