ZCyberNews
中文

Articles

551 articles

Illustration of a Linux kernel TLS packet path with a warning overlay on the receive handler.CRITICAL
Vulnerabilities

CISA Flags CVE-2025-39682 Linux Kernel TLS Flaw as Exploited

CISA added CVE-2025-39682, a 9.8-CVSS Linux kernel TLS receive-path flaw, to its KEV catalog after evidence of active exploitation in the wild.

CVE-2025-39682
3 min read
CISA Known Exploited Vulnerabilities catalog entry for CVE-2025-39964, a Linux kernel AF_ALG race condition.
Vulnerabilities

CISA Adds CVE-2025-39964 Linux Kernel Flaw to KEV

CVE-2025-39964, a race condition in the Linux kernel's AF_ALG socket code, is now in CISA's KEV catalog. Federal agencies must remediate by September 21, 2026.

CVE-2025-39964
4 min read
Screenshot of a macOS Terminal window with a malicious curl command pasted from a fake 'macOS toolkit' setup page.HIGH
Malware

AMOS Stealer Abuses Fake macOS Toolkit Guides

Unit 42's lab infection shows AMOS stealer pulling payloads from getmacouscloud[.]com and exfiltrating browser, wallet, and Telegram data to C2 161.35.146[.]120.

5 min readAMOS Stealer
Illustration of a torrent file icon morphing into a Windows executable, with a blockchain node graphic representing the Solana-based command-and-control channel.
Malware

MovieReaper Trojan Spreads via Compromised Torrent Archive

Kaspersky found hundreds of MovieReaper victims across 10+ countries after attackers poisoned itorrents.org, serving fake "The Odyssey" torrents that drop a Solana-C2 trojan.

6 min readMovieReaper
Illustration of a smartphone with messaging app icons and a malware warning symbolHIGH
Malware

CHOSEN BRICK: Iranian Malware Hits Dissidents via Telegram

NCSC, FBI and AIVD warn that Iranian state actors use CHOSEN BRICK malware, delivered via WhatsApp and Telegram social engineering, to spy on dissidents and journalists.

4 min readCHOSEN BRICK
A Google Pixel smartphone displaying the Android security update screen with the September 2026 patch level.HIGH
Vulnerabilities

CVE-2026-58704: Pixel Modem Zero-Day Under Attack

Google's September Pixel bulletin patches CVE-2026-58704, a high-severity modem privilege-escalation flaw under limited, targeted exploitation, plus 109 other bugs.

CVE-2026-58704
4 min read
Illustration of a smartphone messaging app conversation being intercepted by surveillance software on a Windows laptopHIGH
Malware

UK, FBI, AIVD Expose CHOSEN BRICK Iranian Spyware

NCSC, FBI and AIVD joint advisory details CHOSEN BRICK, Windows spyware Iranian state actors use to surveil dissidents, activists and journalists via WhatsApp and Telegram...

4 min readCHOSEN BRICK
Abstract illustration of a red-tinted network map overlaid with Chinese and U.S. flag motifs and AI neural network nodes
AI Security

China Spy Chief Names OpenAI GPT-5.5-Cyber as Cyber Threat

Chen Yixin, head of China's Ministry of State Security, named OpenAI's GPT-5.5-Cyber and Anthropic's Claude Mythos as signs of a 'disruptive upgrade' in offensive cyber capability.

4 min read
Illustration of a state motor vehicle records database accessed through stolen login credentials.
Industry News

Florida DMV Breach Tied to ShinyHunters, Stolen Officer Credentials

ShinyHunters breached the Florida DMV after a Plant City officer's login sat on a personal device. The state confirmed the claim on September 10 after days of silence.

4 min readShinyHunters
Anthropic logo displayed on a laptop screen next to a terminal window.HIGH
AI Security

Anthropic Disrupts APT29 Spies Abusing Claude in 20+ Hacks

Anthropic disrupted Midnight Blizzard (APT29) and a Chinese university group abusing Claude against 20+ government, defense and drone-supply targets, publishing IOCs for defenders.

6 min readMidnight Blizzard
Screenshot-style graphic of the CISA Known Exploited Vulnerabilities catalog entry for CVE-2026-42016 in JFrog Artifactory.
Vulnerabilities

CISA Flags CVE-2026-42016 in JFrog Artifactory as Exploited

CISA added CVE-2026-42016, a JFrog Artifactory token-scope authorization flaw enabling privilege escalation, to its KEV catalog with a Sept 25 patch deadline.

CVE-2026-42016
3 min read
CISA headquarters building with the Known Exploited Vulnerabilities catalog interface displayed on a screenCRITICAL
Vulnerabilities

CISA Adds Cisco CVE-2026-20079 With Perfect 10.0 Score to KEV

CISA's KEV catalog now lists CVE-2026-20079, a CVSS 10.0 authentication bypass in Cisco software, alongside exploited Citrix and Fortinet flaws. Federal patch deadline: Sept. 12.

CVE-2026-20079
3 min read
← PrevPage 4 of 46Next →