Cybersecurity News - Page 1

In brief: Microsoft fixed a zero-day, Russian hackers targeted two power plants in Poland last year; and more.

There is no evidence that City-Forum is operated by ShinyHunters, although some of the Salesforce techniques resemble earlier ShinyHunters campaigns.

Researchers found that DeadLock uses the Polygon blockchain to store configuration data and information used by its leak site.

The attackers used path traversal techniques before installing a malicious cron job to maintain access.

Mozilla said the risk of a supply chain attack is low because access to the repository was limited to a small group of employees.

Check Point said the North Korean Lazarus group exploited CVE-2026-68820 to deploy the FudModule kernel-mode rootkit.

Gunra also exploits credential-exposure and SSH access control security flaws in internet-facing VPN gateways to gain remote access to victims' systems.

The campaign uses job offers and fake recruitment processes to target system administrators and other IT professionals.

In the observed attack, Storm-1175 deployed remote monitoring and management tools, including AnyDesk and SimpleHelp.

The company said its Metabase Cloud platform was targeted via a previously unknown flaw affecting versions 1.58 and later.