News
World Cybersecurity News
The Hacker News
- LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE June 9, 2026The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-42271 (CVSS score: 8.7), is a command injection vulnerability that could allow any authenticated user to run arbitrary commands on the
- One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public June 8, 2026Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user escalate to root and break out of a container. The flaw, CVE-2026-23111, sits in the kernel's nf_tables packet-filtering code and was patched upstream on February 5, 2026. Exodus Intelligence released its full technical walkthrough on June […]
- Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order June 8, 2026Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli spyware vendor NSO Group. In addition, the tech giant said it's filing a federal court contempt order against the company for violating a permanent injunction that barred it from targeting WhatsApp and its users. "They tried to trick people into clicking on […]
- Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups June 8, 2026Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol. The vulnerability, tracked as CVE-2026-50751 (CVSS score: 9.3), is a case of a logic flow weakness in certificate validation that allows an unauthenticated remote attacker […]
- AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload June 8, 2026Phishing has always been a numbers game. AI has turned it into a volume machine. Attackers can now create convincing emails, fake login pages, and tailored lures in minutes. Every polished message adds another case for Tier 1 to review, another link to inspect, and another alert that cannot be dismissed at a glance. As […]
- ⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More June 8, 2026Monday again. The weekend was meant to be quiet. It wasn't. Last week had poisoned packages, a broken AI helper, and a worm tearing through repos. The ugly part: basic tricks still worked. A chatbot got fooled. A bot token got leaked inside the malware. The same old mistakes showed up again. And while everyone […]
- The Hardest Fork June 8, 2026Mythos is real. I know a big chunk of the industry thinks it's a marketing stunt, and I get why. I get it. But I've seen the findings, and they're bad. These aren't "whoops, this line right here is wrong, and that's RCE." They're novel combinations of a few dozen issues out of thousands of […]
- VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances June 8, 2026A China-nexus cyber espionage group has been observed deploying a BSD variant of a known backdoor called BRICKSTORM, as well as two other malware families codenamed PLENET (aka GRIMBOLT) and AGENTPSD to target Linux systems. The activity has been attributed by Volexity to a threat cluster it tracks as VerdantBamboo, which it said overlaps with […]
- UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign June 8, 2026Cybersecurity researchers have disclosed details of a financially motivated data theft extortion campaign that has targeted dozens of organizations across professional, legal, and financial services in the U.S. between January and May 2026. The activity has been attributed by Google Mandiant and Google Threat Intelligence Group (GTIG) to a threat actor dubbed UNC3753, which is […]
- VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks June 8, 2026Microsoft has announced that Visual Studio Code (VS Code) will apply a two-hour delay before extensions for the integrated development environment (IDE) are updated automatically to a newer version in an attempt to tackle software supply chain threats. "When automatic updates are enabled, new versions are auto-updated two hours after they are published, adding an […]
Cybercrime Magazine
- WireBadger Malicious Cable Detector For Penetration Testers And Red Teams June 8, 2026This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 8, 2026 – WireBadger production information USB technology was designed for convenience and universal compatibility. When a cable or device connects, computers and mobile devices automatically trust and communicate with it The post WireBadger Malicious Cable Detector For Penetration Testers And […]Taylor Fox
- Virginia Is For Cyber June 5, 2026This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 5, 2026 – Listen to the podcast Virginia is home to the second largest cybersecurity industry in the country, with around 88,000 cybersecurity workers, according to Cyberseek, a project supported by The post Virginia Is For Cyber appeared first on Cybercrime […]Taylor Fox
- Scam Compound Trafficking Victim To Cybercrime Whistleblower: Mohammad Muzahir’s Story June 4, 2026This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 4, 2026 – Listen to the podcast Popular radio host Kim Komando tells Mohammad Muzahir’s Story on the Komando.com blog. Muzahir grew up in Kashmir, India, the eighth of eight children. He The post Scam Compound Trafficking Victim To Cybercrime Whistleblower: Mohammad […]Taylor Fox
- 500 Ransomware Statistics For 2026 June 3, 2026This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 3, 2026 – Read the full story from Bright Defense Ransomware has existed for more than 35 years and remains the fastest-growing category of cybercrime, showing no signs of slowing down, according The post 500 Ransomware Statistics For 2026 appeared first on […]Taylor Fox
- ESPN Journalist Dan Wetzel On Matt Weiss Hacking Allegations June 2, 2026This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 2, 2026 – Listen to the podcast In Dec. 2025, ESPN reported that former University of Michigan co-offensive coordinator and quarterbacks coach Matt Weiss, 42, was indicted in Mar. 2025 for allegedly stealing private videos The post ESPN Journalist Dan Wetzel On Matt Weiss Hacking […]Taylor Fox
- Chris Lamprecht: The First Person In History To Be Legally Banned From The Internet May 29, 2026This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 28, 2026 – Listen to the podcast A 1997 WIRED story reported on Chris Lamprecht, the first person to be legally banned from using the Internet. When U.S. District Court Judge Sam The post Chris Lamprecht: The First Person In History To […]Taylor Fox
- When Your SOC Analyst is Also a Bot: AI Agents, MCP, and Many Automation Opportunities in Your Security Operations May 28, 2026From AI Experiments to Autonomous Operations – Christophe Briguet, Sr. Director of Product Management – AI & Security Analytics, Stellar Cyber San Jose, Calif. – Apr. 28, 2026 Something shifted in early 2026. Not gradually — more like flipping a switch. For years, we talked The post When Your SOC Analyst is Also a Bot: […]Taylor Fox
- Sri Lanka CERT Reports Sharp Rise In Phishing And Ransomware Incidents May 28, 2026This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 28, 2026 – Read the full story in Daily Mirror Hilmy Cader warns that the intensity and sophistication of cybercrime, now supercharged by the pervasive use of Generative AI, is overwhelming governments, enterprises The post Sri Lanka CERT Reports Sharp Rise In Phishing […]Taylor Fox
- CISOs Turnover Persists As AI Makes Cybersecurity More Crucial Than Ever May 27, 2026This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 27, 2026 –Read the full story Immense stress has infected the brains of CISOs (chief information security officers) with malware, and too many of them are looking to call it quits, The post CISOs Turnover Persists As AI Makes Cybersecurity More […]Taylor Fox
- Deepfakes And Vishing Scams: Why Every Family Needs A Code Word. May 26, 2026This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 26, 2026 –Watch the YouTube video According to the Wall Street Journal, criminals increasingly use generative AI to mimic real people’s voices and con their loved ones out of money. There’s The post Deepfakes And Vishing Scams: Why Every Family Needs […]Taylor Fox