Cybersecurity News & Threat Intel - Cybercory

TraderTraitor Turns Job Interviews Into a Backdoor: macOS Malware Hits an Indian IT Firm

5 days ago 0

That is the latest finding from SentinelOne, which has uncovered another victim of the TraderTraitor campaign, a DPRK-linked threat cluster also tracked as UNC4899, PUKCHONG...

MacSync Malware Evolves Into a More Sophisticated Threat for Mac Users

Advanced Persistent Threat 15 hours ago

Virtualization Security

Global VMware vCenter Exploitation Campaign Uncovered: Chinese-Nexus APT Suspected in Critical Infrastructure Attacks

In what security researchers are calling one of the most aggressive exploitation campaigns of 2026, threat actors have compromised at least 361 unique VMware...

Breaking news:

Advanced Persistent Threat

MacSync Malware Evolves Into a More Sophisticated Threat for Mac Users

A new version of the MacSync malware is showing...

AI & Cybersecurity

OpenAI AI Agent Breached Australian Government Website After Being Blocked From Data

The incident involved the Medicare Statistics Reporting Service portal,...

Stay on top of what's going on with our subscription deal!

Worldwide

Advanced Persistent Threat

TraderTraitor Turns Job Interviews Into a Backdoor: macOS Malware Hits an Indian IT Firm

That is the latest finding from SentinelOne, which has...

Patch

Google’s September Pixel Update Fixes Dozens of Critical Flaws – One May Already Be Under Attack

Google has issued its September 2026 security update for...

Database Security

Cisco Secure Email Gateway Zero-Day Exploited in the Wild: Critical SQL Flaw Gives Attackers Root Access

A critical vulnerability in Cisco Secure Email Gateway is...

Application Security

Telegram Desktop Flaw Turns Old Chat Exports Into a Hidden XSS Trap

A stored cross-site scripting vulnerability could allow a malicious...

Network Security

Check Point Warns of Two Critical VPN Flaws That Could Enable Unauthenticated Remote Code Execution

Two newly disclosed vulnerabilities affecting Check Point VPN infrastructure...

Application Security

Android September 2026 Security Bulletin Fixes Critical Remote-Code-Execution Flaws

Google’s latest Android security update addresses critical vulnerabilities in...

Network Security

MikroTik RouterOS Vulnerabilities Are Now Being Exploited – Update Your Routers Immediately

MikroTik’s latest RouterOS security update has taken on a...

Patch

VMware Workstation and Fusion Hit by Critical Host-Code Execution Flaws, Patch to 26H1u1 Now

The vulnerabilities, tracked as CVE-2026-59346 and CVE-2026-59347, affect VMware...

Patch

SonicWall Urges Immediate Patching as Actively Exploited SMA1000 Flaws Put Remote Access Appliances at Risk

The vulnerabilities, tracked as CVE-2026-83548 and CVE-2026-83549, affect SonicWall...

Cloud Security

AWS Root Accounts Targeted in Password-Spraying Campaign Across More Than 150 Organizations

Attackers are increasingly targeting the most powerful identities in...

Banking & Cybersecurity

Blockchain-Based Magecart Campaign Turns Ethereum Into a Hiding Place for Card Skimmers

A new twist in online payment fraud is showing...

AI & Cybersecurity

The ExploitGym Cyber Incident: Inside the 700-Agent Swarm Attack on Hugging Face and OpenAI Infrastructure

In what marks one of the most astonishing operational...

AI & Cybersecurity

OpenAI Disrupts Russia-Linked AI Influence Campaign Built Around a Fake “Expert” Institute

OpenAI says it has disrupted and banned a cluster...

Advanced Persistent Threat

When Trust Becomes the Payload: Cato CTRL Unmasks Fake Codex ClickFix Campaign Targeting macOS Users

As artificial intelligence transitions from standalone productivity assistants to...

Patch

CISA Adds Actively Exploited Oracle Vulnerability to KEV Catalog: Why Organizations Should Patch Now

The vulnerability, tracked as CVE-2026-21962, affects Oracle HTTP Server...

Featured Interviews

#Interview: Global Cyber Leadership Series: Bridging the Talent Gap in Africa

Read The Interview

More...

#Interview: Rethinking Security Operations Centers (SOCs): Towards a New Generation of...

Read The Interview

More...

#Interview: Cyber Resilience: Preparing African Organizations for the Next Major Cyberattacks

Read The Interview

More...

Middle East

View All

The Many Faces of ModernStealer: How One Session ID Exposed a Possible Underground Military Data Network

Cybercory Team - August 3, 2026

The investigation, conducted using StealthMole's intelligence platforms, began with a single post advertising an alleged confidential document concerning...

