Cybersecurity News

Cybersecurity researchers have identified four malicious packages on the npm registry: `chalk-tempalte`, `@deadcode09284814/axios-util`, `axois-utils`, and `color-style-utils`. These packages were designed to steal information from developer systems and have been downloaded thousands of times.

A newly analyzed computer virus from over 20 years ago, named fast16.sys, reveals an early Stuxnet-style attack. The malware was designed to selectively target high-precision calculation software, subtly altering results in memory. This highlights a long-standing threat of data manipulation in critical systems.

Researchers found critical flaws in AMD processors, including the new Zen 5 architecture. The vulnerabilities could allow a local attacker to steal sensitive data, potentially compromising cryptographic operations and leaking privileged information.

Cybersecurity firm Chainguard has launched Athena, an industry coalition using AI to find and fix vulnerabilities in critical open-source software. The group aims to secure the foundational components of the internet before attackers can exploit them.

Scammers are buying ads on Reddit that look like posts from the BBC and The Guardian. These ads lead to fake AI investment schemes designed to steal money, using rapidly changing domains to avoid detection by security teams.

DepsGuard is a new open-source tool that simplifies securing JavaScript projects. It applies recommended security settings, like package cooldowns and disabling install scripts, across multiple package managers (npm, pnpm, yarn, bun, uv) with a single command, addressing common supply chain vulnerabilities.

A vulnerability was discovered in Ubuntu's System Security Services Daemon (SSSD). A local attacker can exploit this by sending malformed data to the PAM passkey responder, causing it to crash. This results in a denial of service, preventing users from authenticating on affected systems.

Temporary passwords for new hires often become permanent security risks. They are sent insecurely and reused, creating a weak link in your company's defenses that attackers can easily exploit.

Russia's FSB intelligence agency has accused foreign spy services of compromising the smartphones of senior Russian officials. The agency claims the devices were turned into surveillance tools capable of stealing data, recording conversations, and covertly activating microphones and cameras to monitor their surroundings.

A security patch has been released for a critical GStreamer vulnerability affecting Ubuntu 16.04 LTS. Malicious AVI files could allow attackers to crash systems or run arbitrary code, making this update crucial for teams managing legacy infrastructure.

A new OWASP-backed open-source tool called CVE Lite CLI helps developers find security vulnerabilities in their code dependencies. It works locally by scanning JavaScript and TypeScript lockfiles, providing instant feedback so issues can be fixed early in the development process.

A remote code execution vulnerability was found in the Papers reference management app on Ubuntu. Attackers can exploit it by tricking users into opening a malicious PDF file, potentially allowing them to run arbitrary code. The flaw stems from how the application handles specific PDF actions.

A new report from LayerX Security finds that enterprise AI risk is not evenly distributed. A small group of "power users" accounts for the majority of AI-related security exposure, highlighting a visibility gap for many organizations trying to manage their data and security policies effectively.

A Canadian man has been sentenced to 33 years in prison after pleading guilty to an extensive sextortion scheme. Over eight years, he targeted more than 145 children across the United States, with some victims as young as six years old, marking a significant legal outcome.

A Romanian national has been sentenced to 56 months in federal prison for hacking into an Oregon state government computer network. The attacks also targeted dozens of other U.S. victims, highlighting the serious legal consequences of cybercrime and successful international law enforcement cooperation.

A security flaw has been discovered in the Texmaker LaTeX editor. The vulnerability stems from how the application handles TIFF image files, allowing a malicious image to cause a denial of service, leak sensitive information, or permit remote code execution on a user's system.

A high-severity vulnerability has been discovered in the Geospatial Data Abstraction Library (GDAL). The flaw, located in its bundled LibTIFF component, could allow an attacker to execute arbitrary code, cause a denial of service, or access sensitive information by using a specially crafted TIFF image file.

The 'Schneier on Security' blog has published its recurring 'Friday Squid Blogging' post. While ostensibly about marine life, the post serves as a well-known open thread for the security community to discuss recent news and topics that were not covered on the blog during the week.

Booking flights, hotels, and rentals involves sharing sensitive data across multiple platforms, creating opportunities for criminals. Common travel scams and frequent data breaches in the hospitality sector increase the risk. Awareness of these threats is key to protecting information while planning travel.

Ubuntu has released a security update for its 20.04 LTS version, addressing a vulnerability in the xdg-dbus-proxy component. The flaw could allow a local attacker to intercept certain D-Bus messages by exploiting incorrect handling of policy rules. Users are advised to apply the patch promptly.

The widespread use of Docker containers has streamlined software deployment, but it also introduces security vulnerabilities. Developers frequently use pre-built images from repositories like Docker Hub, which can contain hidden risks, making container-based infrastructure a prime target for cyberattacks.

The Crypt-SaltedHash library for Perl used a weak method to generate random "salts," a key part of password security. This makes the salts predictable, allowing attackers to more easily crack hashed passwords on systems using this library.

Traditional two-week penetration tests leave companies exposed for the other 345 days of the year. Security firm Sprocket Security highlights this gap, arguing that as attack surfaces constantly evolve, businesses must adopt continuous security testing to effectively manage and mitigate real-world risks.

Google issued an urgent update for a critical Chrome vulnerability that could allow code execution. Meanwhile, attackers are actively exploiting flaws in Microsoft Defender. Other security news includes scrutiny of child safety on major platforms and new spyware detection tools.

Security leaders suggest CISOs ask tough questions to evaluate their programs. This helps them adapt to new threats and prove the value of their security investments to the business.

A vulnerability in QEMU's iSCSI driver affects Ubuntu 14.04 LTS. Attackers could use it to crash systems or potentially execute code, posing a risk for users of the outdated operating system.

A top university CIO argues that security fails when it's hard to use. He says controls should be invisible to users, and the same principle must apply to new AI agents to keep them secure.

For the seventh consecutive time, Microsoft has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Endpoint Protection. The placement highlights the company's strength in the endpoint security market, particularly with its Microsoft Defender product, amid increasingly coordinated and fast-moving cyber threats.

Multiple vulnerabilities have been discovered in MediaWiki, the popular open-source wiki software. The flaws could allow attackers to determine if users have two-factor authentication enabled and to view the titles of intentionally hidden log entries, posing a risk to user privacy and site security.

Focusing solely on chargebacks overlooks other costly forms of fraud like false declines, account takeovers, and service abuse. These hidden threats can significantly damage revenue and customer trust, requiring a broader approach to risk management for complete protection and business health.