ClosedQuorum Lets an AI Panel Choose What a Windows Implant Does Next
New ClosedQuorum Windows implant uses Gemini, DeepSeek, Qwen and Mistral to vote on stealing credentials, injecting code or persisting.
CyberWorldOps
Latest news
More news
Page 30 / 91 · 822 articles
OpenPLC Web Flaw Could Turn a Stolen Session into Industrial Process Control
CVE-2026-88020 XSS in OpenPLC Runtime v3 lets attackers hijack operator sessions and alter PLC state. No patch yet; CISA urges network isolation.
Actively Exploited BIG-IP APM Flaw Gives Remote Attackers a Path to Code Execution
F5 warns CVE-2026-94127 BIG-IP APM heap flaw is exploited for unauthenticated RCE when OAuth Authorization Server is enabled. Patch now.
One Exploit Operator, Three Technology Stacks and Thousands of Exposed Government Records
Chinese-linked actor exploited WordPress, Zyxel and UniFi flaws to breach government networks, stealing 18,566 records and compromising 996 devices.
Meta Rushes Out Muse Hotfix After Researcher Turns AI Agent Into a Local Attack Tool
Meta patched a Muse macOS zero-day that let local malware hijack cloud transcription, access accounts, capture images, and write files.
ShinyHunters Alleges FBI Breach Through an Unknown PeopleSoft RCE Flaw
ShinyHunters claims FBI breach via PeopleSoft zero-day, stealing 2-3TB of employee data. FBI probes FBIjobs.gov activity; claims unverified.
Microsoft Dismantles AI-Powered EvilTokens Network Behind 12,000 Email Account Takeovers
Microsoft seized 50 sites to dismantle EvilTokens, an AI phishing service that abused device-code flow to hijack 12,000 inboxes for BEC fraud.
BigDiskBuster Can Freeze Microsoft Defender Updates Without Shutting Down Antivirus Protection
BigDiskBuster may block Microsoft Defender updates while antivirus remains active, leaving protection data stale. No CVE or active exploitation is confirmed.
Active Attacks Target Certificate-Enabled VeloCloud Orchestrator Servers
Arista warns attackers exploit critical CVE-2026-93952 in on-prem VeloCloud Orchestrator with certificate auth, risking full host compromise.