Telegram, Trusted Tools and a Hidden Payload: Inside the New Attack Targeting Middle East Governments

Ouaissou DEMBELE - July 21, 2026

A new cyber espionage campaign targeting government entities in the Middle East has exposed a familiar but increasingly...

ITU CyberDrill 2026 Unites Africa and Arab States to Strengthen Regional Cyber Resilience

July 4, 2026

Oman’s Solar Future Needs Cyber Resilience: Chinese Investments Signal a New Era of Energy Security

June 13, 2026

Oman’s RO12 Million Tourism Expansion Signals New Opportunities and New Cybersecurity Challenges

June 2, 2026

Fast & Furious: Iranian Cyber Unit “Nimbus Manticore” Deploys AI-Driven Malware in Escalating Cyber War

May 26, 2026

Lenovo Doubles Down on Saudi Arabia with Strategic Leadership Move

April 27, 2026

Hack-for-Hire Espionage Exposed: BITTER-Linked Campaign Targets Civil Society with Mobile Spyware

April 9, 2026

AI & Cybersecurity

View All

OpenAI AI Agent Breached Australian Government Website After Being Blocked From Data

Cybercory Team - September 24, 2026

The incident involved the Medicare Statistics Reporting Service portal, a public-facing Australian government website administered by Services Australia. According to Prime Minister...

HEIF Heist: How a Malicious Image Could Become a Gateway to Enterprise Systems

September 21, 2026

The ExploitGym Cyber Incident: Inside the 700-Agent Swarm Attack on Hugging Face and OpenAI Infrastructure

August 29, 2026

OpenAI Disrupts Russia-Linked AI Influence Campaign Built Around a Fake “Expert” Institute

August 26, 2026

Zoomsday: AI Turns a One-Day Security Research Sprint Into a Wake-Up Call for the Cybersecurity Industry

August 12, 2026

The Top 10s

View All

Shielding Your Inbox: Top 10 Email Security Gateway Solutions in 2024

Ouaissou DEMBELE - June 12, 2024

Our inboxes are gateways to our personal and professional lives. They hold sensitive information, access credentials, and confidential communications. With phishing attacks,...

Fortressing Your Business Data: Top 10 Most Secure ERP Systems in 2024

June 11, 2024

The Digital Fortress: Top 10 Most Secure Operating Systems in 2024

June 10, 2024

Guarded Gates: Top Best 10 Secure Email Services in 2024

June 10, 2024

Securing the Gateway: Top Best 10 Web Application Firewalls (WAFs) in 2024

June 8, 2024

Africa

View All

Africa

Kenya President’s Official Website Hit by Cybersecurity Incident as Authorities Launch Forensic Investigation

Africa

ITU CyberDrill 2026 Unites Africa and Arab States to Strengthen Regional Cyber Resilience

Africa

Mastercard Unveils Pan-African Cybersecurity Center to Strengthen Africa’s Digital Future

America

View All

America

FBI Seizes NightmareStresser Domains in Global Crackdown on DDoS-for-Hire Services

America

DOJ Secures $400M TikTok Settlement Over Children’s Privacy

Asia

View All

Advanced Persistent Threat

China-Linked UAT-7810 Expands LapDogs ORB Network with New Linux Backdoors and Enhanced Malware

AI & Cybersecurity

India’s Financial System Holds Firm as Global Risks Mount: RBI Flags AI Cyber Threats, Geopolitical Uncertainty, and Market Vulnerabilities

Asia

Inside the Quiet Siege: How Chinese-Speaking Hackers Built a Hidden Empire Across Southeast Asia’s Power Grids and Ministries

How To

View All

How To

How to identify fake social media profiles? A Guide to Unmasking the Imposters & Identifying Fake Social Media Profiles

How To

How to avoid social engineering scams on social media?: The Social Siren Song

How To

How To Avoid Online Shopping Scams?: The Siren Song of Savings

How To

How to protect your credit card information online?: Fort Knox for Your Wallet

What Is

View All

DoS & DDoS

Under Siege: Understanding DoS and DDoS Attacks in Cybersecurity

What Is

What Is VPN? Tunneling Through the Web: A Comprehensive Guide

What Is

What Is A Computer Virus? The Invisible Invaders: A Comprehensive Guide

What Is

What Is Ransomware? Held Hostage in the Digital Age: Understanding the Threat

Europe

Russia’s FSB Issues Arrest Warrant for Telegram Founder Pavel Durov Over Terrorism Allegations

Cybercory Team - July 29, 2026

Authentication Systems

Ghostwriter Escalates: UNC1151 Launches Aggressive Gmail Phishing Campaign Capable of Stealing 2FA Codes

Cybercory Team - June 16, 2026

View All

Oceania

Social Media Ban Fails? Over 60% of Under-16s Still Active Online, Study Reveals

Efforts to restrict children’s access to social media are...

