Cyber Security

Cyber Security
Cyber Security

Google Chrome 152 Released With 327 Security Fixes, Including 10 Critical Vulnerabilities

google-chrome-152-released-with-327-security-fixes,-including-10-critical-vulnerabilities

Google has released Chrome 152 for Windows, macOS, and Linux, delivering 327 security fixes and improvements. The update addresses 10 critical vulnerabilities, making it an important security release for individual users and enterprise environments. Chrome 152 is rolling out as version 152.0.7977.64 for Linux and version 152.0.7977.64/.65 for Windows and macOS. Google said availability will […]

CISA Red Team Breaches Critical Infrastructure to Reveal SOC and Cloud Security Gaps

cisa-red-team-breaches-critical-infrastructure-to-reveal-soc-and-cloud-security-gaps

CISA’s latest advisory for red teams warns critical infrastructure operators that security systems can fail even if they have a lot of funding. This is because trained analysts are needed to respond to alerts effectively. The agency’s “A Tale of Two SOCs” report compares two parallel red team engagements: one against a Government Services and […]

Anthropic Rolls Out Enterprise-Managed Auth for Claudes MCP Connectors

anthropic-rolls-out-enterprise-managed-auth-for-claudes-mcp-connectors

Anthropic has taken its Model Context Protocol (MCP) connector framework a significant step further, announcing on August 24, 2026, that Enterprise-managed authorization is now generally available. The update expands support to Datadog, Notion, and Slack, joining the previously supported roster of Asana, Atlassian, Canva, Figma, Granola, Linear, and Supabase, with Exa, Miro, and Zoom slated […]

Zimbra Collaboration Suite Vulnerability Actively Exploited in the Wild

zimbra-collaboration-suite-vulnerability-actively-exploited-in-the-wild

CERT Polska has warned that threat actors are actively exploiting CVE-2026-73570, a critical OS command-injection vulnerability in Zimbra Collaboration Suite that allows remote, unauthenticated attackers to execute arbitrary shell commands as the zimbra user. The vulnerability affects Zimbra installations in which the SNMP trap service is enabled via the snmp_notify parameter and the swatchdog service […]

Hackers Poison Google and Bing Results to Deliver Cloaked Banking Phishing Pages

hackers-poison-google-and-bing-results-to-deliver-cloaked-banking-phishing-pages

Bank customers searching for a login page can now be led into a trap before they receive a suspicious email or text message. Criminals are manipulating Google and Bing results so that fraudulent banking pages appear where people expect to find legitimate services. The campaign, called Chameleon SEO Poisoning, turns ordinary searches for terms such […]

Hackers Infect Android Car Screens Through Their Built-In Software Update System

hackers-infect-android-car-screens-through-their-built-in-software-update-system

A newly uncovered Android malware campaign has turned car infotainment screens into an unexpected target. Rather than tricking drivers into installing a suspicious app, attackers used the software update path already built into Android-based head units. The malware is a multi-stage downloader for ad fraud and a proxy botnet. It targets connected vehicle screens that […]

Iran-Linked Hackers Force UK Power Plant Offline in Unprecedented Four-Day Cyberattack

iran-linked-hackers-force-uk-power-plant-offline-in-unprecedented-four-day-cyberattack

A cyberattack attributed to hackers linked to Iran forced a British power plant offline for four consecutive days last month, marking what officials describe as the first successful attack of its kind against UK energy infrastructure. The incident, first reported by The Telegraph, has raised fresh alarm over the vulnerability of critical infrastructure amid heightened […]

Microsoft Windows 11 App Pushes Bing as Default Search in Chrome, Firefox and Brave

microsoft-windows-11-app-pushes-bing-as-default-search-in-chrome,-firefox-and-brave

Microsoft has built a dedicated Windows 11 app that exists to put Bing in front of users who already chose another search engine. The utility, Microsoft Recommended Search Settings, arrives as a standalone 22.2 MB installer named MicrosoftSettings.exe. It is hosted on Microsoft’s official download servers rather than Windows Update or the Microsoft Store, and […]

Grok Zero-Click Attack Steals Chat Data Using Encrypted Prompt Injection

grok-zero-click-attack-steals-chat-data-using-encrypted-prompt-injection

A newly disclosed attack can turn a routine “summarize this page” request in xAI’s Grok web chat into a silent theft of the user’s name, coarse location, subscription tier, and the prompt history of the active conversation. Adversa AI said in a report shared with Cyber Security News (CSN) that the method, named Cryptographic Context […]

Claude Mythos 5 Now Available in Claude Security for Vulnerability Scanning

claude-mythos-5-now-available-in-claude-security-for-vulnerability-scanning

Anthropic has expanded access to its frontier AI cyber-defense capabilities by making Claude Mythos 5 available in Claude Security, enabling enterprise customers to scan codebases for vulnerabilities and receive AI-generated remediation guidance. The move is designed to give defenders stronger vulnerability discovery and patching support while keeping direct access to the model constrained by purpose-built […]