ZCyberNews
中文

Articles

551 articles

Map of Africa with cybersecurity network overlay
Industry News

Africa's Cyber Challenge: Skills Gap Outweighs Tech Access

Rapid7 expands StarLink partnership across Egypt, Nigeria, South Africa, Kenya, but warns more tech won't fix security ops — teams lack time, context, and specialist capacity.

3 min read
Black Hat USA 2026 conference stage with AI-themed visuals and cybersecurity branding
AI Security

Black Hat USA 2026: AI Outpaces Security Controls, Accountability Gaps

At Black Hat USA 2026, officials and researchers warn AI-driven vulnerability discovery outpaces defenses.

3 min read
CISA logo and Windows error screen symbolizing the urgent patch deadline for the DPRK-exploited Winsock vulnerability.HIGH
Vulnerabilities

CISA Orders Federal Agencies to Patch DPRK-Exploited Windows Bug

CISA gives federal agencies until Aug 25 to patch CVE-2026-68820, a Winsock privilege-escalation flaw exploited by North Korea's Lazarus in Operation Dream Job.

CVE-2026-68820
5 min readLazarus Group
German flag and government building, symbolizing the country's new intelligence legislation
Industry News

Germany Moves to Give Spy Agencies Hacking and Sabotage Powers

Germany's cabinet approved a 732-page bill granting the BND and BfV active cyber powers — hacking foreign systems, sabotaging supply chains, and domestic disinformation — the...

4 min read
Cisco firewall device with warning overlay indicating denial-of-service vulnerabilityHIGH
Vulnerabilities

Cisco Patches Actively Exploited ASA, FTD VPN DoS Flaw CVE-2026-20349

CVE-2026-20349 (CVSS 8.6) lets unauthenticated remote attackers crash Cisco ASA and FTD VPN devices via crafted HTTP requests. Active exploitation confirmed; hotfixes available.

CVE-2026-20349
4 min read
UK criminal records office building with a padlock icon overlay, symbolizing data breachHIGH
Industry News

Three Intrusions at UK Criminal Records Office Went Undetected for

UK's ACRO Criminal Records Office reprimanded after three breaches exposed data of 11,000 people, including domestic violence victims, due to unread antivirus alerts and an...

3 min readMedusa
Diagram of Aeternum botnet using Polygon blockchain for command and controlHIGH
Malware

Aeternum Botnet Loader Uses Polygon Blockchain for C2 Operations

Unit 42 dissects Aeternum, a C++ botnet loader that stores C2 commands on Polygon smart contracts, evading takedowns. Three samples analyzed, including XWorm and XMRig.

4 min readAeternum
Water treatment facility with digital overlay representing cyber monitoring
Industry News

Water Utilities Partner With DEF CON Offshoot for Cyber Help

NRWA and DEF CON Franklin launch Water Watch Center to deliver threat intel and MDR services to small water utilities serving under 10,000 people, as attacks hit 12+ states.

3 min read
Diagram showing stolen AI API tokens being resold on gray-market transfer stationsHIGH
Malware

Token Jacking: Cybercriminals Steal AI API Keys for Gray Market Resale

Unit 42 reports token jacking: attackers steal AI API keys to resell access on gray-market transfer stations, causing staggering financial losses for developers.

3 min read
Network diagram showing malware connecting directly to an IP address, bypassing DNSHIGH
Malware

Almost Half of Malware Samples Communicate Direct to IP

Unit 42 finds 45.32% of C2-active malware bypass DNS with direct-to-IP connections. Learn how ZT-IP enforcement blocks these evasive threats.

5 min readPhorpiex
CISA KEV catalog entry for N-able N-central vulnerabilityHIGH
Vulnerabilities

CISA Adds Exploited N-able N-central Flaw to KEV Catalog

CISA adds CVE-2026-18577 (CVSS 8.2) to KEV after active exploitation; incomplete patch for CVE-2026-18556 in N-able N-central. Patch now.

CVE-2026-18577CVE-2026-18556
3 min read
Abstract visualization of AI analyzing open-source code for vulnerabilitiesCRITICAL
AI Security

Frontier AI Finds 14,090 Zero-Days in OSS in 2 Months

Unit 42's NOVA system uncovered 14,090 novel vulnerabilities across 3,915 OSS projects in two months — 40% high or critical severity — collapsing the patch window to near zero.

4 min read
← PrevPage 7 of 46Next →