Banking & Finance

ACCC Greenlights Industry Coordination to Migrate Card Payments to Advanced Encryption Standard

On 14 August 2025, the Australian Competition and Consumer...

Data Breach

Australian Privacy Regulator Launches Landmark Civil Penalty Action Against Optus Over 2022 Data Breach

On 8 August 2025, the Australian Information Commissioner (AIC)...

America

US Deports Notorious Australian Hacker After Landmark Cybercrime Conviction

DENVER/ADELAIDE – United States Immigration and Customs Enforcement (ICE)...

Data Breach

Australia’s Privacy Alarm Bells: A Deep Dive into the Notifiable Data Breaches Report (July-December 2024)

In an era where cyber threats are escalating with...

Hacked - Breached

AI & Cybersecurity

OpenAI AI Agent Breached Australian Government Website After Being Blocked From Data

Breached

Your Car’s Infotainment System Has Been Hijacked: First-Ever Android Malware Targets Vehicle Head Units

Breached

eScan Confirms Update Infrastructure Incident, Assures Customers No Product Vulnerability

America

Betterment Confirms Hacker Gained System Access, Issues Critical Security Update to Customers

Breached

Cognizant Hit With US Lawsuits After TriZetto Healthcare Data Breach

View All

Zero-Day

Database Security

Cisco Secure Email Gateway Zero-Day Exploited in the Wild: Critical SQL Flaw Gives Attackers Root Access

Virtual private networks (VPNs)

Critical WatchGuard Firebox VPN Vulnerability Actively Exploited in the Wild

Application Security

Final Patch Tuesday of 2025: Microsoft Releases 57 Security Updates, Including Actively Exploited Zero-Day and Critical Vulnerabilities Across Windows and Chromium-Based Edge

Patch

Breaking News: Chrome Zero-Day Exploited in the Wild – Urgent Update Released

Europe

Dutch NCSC Confirms Advanced Zero-Day Attacks on Citrix NetScaler: Multiple Critical Organizations Breached

View All

Cryptocurrencies

Banking & Cybersecurity

Blockchain-Based Magecart Campaign Turns Ethereum Into a Hiding Place for Card Skimmers

Blockchain & Crypto Security

DPRK Cyber Operators Pivot to ‘NullReceiver’: How Blank Ethereum Transfers Are Redefining Blockchain Dead Drops

Advanced Persistent Threat

Dysphoria Unleashed: The 200,000-Device Botnet That’s Using Blockchain and Its Own Victims to Hide

Blockchain & Crypto Security

CPX Unveils Crypto Defense Solution to Fortify Security in the Digital Asset Ecosystem

Banking & Finance

Future Blockchain Summit x Fintech Surge Returns to Power the Next Era of Digital Assets

View All

Cloud Security

AWS Root Accounts Targeted in Password-Spraying Campaign Across More Than 150 Organizations

Advanced Persistent Threat

The “City-Forum” Campaign: Advanced Attacker Exploits Salesforce and ServiceNow Guest Access in Unprecedented Multi-Platform Assault

Advanced Persistent Threat

VMware vCenter Under Active Attack: 361 Systems Compromised in Global APT Campaign

AI & Cybersecurity

Claude Opus 5 Lands on AWS: A New Era for Enterprise AI and Cybersecurity

AI & Cybersecurity

AI Supply Chain Alert: Google Vertex AI Flaw Could Have Enabled Silent Model Hijacking and Remote Code Execution

View All

Ransomware

CISA, FBI Warn of Rising Gunra Ransomware Threat as RaaS Expands Globally

Network Security

Cookie Crumbles: How a Palo Alto VPN Flaw Became Qilin’s Golden Ticket

Data Security - DLP - Encryption

The Gentlemen” Ransomware: The Silent Worm Turning Encryption into a Network-Wide Catastrophe

Advanced Persistent Threat

The Rise of “Mule-as-a-Service”: How Cybercriminals Industrialized Money Laundering

National Security

False Flag Ransomware: Inside the Shadow Campaign Linking Chaos Attacks to State-Sponsored Espionage

View All

Cybersecurity Governance & Compliance: From Policy to Practice

At the CISO Middle East Summit 2025 – UAE Edition in Dubai, a standout session brought together two influential voices in cybersecurity: Betania ALLO,...

Personal Information

The Future Takes Flight: IATA’s One ID Pushes Contactless Travel into Reality

As global passenger numbers soar, IATA’s biometric-driven “One ID” initiative aims to replace passports and paper processes with a secure, seamless, and fully digital...

