⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article from Malwarebytes warns users about fraudulent TikTok-branded rewards pages that promise large cash payouts for daily check-ins, completing small tasks, and earning points. These sites display enormous balances and countdown timers to create urgency, but when users attempt to withdraw, they are met with endless additional requirements—such as referring more friends, watching videos, completing sponsored offers, or downloading a separate app for "identity verification." The article clarifies that TikTok does have a legitimate Creator Rewards Program, but it is limited to eligible creators in certain countries who earn rewards for original videos, not for check-ins or tasks on external websites.
The Dutch NCSC warned that CVE-2026-65400, an authentication-bypass flaw in macOS Screen Sharing, is being actively exploited to install Monero cryptominers. Apple patched the vulnerability on August 6 across macOS Tahoe, Sequoia, and Sonoma.
Security researchers disclosed a two-stage exploit chain against Unisoc modem firmware that achieves full Android kernel access through an incoming VoLTE video call. Stage 1 (March 2026) provides modem-level RCE; Stage 2 (August 2026) exploits shared physical address space between modem and application processors to escalate to kernel access.
The French Ministry of the Economy and Finance disclosed a data breach affecting 678,000 individuals and professionals after an attacker, using the handle “ZeroBytes,” gained unauthorized access to the General Directorate of Public Finances (DGFiP) systems. The breach was discovered on August 12, 2026, when the threat actor listed the stolen database for sale on the PwnForums hacking forum.
This article positions Symantec CBX as a disruptive, predictive XDR platform that merges the legacy strengths of Symantec and Carbon Black into a single cloud-based solution. It directly counters competitor criticisms (e.g., “siloed legacy code”) by emphasizing CBX’s unified correlation across endpoints, networks, data, and cloud—all visible in one pane of glass.
Researchers at Fortinet FortiGuard Labs discovered Evooo1Bot, a Mirai-derived Linux botnet active since July 2026 that weaponizes 10 known vulnerabilities across routers and edge devices. The botnet combines DDoS capabilities with encrypted C2, credential sniffing, and a SOCKS5 proxy module that operators use to anonymize traffic, bypass geo-restrictions, and access internal networks through compromised devices.