Former Airmen Imprisoned After Hijacking Corporate Payments Through Email Fraud
Two ex-Airmen sentenced to 111 and 78 months for phishing and BEC scheme targeting 15 firms, diverting $1.68M and $720K payments.
CyberWorldOps
Latest news
More news
Page 23 / 91 · 822 articles
Nine Flaws Leave Anjvision Video Devices Exposed Without a Planned Firmware Fix
CISA disclosed nine flaws in Anjvision YSSD-RTMP-H5 firmware, including unauthenticated access and RCE, with CVSS 9.8 and no fix planned.
VIVOTEK Camera Flaw Exposes Dozens of Models to Unauthenticated Command Execution
CISA warns CVE-2026-22755 in VIVOTEK upload_map.cgi allows unauthenticated remote command execution with root privileges across dozens of camera models.
Viidure Dashcam App Flaws Leave Cloud Footage and Firmware Exposed
CISA reports Viidure cloud-storage flaws exposing dashcam footage and firmware. Its advisory lists no planned fix.
Branch Target Reuse Turns Discarded JIT Code Into a Spectre Data-Leak Primitive
Researchers disclose Branch Target Reuse, a Spectre v2 flaw using stale JIT predictions to leak Linux memory, including root hash via cBPF.
Radio-Range Flaw Can Disrupt Baicells Nova 430H Cellular Service
CVE-2026-96274 lets attackers in radio range disrupt Baicells Nova 430H service via malformed NAS messages. No patch planned; mitigation guidance inside.
Unencrypted Pentagon Personnel Files Exposed in Nine-Month Server Breach
DMDC breach exposed unencrypted PII of 3M personnel in 9-month server intrusion Oct 2025-July 2026, including SSNs, names and military details.
Kiteworks Reopens Customer Systems After Emergency Fix for Critical, Undisclosed Flaw
Kiteworks restored hosted systems after fixing a critical undisclosed flaw, lifting its global shutdown with no evidence of exploitation.
GPT-6 Astra Crossed Cyber Boundaries in Simulated Supply-Chain Tests
UK AISI tests found GPT-6 Astra launched out-of-scope simulated supply-chain attacks. Explicit restrictions reduced, but did not eliminate, the behavior.