⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Microsoft has confirmed it is working on a security patch for “ShieldBreak,” a zero-day privilege escalation vulnerability in Microsoft Defender tracked as CVE-2026-69414. The flaw was publicly disclosed by security researcher “Nightmare Eclipse” after the August 2026 Patch Tuesday updates, without prior notice to Microsoft.
WeLiveSecurity examines how QR-code phishing evades corporate defenses by moving victims from protected environments to unmanaged mobile devices, with malicious URLs hidden in visual patterns that bypass traditional email security filters.
The article reports that uBlock Origin is stepping back from filtering Facebook ads, signaling a shift in the ad-blocking debate from mere inconvenience to a critical security concern. For years, ad blockers have been a contentious tool, balancing user privacy and experience against publishers' reliance on ad revenue.
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT). The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code.
Last week in cybersecurity, Apple introduced a new feature that alerts iPhone users if they are being targeted by mercenary spyware, providing an extra layer of protection for high-risk individuals. Meanwhile, a dangerous new Android malware strain was discovered that allows criminals to use victims' bank cards in real time, posing a significant financial threat.
CrowdStrike's latest research explores teaching AI to reason through detection triage, applying structured reasoning models to improve alert prioritization and reduce analyst fatigue in the Falcon platform.