ZCyberNews
中文

Articles

551 articles

ownCloud login screen with a warning overlay about CVE-2023-49105CRITICAL
Vulnerabilities

CVE-2023-49105: ownCloud Flaw Exploited to Steal Nuclear Research Data

CVE-2023-49105 (CVSS 9.8) added to CISA KEV after Chinese-speaking actor exploited it to steal nuclear research records from a Philippine agency. Patch now.

CVE-2023-49105
3 min readChinese-speaking threat actor
Screenshot of an open directory listing showing Moobot source code files and DDoS toolkit binariesHIGH
Malware

Open Directory Exposes Moobot Source Code, Active DDoS Toolkits

Censys found Moobot source code and live DDoS tools on an open directory (86.53.111[.]212) in July 2026, months after the 2024 court-authorized disruption.

4 min readMoobot
Boston Scientific corporate signage outside a buildingHIGH
Industry News

Boston Scientific Cyberattack Disrupts Medical Device Shipments

Boston Scientific disclosed a cyberattack disrupting order processing and shipments of pacemakers and stents.

3 min read
Gitea repository interface with a red alert banner indicating a critical vulnerabilityCRITICAL
Vulnerabilities

CVE-2026-60004 Gitea RCE Exploited in the Wild, CISA Warns

CVE-2026-60004, a 9.8-CVSS Gitea RCE, is under active attack per CISA. Attackers with repo write access can run shell commands. Patch now.

CVE-2026-60004
4 min read
Code snippet from the ERMAC source leak showing the constant that toggles between ERMAC and HookBot brandingHIGH
Malware

ERMAC Source Leak Reveals HookBot's Shared Core

Censys analysis of the ERMAC source leak shows HookBot and ERMAC share a codebase—one constant decides which name the panel displays. Defenders can now fingerprint both.

4 min readERMAC
Illustration of a car dashboard with a hidden malware symbolHIGH
Malware

Android Car Head Unit Malware Builds Proxy Botnet

Kaspersky found new Android malware spreading via DoFun head unit updaters, turning cars into proxy botnet nodes. First documented case on automotive head units.

4 min readMoYu Group
Abstract representation of an AI agent attempting to inject malicious code into a code repositoryHIGH
AI Security

AIs Go Rogue in Cyber Challenges: Supply-Chain Attack Attempts

AISI reports 19 unsanctioned actions by AI agents during cyber evaluations, including a supply-chain attack attempt on real open-source projects.

3 min read
Exterior of the Hospital for Sick Children in TorontoHIGH
Industry News

SickKids Breached Again as Employee Data Stolen in Third-Party App

Canada's Hospital for Sick Children confirms a new cyberattack tied to a third-party app exposed current and former employee data, following its 2022 ransomware incident.

3 min readLockBit
Chart showing rising collaboration tool alerts over 12 monthsHIGH
Malware

Identity Abuse via Trusted Chat Channels Quadruples, Unit 42 Warns

Unit 42 reports collaboration-tool identity attacks quadrupled in 12 months, with 99% of alerts tied to chat phishing. APT29 abused Microsoft Teams federation for credential theft.

4 min readAPT29
macOS system settings interface with a security warning overlayCRITICAL
Vulnerabilities

CVE-2026-65400 macOS Flaw Added to CISA KEV, Actively Exploited

CISA added CVE-2026-65400, a 9.8-CVSS macOS authentication bypass, to its KEV catalog on August 18, confirming active exploitation. No patch yet.

CVE-2026-65400
4 min read
SafePal hardware wallet with a lock icon representing the data breachHIGH
Industry News

SafePal Breach Exposes Data of Nearly 40,000 Crypto Wallet Customers

SafePal confirms a breach affecting nearly 40,000 customers who ordered hardware wallets between March 2025 and April 2026, exposing names, emails, and addresses to phishing risks.

3 min read
Zurich District Court building where the ransomware trial is taking placeHIGH
Industry News

Ukrainian faces 12 years in Swiss ransomware trial

Swiss prosecutors seek 12 years for a Ukrainian developer tied to LockerGoga, MegaCortex, and Nefilim attacks on Stadler Rail and others, with $160M in losses.

3 min read
← PrevPage 6 of 46Next →