Cybersecurity News & Threat Intel - Cybercory

Dread Forum Hijack Exposes Critical GoBalance Flaw That Can Give Attackers Control of Onion Addresses

October 9, 2026 0

A critical flaw in GoBalance, a tool used to manage Tor onion services, has reportedly enabled attackers to hijack darknet addresses by recovering their secret...

The Noise Inside the Network: How a Third-Party Security Gap Exposed a European Bank

Banking & Finance 5 days ago

Cloud Security

AWS Root Accounts Targeted in Password-Spraying Campaign Across More Than 150 Organizations

Attackers are increasingly targeting the most powerful identities in cloud environments. A newly uncovered campaign targeting AWS root accounts is a timely reminder that...

Breaking news:

Banking & Finance

The Noise Inside the Network: How a Third-Party Security Gap Exposed a European Bank

A Third-Party Gateway Became the Way In. A European...

Patch

SonicWall SMA1000 Series Hit by Multiple Critical Vulnerabilities – Patch Now

SonicWall has issued an urgent advisory regarding four security...

Stay on top of what's going on with our subscription deal!

Worldwide

Blockchain & Crypto Security

Dread Forum Hijack Exposes Critical GoBalance Flaw That Can Give Attackers Control of Onion Addresses

A critical flaw in GoBalance, a tool used to...

Network Security

Citrix NetScaler Vulnerability CVE-2026-88779 Added to CISA KEV as Active Exploitation Raises Urgency

A newly disclosed vulnerability in Citrix NetScaler ADC and...

AI & Cybersecurity

OPENAI PARTS WAYS WITH THREE WORKERS AS AI AGENTS TEST THE LIMITS OF SECURITY

Two separate developments involving OpenAI and autonomous AI agents...

Application Security

TeamViewer Fixes Five High-Severity Vulnerabilities, Including Remote Code Execution Risk

TeamViewer has released security updates for five vulnerabilities affecting...

Network Security

MikroTik RouterOS Flaw Rated Critical as CISA Warns of Remote Code Execution Risk

CIS has issued a critical warning over a vulnerability...

Conference & Events

Connecting Innovation to Architecture: How Saintynet Cybersecurity Navigated GISEC 2026 to Solve MEA’s Evolving Threat Landscape

From strategic dialogues with H.E. Dr. Mohamed Al Kuwaiti...

Patch

Apple Issues Emergency Security Updates iOS 26.7.1 and iPadOS 26.7.1 to Block Active CoreGraphics Exploits

A zero-click memory flaw in Apple’s CoreGraphics engine is...

Advanced Persistent Threat

MacSync Malware Evolves Into a More Sophisticated Threat for Mac Users

A new version of the MacSync malware is showing...

AI & Cybersecurity

HEIF Heist: How a Malicious Image Could Become a Gateway to Enterprise Systems

A seemingly harmless image upload could give attackers a...

Advanced Persistent Threat

TraderTraitor Turns Job Interviews Into a Backdoor: macOS Malware Hits an Indian IT Firm

That is the latest finding from SentinelOne, which has...

Patch

Google’s September Pixel Update Fixes Dozens of Critical Flaws – One May Already Be Under Attack

Google has issued its September 2026 security update for...

Database Security

Cisco Secure Email Gateway Zero-Day Exploited in the Wild: Critical SQL Flaw Gives Attackers Root Access

A critical vulnerability in Cisco Secure Email Gateway is...

Application Security

Telegram Desktop Flaw Turns Old Chat Exports Into a Hidden XSS Trap

A stored cross-site scripting vulnerability could allow a malicious...

Network Security

Check Point Warns of Two Critical VPN Flaws That Could Enable Unauthenticated Remote Code Execution

Two newly disclosed vulnerabilities affecting Check Point VPN infrastructure...

Application Security

Android September 2026 Security Bulletin Fixes Critical Remote-Code-Execution Flaws

Google’s latest Android security update addresses critical vulnerabilities in...

Featured Interviews

#Interview: Global Cyber Leadership Series: Bridging the Talent Gap in Africa

Read The Interview

More...

#Interview: Rethinking Security Operations Centers (SOCs): Towards a New Generation of...

Read The Interview

More...

#Interview: Cyber Resilience: Preparing African Organizations for the Next Major Cyberattacks

Read The Interview

More...

