Aggregator

Critical infrastructure was once considered too complex and isolated to be a primary cyber target. That assumption no longer holds. New reporting from Cyber Security News reveals that the Iran-linked CyberAv3ngers group is actively targeting water utilities, energy systems, and industrial controllers across the United States. What started as symbolic attacks has now evolved into

The post Hackers Are Targeting Critical Infrastructure to Cause Real-World Damage appeared first on Seceon Inc.

The post Hackers Are Targeting Critical Infrastructure to Cause Real-World Damage appeared first on Security Boulevard.

Microsoft has released its April 2026 Patch Tuesday security update, addressing 168 vulnerabilities across its product portfolio, including one actively exploited zero-day and one publicly disclosed flaw that organizations must prioritize immediately. Zero-Day Under Active Exploitation The most critical issue in this month’s release is CVE-2026-32201, a Microsoft SharePoint Server Spoofing Vulnerability currently being actively […]

The post Microsoft Patch Tuesday April 2026 – 168 Vulnerabilities Fixed, Including Actively Exploited 0-day appeared first on Cyber Security News.

The modern enterprise runs on collaboration tools. Platforms like GitHub and Jira are deeply embedded in daily workflows, powering everything from development to project management. But that same trust is now being weaponized. New reporting from Cyber Security News reveals how attackers are exploiting notification systems within these platforms to deliver malicious payloads. Instead of

The post Hackers Are Using GitHub and Jira to Bypass Your Security appeared first on Seceon Inc.

The post Hackers Are Using GitHub and Jira to Bypass Your Security appeared first on Security Boulevard.

A critical authentication bypass vulnerability has emerged in etcd, the foundational distributed key-value store that supports countless cloud-native systems and Kubernetes clusters globally. Tracked as CVE-2026-33413, this high-severity flaw carries a CVSS score of 8.8. It enables attackers to access highly sensitive cluster APIs without proper authorization. An autonomous artificial intelligence pentesting agent named Strix […]

The post Critical etcd Auth Bypass Flaw Allows Unauthorized Access to Sensitive Cluster APIs appeared first on Cyber Security News.

You must login to view this content

You must login to view this content

Ivanti has released security updates addressing two medium-severity vulnerabilities in Ivanti Neurons for ITSM (N-ITSM), its on-premise IT service management platform. The flaws, if exploited, could allow remote authenticated attackers to retain unauthorized access or harvest session data from other users. The company confirmed it is not aware of any active exploitation of either vulnerability […]

The post Ivanti Neurons for ITSM Vulnerabilities Allow Remote Attacker to Obtain User Sessions appeared first on Cyber Security News.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to organizations regarding two severe Microsoft vulnerabilities. On April 13, 2026, the agency officially added flaws affecting Microsoft Exchange Server and the Windows Common Log File System (CLFS) Driver to its Known Exploited Vulnerabilities (KEV) catalog. According to CISA’s latest threat intelligence update, […]

The post CISA Warns of Microsoft Exchange and Windows CLFS Vulnerabilities Exploited in Attacks appeared first on Cyber Security News.