Cybersecurity News - Page 20

The campaign appears to be opportunistic, mainly targeting enterprise and small-to-medium business environments.

The suspected criminal activity occurred throughout 2025 and into 2026, although investigators believe the alleged spying may have begun as early as 2022.

Historically, Muddy Water has relied on PowerShell and VBS loaders for initial access and post-compromise operations.

Scammers can now buy solutions that allow them to run sophisticated fraud campaigns without advanced technical skills.

An unknown actor has leaked an archive containing a MyBB users table and BreachForums’ private PGP key used to sign administrator messages.

In brief: Google fixes a high-severity Chrome flaw, a MongoDB flaw exploited in the wild, and more.

At the time of writing, there are no confirmed public reports about attacks exploiting the above-mentioned vulnerabilities.

Popular AI-powered forks of VS Code have been found to recommend extensions that do not exist in the Open VSX registry.

The malicious add-ons masquerade as legitimate AI sidebar tools.

The vulnerability enables unauthenticated RCE by allowing attackers to inject and run shell commands on exposed devices.