Security News

Live news from trusted publications, matched against DayBreach CVE data.

The Hacker News1 mo ago

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware application, running the malware under a trusted process to slip past users who add such software to their antivirus exclusions. Russian cybersecurity vendor Kaspersky said the attackers built the disguise around QN Wallpaper, a genuine Chinese desktop-wallpaper tool

Related Companies
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News1 mo ago

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK and Gambit Security. The two independent analyses are based on exposed infrastructure associated with the Russian-speaking cybercrime group, leading to the discovery of its

Related Companies
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News1 mo ago

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machine. Anthropic’s new Compliance API endpoints give security teams their clearest view yet into that activity. They also expose a larger problem: activity logs alone cannot tell you whether an agent’s access is legitimate. AI has moved from the browser tab to the

Related Companies
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Cyber Express1 mo ago

Boston Scientific Cyberattack Limited to Unauthorized Access on Certain On-Premises Systems

As per Boston Scientific’s Aug. 30 update, “the unauthorized activity is limited to certain on-premises systems,” providing the clearest indication yet of the scope of the cybersecurity incident that has disrupted the medical device maker’s global network and business operations. Boston Scientific said the investigation into the disruption remains ongoing, with third-party cybersecurity experts. Based on its investigation to date, the company said it has found no indication of unauthorized activity in its environment related to the incident since Aug. 25. The company also clarified that its cl

Related Companies
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Cyber Express1 mo ago

PaperCut Issues Second Emergency Patch as Researchers Break Fix for Exploited Zero-Days

PaperCut released a second emergency patch last Friday, for two vulnerabilities in its NG and MF print management servers that attackers are already exploiting, after security researchers demonstrated that the vendor's first fix could be bypassed. The two flaws work as a chain. CVE-2026-81578, rated 8.8 on the CVSS scale, is an improper access control weakness in the PaperCut web management interface that lets unauthenticated remote requests reach administrative functions before the server finishes validating access. CVE-2026-82078, rated 9.4, is an unsafe dynamic class-loading flaw in the pro

Related Companies
Read at the source

921-930 / 1650 news items shown