Middle East

View All

Connecting Innovation to Architecture: How Saintynet Cybersecurity Navigated GISEC 2026 to Solve MEA’s Evolving Threat Landscape

Cybercory Team - September 29, 2026

From strategic dialogues with H.E. Dr. Mohamed Al Kuwaiti to dynamic vendor engagements across identity, OT, and exposure...

The Many Faces of ModernStealer: How One Session ID Exposed a Possible Underground Military Data Network

Cybercory Team - August 3, 2026

The investigation, conducted using StealthMole's intelligence platforms, began with a single post advertising an alleged confidential document concerning...

Telegram, Trusted Tools and a Hidden Payload: Inside the New Attack Targeting Middle East Governments

July 21, 2026

ITU CyberDrill 2026 Unites Africa and Arab States to Strengthen Regional Cyber Resilience

July 4, 2026

Oman’s Solar Future Needs Cyber Resilience: Chinese Investments Signal a New Era of Energy Security

June 13, 2026

Oman’s RO12 Million Tourism Expansion Signals New Opportunities and New Cybersecurity Challenges

June 2, 2026

Fast & Furious: Iranian Cyber Unit “Nimbus Manticore” Deploys AI-Driven Malware in Escalating Cyber War

May 26, 2026

Lenovo Doubles Down on Saudi Arabia with Strategic Leadership Move

April 27, 2026

AI & Cybersecurity

View All

CyberXero: AI-Powered Hacker Targets Ukrainian Energy Infrastructure as 628,000 People’s Data Is Exposed

Cybercory Team - October 12, 2026

A new threat investigation has exposed the operations of CyberXero, a financially motivated initial access broker that reportedly uses artificial intelligence to...

OPENAI PARTS WAYS WITH THREE WORKERS AS AI AGENTS TEST THE LIMITS OF SECURITY

October 2, 2026

OpenAI AI Agent Breached Australian Government Website After Being Blocked From Data

September 24, 2026

HEIF Heist: How a Malicious Image Could Become a Gateway to Enterprise Systems

September 21, 2026

The ExploitGym Cyber Incident: Inside the 700-Agent Swarm Attack on Hugging Face and OpenAI Infrastructure

August 29, 2026

The Top 10s

View All

Shielding Your Inbox: Top 10 Email Security Gateway Solutions in 2024

Ouaissou DEMBELE - June 12, 2024

Our inboxes are gateways to our personal and professional lives. They hold sensitive information, access credentials, and confidential communications. With phishing attacks,...

Fortressing Your Business Data: Top 10 Most Secure ERP Systems in 2024

June 11, 2024

The Digital Fortress: Top 10 Most Secure Operating Systems in 2024

June 10, 2024

Guarded Gates: Top Best 10 Secure Email Services in 2024

June 10, 2024

Securing the Gateway: Top Best 10 Web Application Firewalls (WAFs) in 2024

June 8, 2024

Africa

View All

Africa

Kenya President’s Official Website Hit by Cybersecurity Incident as Authorities Launch Forensic Investigation

Africa

ITU CyberDrill 2026 Unites Africa and Arab States to Strengthen Regional Cyber Resilience

Africa

Mastercard Unveils Pan-African Cybersecurity Center to Strengthen Africa’s Digital Future

America

View All

America

FBI Breach Exposes the Cost of a Missed Patch as ShinyHunters Exploit Oracle PeopleSoft Flaw

AI & Cybersecurity

OPENAI PARTS WAYS WITH THREE WORKERS AS AI AGENTS TEST THE LIMITS OF SECURITY

Asia

View All

Advanced Persistent Threat

China-Linked UAT-7810 Expands LapDogs ORB Network with New Linux Backdoors and Enhanced Malware

AI & Cybersecurity

India’s Financial System Holds Firm as Global Risks Mount: RBI Flags AI Cyber Threats, Geopolitical Uncertainty, and Market Vulnerabilities

Asia

Inside the Quiet Siege: How Chinese-Speaking Hackers Built a Hidden Empire Across Southeast Asia’s Power Grids and Ministries

How To

View All

How To

How to identify fake social media profiles? A Guide to Unmasking the Imposters & Identifying Fake Social Media Profiles

