ZCyberNews
中文

Articles

551 articles

Bajaj Auto manufacturing facility with vehicles
Industry News

Bajaj Auto Discloses Ransomware Attack Affecting Operations

Indian auto giant Bajaj Auto disclosed a ransomware incident on June 24, 2026, impacting operations and its tech subsidiary.

3 min read
Technical diagram showing SharkLoader infection chain from exploit to Cobalt Strike Beacon executionHIGH
Malware

StrikeShark Campaign Delivers Cobalt Strike Via SharkLoader Loader

Kaspersky uncovers StrikeShark, a global campaign using SharkLoader malware to deploy Cobalt Strike Beacon across 10+ countries via exploits for ProxyLogon, Openfire, and...

CVE-2021-26855CVE-2023-32315CVE-2024-36401+3
4 min readStrikeShark
Process tree showing WScript.exe spawned by WhatsApp.Root.exe during VBScript executionHIGH
Malware

WhatsApp VBScript Campaign Delivers RMM Remote Access Malware

Kaspersky details an active global campaign distributing VBS files via WhatsApp that installs UEMS RMM software, enabling persistent remote access across 12 countries including...

3 min read
WordPress admin dashboard login screen illustrating session hijacking riskCRITICAL
Vulnerabilities

CVE-2019-25763: WordPress Beaver Builder Plugin Authentication Bypass

CVE-2019-25763 (CVSS 9.8) allows unauthenticated attackers to hijack admin sessions in WordPress Ultimate Addons for Beaver Builder 1.2.4.1 via a crafted POST request to...

CVE-2019-25763
3 min read
CISA KEV catalog entry with Joomla JCE flaw highlightedCRITICAL
Vulnerabilities

CISA Adds Joomla JCE Flaw CVE-2026-48907 to KEV Catalog

CISA warns of active exploitation of CVE-2026-48907, a CVSS 10.0 improper access control flaw in Widget Factory Joomla Content Editor (JCE) allowing unauthenticated PHP code...

CVE-2026-48907
3 min read
Screenshot of the Maine attorney general's data breach portal showing a disabled public interface
Industry News

Maine Closes Data Breach Portal After Fake Reports Filed

Maine shut its public data breach portal after fake notices for VRChat (2.4M alleged victims) and Discord were posted.

3 min read
Exterior of Great Marlow School in Buckinghamshire, England
Industry News

British High School Sends Students Home After Cyberattack

Great Marlow School in Buckinghamshire sent 1,428 pupils home for a second day after a cybersecurity incident; only GCSE and A-Level exam takers attended.

3 min readVice Society
Aerial view of sugarcane fields and a sugar mill in Queensland, Australia
Industry News

Cyberattack shuts down major Australian sugar mills, disrupting

Mackay Sugar, Australia's second-largest sugar producer, shut down Farleigh and Racecourse mills after a cyberattack halted harvesting in Queensland's Mackay region during crush...

3 min read
Diagram showing AI agent skill audit pipeline comparing declared vs actual behavior across metadata, code, and instructions.HIGH
Malware

Trust No Skill: BIV Audit Finds 80% of AI Agent Skills Misbehave

Unit 42's Behavioral Integrity Verification scanned 49,943 OpenClaw skills and found 80% deviate from declared behavior, with multi-stage attack chains enabling credential theft...

3 min read
Map of the United Kingdom with network nodes and a Chinese flag overlaid, representing telecom security tensions
Industry News

UK Weakens Telecom Security Rules After Industry Lobbying on Salt

Britain dropped requirements for independent signaling intrusion detection and monthly reboots after BT, Vodafone, and others pushed back against proposed telecom security...

3 min readSalt Typhoon
Screenshot of CISA Known Exploited Vulnerabilities catalog entry for CVE-2026-42271HIGH
Vulnerabilities

CVE-2026-42271: LiteLLM Flaw Exploited in the Wild, CISA Adds to KEV

CISA added CVE-2026-42271 (CVSS 8.7) to its Known Exploited Vulnerabilities catalog after evidence of active exploitation against BerriAI LiteLLM deployments.

CVE-2026-42271
4 min read
Windows domain controller and Netlogon authentication traffic under active exploitation alert for CVE-2026-41089.CRITICAL
Vulnerabilities

CVE-2026-41089: Windows Netlogon RCE Exploited in Wild

CVE-2026-41089 is a critical Windows Netlogon RCE now reported as exploited in the wild, with Microsoft CNA scoring it CVSS 9.8.

CVE-2026-41089
4 min read
← PrevPage 10 of 46Next →