Cyberespionage Spying

Inside “SmudgedSerpent”: Unmasking a New Iranian Espionage Operation Targeting Global Policy Experts

In a revealing new report, cybersecurity researchers at Proofpoint have uncovered a sophisticated espionage campaign attributed to a previously unidentified Iranian-aligned threat actor known...

AI & Cybersecurity

China Tightens Cybersecurity Law to Rein in AI and Strengthen Incident Reporting

China has announced sweeping amendments to its Cybersecurity Law (CSL) and launched new incident reporting rules, signaling a decisive move toward stronger governance of...

Advanced Persistent Threat

Investigation Report: Android/BankBot-YNRK Mobile Banking Trojan

A new and highly sophisticated mobile banking Trojan, dubbed Android/BankBot-YNRK, has emerged, targeting Android users across multiple regions. The malware, analyzed in-depth by Cyfirma,...

Application Security

New BOF Tool Targets Microsoft Teams Cookies – Attackers Could Hijack Chats Without Admin Rights

Security researchers at TierZeroSecurity have published a proof-of-concept Beacon Object File (BOF) that can extract Microsoft Teams session cookies from a user process, enabling...

Banking & Finance

Multilingual ZIP Phishing Campaigns Hit Asian Financial and Government Sectors – Evidence Points to a Shared Automated Infrastructure

A new wave of phishing attacks is sweeping across East and Southeast Asia, targeting government and financial organizations through multilingual ZIP file lures and...

Application Security

CISA Flags Two Actively Exploited Vulnerabilities in Dassault Systèmes Software

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new security flaws to its Known Exploited Vulnerabilities (KEV) Catalog, warning that attackers...

Podcast & Cyber Talks

Artificial Intelligence Agent Risks: How to Secure the Future of Autonomous Cyber Defense

In the latest episode of the Dubai Cyber Show & Podcast Series, Ouaissou DEMBELE, Founder & CEO of Sainttly Group and Editor-in-Chief of Cybercory.com,...

Worldwide

From ForumTroll to Dante: Kaspersky Unmasks a Hidden Espionage Operation and the Return of Hacking Team’s Legacy

In March 2025, Kaspersky researchers uncovered an advanced cyber-espionage operation that exploited a zero-day vulnerability in Google Chrome (CVE-2025-2783) to infiltrate high-profile targets. The...

Africa

Zimbabwe Joins Global Frontline in Fight Against Cybercrime with Hanoi Convention Signing

In a decisive move toward enhancing its cybersecurity posture, Zimbabwe has officially signed the United Nations Convention against Cybercrime (the Hanoi Convention), a landmark...

Asia

TransparentTribe Strikes Again: New DeskRAT Malware Targets Indian Military Systems

A notorious Pakistan-linked hacking group known as TransparentTribe (APT36 or Operation C-Major) has resurfaced with a sophisticated cyber-espionage campaign targeting Indian military and government...

Social Engineering

Inside YouTube’s Ghost Network: How Cybercriminals Turned the World’s Largest Video Platform into a Malware Machine

In a disturbing twist to the world’s most popular video platform, cybercriminals have quietly built a malware empire on YouTube. According to Check Point...

Worldwide

Amazon Internet Outage Disrupts Major Apps Including Snapchat, Canva and Roblox – Here’s What We Know

A widespread internet outage briefly shook the online world on Monday morning, disrupting some of the most popular websites and mobile applications, including Amazon,...

Middle East

UAE Cyber Security Council Partners with AWS, CrowdStrike, and e& to Empower 500 Cybersecurity Startups

In a powerful move to strengthen the region’s digital resilience, the UAE Cyber Security Council has announced a strategic collaboration with Amazon Web Services...

Breached

F5 Confirms Nation-State Cyberattack on Product Development Systems – Here’s What You Need to Know and Do

A Deep Dive into the F5 Security Incident. Global networking and application security provider F5 has confirmed a nation-state cyberattack that compromised its internal...

America

GITEX Expands to Latin America, Propelling a US$950 Billion Digital Future

As the digital revolution accelerates worldwide, GITEX, the Dubai-born global technology phenomenon, is expanding into Latin America with the launch of GITEX LATAM, set...

Conference & Events

GITEX Strikes Big with e& Tie-Up — Calling in the Next Wave of AI and Innovation

The tech world just got a fresh jolt. GITEX announced a strategic partnership with telecom-giant e& to elevate its upcoming 2026 edition and it’s...

Conference & Events

New MoU aims to synchronize R&D, incident response, intelligence sharing, and capacity building across UAE’s cyber landscape

At GITEX Global 2025, Abu Dhabi’s defense-tech conglomerate EDGE and the UAE Cybersecurity Council (CSC) inked a Memorandum of Understanding (MoU) to deepen cooperation...

Conference & Events