How To

How to avoid social engineering scams on social media?: The Social Siren Song

How To

How To Avoid Online Shopping Scams?: The Siren Song of Savings

How To

How to protect your credit card information online?: Fort Knox for Your Wallet

What Is

View All

DoS & DDoS

Under Siege: Understanding DoS and DDoS Attacks in Cybersecurity

What Is

What Is VPN? Tunneling Through the Web: A Comprehensive Guide

What Is

What Is A Computer Virus? The Invisible Invaders: A Comprehensive Guide

What Is

What Is Ransomware? Held Hostage in the Digital Age: Understanding the Threat

Europe

Banking & Finance

The Noise Inside the Network: How a Third-Party Security Gap Exposed a European Bank

Cybercory Team - October 14, 2026

AI & Cybersecurity

CyberXero: AI-Powered Hacker Targets Ukrainian Energy Infrastructure as 628,000 People’s Data Is Exposed

Cybercory Team - October 12, 2026

View All

Oceania

Social Media Ban Fails? Over 60% of Under-16s Still Active Online, Study Reveals

Efforts to restrict children’s access to social media are...

Banking & Finance

ACCC Greenlights Industry Coordination to Migrate Card Payments to Advanced Encryption Standard

On 14 August 2025, the Australian Competition and Consumer...

Data Breach

Australian Privacy Regulator Launches Landmark Civil Penalty Action Against Optus Over 2022 Data Breach

On 8 August 2025, the Australian Information Commissioner (AIC)...

America

US Deports Notorious Australian Hacker After Landmark Cybercrime Conviction

DENVER/ADELAIDE – United States Immigration and Customs Enforcement (ICE)...

Data Breach

Australia’s Privacy Alarm Bells: A Deep Dive into the Notifiable Data Breaches Report (July-December 2024)

In an era where cyber threats are escalating with...

Hacked - Breached

AI & Cybersecurity

OpenAI AI Agent Breached Australian Government Website After Being Blocked From Data

Breached

Your Car’s Infotainment System Has Been Hijacked: First-Ever Android Malware Targets Vehicle Head Units

Breached

eScan Confirms Update Infrastructure Incident, Assures Customers No Product Vulnerability

America

Betterment Confirms Hacker Gained System Access, Issues Critical Security Update to Customers

Breached

Cognizant Hit With US Lawsuits After TriZetto Healthcare Data Breach

View All

Zero-Day

Patch

Apple Issues Emergency Security Updates iOS 26.7.1 and iPadOS 26.7.1 to Block Active CoreGraphics Exploits

Database Security

Cisco Secure Email Gateway Zero-Day Exploited in the Wild: Critical SQL Flaw Gives Attackers Root Access

Virtual private networks (VPNs)

Critical WatchGuard Firebox VPN Vulnerability Actively Exploited in the Wild

Application Security

Final Patch Tuesday of 2025: Microsoft Releases 57 Security Updates, Including Actively Exploited Zero-Day and Critical Vulnerabilities Across Windows and Chromium-Based Edge

Patch

Breaking News: Chrome Zero-Day Exploited in the Wild – Urgent Update Released

View All

Cryptocurrencies

Blockchain & Crypto Security

Dread Forum Hijack Exposes Critical GoBalance Flaw That Can Give Attackers Control of Onion Addresses

Banking & Cybersecurity

Blockchain-Based Magecart Campaign Turns Ethereum Into a Hiding Place for Card Skimmers

Blockchain & Crypto Security

DPRK Cyber Operators Pivot to ‘NullReceiver’: How Blank Ethereum Transfers Are Redefining Blockchain Dead Drops

Advanced Persistent Threat

Dysphoria Unleashed: The 200,000-Device Botnet That’s Using Blockchain and Its Own Victims to Hide

Blockchain & Crypto Security

CPX Unveils Crypto Defense Solution to Fortify Security in the Digital Asset Ecosystem

View All

Cloud Security

AWS Root Accounts Targeted in Password-Spraying Campaign Across More Than 150 Organizations

Advanced Persistent Threat

The “City-Forum” Campaign: Advanced Attacker Exploits Salesforce and ServiceNow Guest Access in Unprecedented Multi-Platform Assault

Advanced Persistent Threat

VMware vCenter Under Active Attack: 361 Systems Compromised in Global APT Campaign

AI & Cybersecurity

Claude Opus 5 Lands on AWS: A New Era for Enterprise AI and Cybersecurity

AI & Cybersecurity

AI Supply Chain Alert: Google Vertex AI Flaw Could Have Enabled Silent Model Hijacking and Remote Code Execution

