News

Security researchers have identified an unpatched vulnerability in Android devices that is being actively exploited by attackers to gain complete control over affected smartphones. The zero-day flaw allows threat actors to bypass security protections and take over devices remotely. Users may experience unauthorized access to personal data, applications, and device functions without their knowledge. Google has been notified and is reportedly working on a patch. Meanwhile, Android users are advised to exercise caution with suspicious links and downloads, enable automatic security updates, and consider using mobile security applications for enhanced protection. Source: gbhackers.com.

A Delhi resident became unwittingly entangled in a GST fraud scheme after being promised a government job. Fraudsters used the victim's identity to register a ₹128 crore firm, implicating them in illegal business operations. The scam highlights how criminals exploit job-seekers through false employment promises while establishing fraudulent enterprises in their names. Victims of such schemes face serious legal consequences and financial liability. Authorities warn citizens to verify job offers independently and avoid sharing personal documents with unverified sources. This case demonstrates the intersection of identity theft and investment fraud targeting unsuspecting individuals seeking government positions.

Anthropic, an AI safety company, has granted the European Union's cybersecurity agency ENISA access to Mythos, an advanced AI tool designed for security research. This collaboration is part of Project Glasswing, established through partnership between the European Commission and Anthropic. The initiative aims to enhance Europe's AI security capabilities and strengthen bilateral cooperation on emerging cyber threats. ENISA will leverage the tool to conduct independent security assessments and contribute to the development of safer AI systems across the EU. Source: Securityweek.

Microsoft faced backlash after threatening legal action against a security researcher who publicly disclosed multiple zero-day vulnerabilities. The researcher, reportedly frustrated, released details of several unpatched exploits affecting Microsoft systems. The company's response indicating potential criminal charges sparked controversy within the cybersecurity community, raising questions about vulnerability disclosure practices and researcher protections. This incident highlights the tension between companies seeking to protect their systems and security professionals aiming to improve overall cybersecurity through responsible disclosure. Source: Original Article.

A critical vulnerability (CVE-2026-8732) in the WP Maps Pro WordPress plugin enables unauthenticated attackers to create administrative accounts on vulnerable websites. This security defect could lead to complete site takeover, allowing malicious actors to modify content, steal data, or inject malicious code. WordPress site administrators using this plugin are advised to update immediately to patched versions. This vulnerability highlights the importance of keeping plugins updated and using security measures to protect WordPress installations from unauthorized access. Source: SecurityWeek.

Oracle has launched its new monthly Critical Security Patch Update (CSPU) program to address urgent security flaws that cannot wait for quarterly patches. The first batch fixes 35 vulnerabilities: 11 critical, 18 high, and 6 medium severity. Critical flaws affect Oracle REST Data Services, E-Business Suite, Universal Work Queue, and Payments modules. Notably, CVE-2026-46840 has a perfect CVSS score of 10, affecting REST Data Services' backend-as-a-service component, allowing unauthenticated attackers to compromise the database gateway via HTTPS. Several vulnerabilities have publicly available exploit code, including flaws in Oracle Communications Unified Assurance. Indian organizations using Oracle products should prioritize patching these critical issues promptly. Source: The Register.

Dutch law enforcement authorities have successfully dismantled a large-scale botnet comprising approximately 17 million infected devices including computers, smartphones, and tablets. The operation involved seizing command-and-control servers that orchestrated the network's activities. According to investigations, the botnet was being exploited to operate a residential proxy service and facilitate various cybercriminal operations. This takedown represents a significant effort in combating large-scale malware infrastructure that threat actors commonly use to launch attacks, steal data, and commit online crimes. The seizure of the operational servers has disrupted the attackers' ability to command and control the compromised devices. Source: SecurityWeek.

A critical vulnerability in Windows Netlogon authentication system has become a prime target for cybercriminals. The flaw allows attackers to gain unauthorized access to network systems and escalate privileges without proper credentials. Security experts warn that this vulnerability poses significant risks to organizations running Windows infrastructure. The issue affects multiple Windows versions and can be exploited remotely. IT administrators are urged to apply security patches immediately and monitor their systems for suspicious authentication activities. This vulnerability highlights the importance of keeping systems updated with latest security fixes. Source: SecurityWeek.

Microsoft has announced it will not pursue legal action against security researchers following public criticism over its handling of zero-day vulnerabilities. The decision comes after the tech giant faced backlash for its approach to researchers who discover and report previously unknown security flaws. By reversing its stance, Microsoft aims to encourage responsible disclosure of vulnerabilities, which helps improve overall cybersecurity. The move is seen as a win for the security research community, promoting collaboration between software companies and independent researchers to identify and patch security weaknesses before malicious actors can exploit them. Source: Reuters.

A critical remote code execution flaw in Windows Netlogon service is now being actively exploited by threat actors. The vulnerability allows attackers to execute arbitrary code on affected systems, potentially compromising entire networks. Windows Netlogon is a core authentication service used across enterprise environments. Organizations running unpatched Windows systems are at immediate risk. Microsoft has released security updates to address this issue. IT administrators and users should apply patches urgently to prevent unauthorized access and system compromise. Delays in patching increase vulnerability to cyber attacks. Source: BleepingComputer.

Security researchers at Obsidian Security discovered a critical vulnerability in Flowise, an open-source AI platform used by enterprises for self-hosted AI applications. The flaw, tracked as CVE-2026-40933, allows attackers to execute arbitrary commands through malicious Model Context Protocol (MCP) configurations. The vulnerability can be triggered with a single click via importing a malicious chatflow, requiring only post-authentication access. Flowise, commonly used for building AI assistants, chatbots, and autonomous agents, is vulnerable when stdio MCP is enabled. Flowise Cloud users are unaffected as the feature is disabled there. The official patch has proven insufficient, as attackers can bypass input validation. Organizations using self-hosted Flowise deployments should review their MCP server configurations immediately to mitigate risks. Source: SecurityWeek.

An elderly woman in Bengaluru fell victim to a sophisticated digital arrest scam, losing Rs 24 crore to fraudsters. The scammers impersonated law enforcement officials and convinced the victim that she was involved in illegal activities, pressuring her to transfer large sums of money to 'secure' her assets. This case highlights the evolving tactics used by cyber criminals who exploit fear and authority to manipulate victims into financial transfers. Authorities have registered cases and are investigating the fraud network. Citizens are advised to verify official communications through official channels and avoid sharing personal or financial information with unverified callers. Source: MSN.