View All

Ransomware

CISA, FBI Warn of Rising Gunra Ransomware Threat as RaaS Expands Globally

Network Security

Cookie Crumbles: How a Palo Alto VPN Flaw Became Qilin’s Golden Ticket

Data Security - DLP - Encryption

The Gentlemen” Ransomware: The Silent Worm Turning Encryption into a Network-Wide Catastrophe

Advanced Persistent Threat

The Rise of “Mule-as-a-Service”: How Cybercriminals Industrialized Money Laundering

National Security

False Flag Ransomware: Inside the Shadow Campaign Linking Chaos Attacks to State-Sponsored Espionage

View All

Ivory Coast’s ARTCI Urges Public Collaboration with CI-CERT to Combat Cyber Threats

The Ivorian Agency for Telecommunications Regulation and Information Technology (ARTCI) has issued a call for the population to collaborate with the country's Computer Emergency...

OT - ICS - SCADA Cybersecurity

Critical Vulnerabilities Exposed in Hitachi Energy SCADA Systems

A recent security advisory has revealed critical vulnerabilities in Hitachi Energy's Supervisory Control and Data Acquisition (SCADA) systems, posing a significant threat to industrial...

Africa

Burkina Faso Arrests Cybercriminals Behind Webcam Blackmail Scheme

In a significant victory against cybercrime, the Anti-Cybercrime Brigade (BCLCC) in Burkina Faso has arrested a group of individuals involved in a sophisticated webcam...

America

NASA IV&V Facility Expands Cybersecurity Work and Educational Outreach

The NASA Independent Verification & Validation (IV&V) Facility, located in West Virginia, has announced plans to significantly expand its cybersecurity efforts and educational outreach...

Breached

TDECU Data Breach Exposes Personal Information of Over 500,000 Customers

Texas Department of Criminal Justice (TDCJ) has confirmed a significant data breach that has compromised the personal information of over 500,000 individuals. The breach...

Europe

Dutch Regulator Fines Uber €290 Million for GDPR Violations

In a significant blow to ride-sharing giant Uber, the Dutch data protection authority (AP) has imposed a hefty fine of €290 million ($320 million)...

Worldwide

NASA Releases Guides to Combat Living-Off-the-Land Attacks

In a significant move to bolster cybersecurity in the aerospace industry, NASA has released a series of comprehensive guides aimed at combating living-off-the-land (LoT)...

Advanced Persistent Threat

Chinese Hackers Exploit Cisco Zero-Day to Deploy Custom Malware

In a recent cyberattack, a Chinese hacking group known as "Velvet Ant" has been linked to the exploitation of a critical zero-day vulnerability in...

Africa

BCRG and ANSSI Guinea Warn Against False Subvention Scams

The Banque Centrale de la République de Guinée (BCRG) and the National Agency for Information Systems Security (ANSSI Guinea) have issued a joint warning...

Interview

#Interview: Breaking the Communications Barriers for Cybersecurity Professionals

Ali Beshara is a highly respected cybersecurity expert with a distinguished career in both the governmental and financial sectors across the Middle East. As...

Data Security - DLP - Encryption

Telegram Founder, Pavel Durov, Arrested in Paris Amid Content Moderation Controversy

In a shocking turn of events, Pavel Durov, the founder of the popular messaging app Telegram, was arrested in Paris on 24/8/2024 by French...

Advanced Persistent Threat

Navigating The Mifare Backdoor: A Global Security Threat

A newly discovered backdoor vulnerability in Mifare smart cards, widely used in access control systems and contactless payments, has raised serious concerns about the...

AI & Cybersecurity

Company Fined $1M for Using AI to Create Fake Joe Biden Call in Deceptive Scheme

In a landmark case highlighting the dangers of deepfake technology, a company has been fined $1 million for creating and distributing a fake phone...

Banking & Cybersecurity

Banking Security: New Android Malware Targets NFC Data for ATM Withdrawals

A new strain of Android malware has emerged, posing a significant threat to mobile users by stealing Near Field Communication (NFC) data from payment...

AI & Cybersecurity

YouTube Unveils AI-Powered Tool to Recover Hacked Accounts

In a significant step towards enhancing user security, YouTube has launched a new AI-powered tool designed to help users recover their hacked accounts. The...

Transport & Logistics

FAA Admits Cybersecurity Gaps in Aviation Industry: New Regulations Proposed

A Growing Threat to Aviation Safety: The Federal Aviation Administration (FAA) has acknowledged significant gaps in the cybersecurity regulations governing the aviation industry. In...

Interview