Sysblue Cyber Solutions

#cyberNEWS Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways. bleepingcomputer.com/news/security/…

#cyberNEWS Security software company Ivanti has released patches to address two critical vulnerabilities in its Sentry secure mobile gateway solution, including a maximum-severity flaw that enables remote attackers to execute code with root privileges. bleepingcomputer.com/news/security/…

#cyberNEWS Google patches new Chrome zero-day flaw exploited in the wild. Google has released emergency updates to patch another Chrome zero-day vulnerability that has been exploited in the wild, the fifth such flaw patched since the start of the year. bleepingcomputer.com/news/security/…

#cyberNEWS WhatsApp says it disrupted new NSO spyware phishing attacks. WhatsApp has detected and stopped spear-phishing campaigns allegedly conducted by the NSO Group after investigating user reports of social engineering attacks. bleepingcomputer.com/news/security/…

#cyberNEWS C0XMO botnet spreads via DD-WRT router flaw, kills rival malware. A new variant of the Gafgyt botnet called C0XMO is targeting DD-WRT router firmware and can move to other device types with various CPU architectures. bleepingcomputer.com/news/security/…

#cyberNEWS Critical Everest Forms Pro flaw exploited to take over WordPress sites. Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. bleepingcomputer.com/news/security/…

#cyberNEWS A Chinese espionage group tracked as UNC5221 has been accessing Microsoft 365 environments using the Brickstorm backdoor and previously undocumented malware named Plenet and AgentPSD. bleepingcomputer.com/news/security/…

#cyberNEWS DentaQuest data breach exposed info of 2.6 million accounts. A data breach at the dental benefits administrator DentaQuest has reportedly exposed the sensitive data of 2.6 million accounts. bleepingcomputer.com/news/security/…

#cyberNEWS New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute. A new denial-of-service (DoS) attack dubbed HTTP/2 Bomb can be launched from a single machine to take down web servers within seconds. bleepingcomputer.com/news/security/…

#cyberNEWS Microsoft Exchange Online outage causes email delays, failures. Microsoft is working to address a widespread service issue affecting the mail flow pipeline for Exchange Online customers across North America, Asia-Pacific (APAC), and Europe. bleepingcomputer.com/news/microsoft…

#cyberNEWS WordPress malware campaign hides payloads in Steam profiles. Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control (C2) data. bleepingcomputer.com/news/security/…

#cyberNEWS Threat actors are abusing ChatGPT's content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application. bleepingcomputer.com/news/security/…

#cyberNEWS Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. bleepingcomputer.com/news/security/…

#cyberNEWS The Glassworm botnet targeting developers in software supply-chain attacks has been disrupted after researchers took down its resilient command-and-control infrastructure relying on Solana blockchain transactions and the BitTorrent DHT network. bleepingcomputer.com/news/security/…

#cyberNEWS How Varonis Atlas integrates Claude Compliance API for AI governance. Varonis announced an integration with the Claude Compliance API, bringing Claude Enterprise and Claude Platform activity into Varonis' Atlas AI Security Platform.  bleepingcomputer.com/news/security/…

#cyberNEWS Anthropic appears to be preparing for the public rollout of "Mythos," which was announced in April as a restricted model that poses major security risks to private and public software. bleepingcomputer.com/news/artificia…

#cyberNEWS A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. bleepingcomputer.com/news/security/…

#cyberNEWS Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netflix, Disney+, and Spotify. bleepingcomputer.com/news/legal/ita…

#cyberNEWS Financial crime investigators in the Netherlands (FIOD) arrested two men and seized 800 servers linked to a web hosting company that enabled cyberattacks, interference operations, and disinformation campaigns. bleepingcomputer.com/news/security/…

#cyberNEWS Google has accidentally leaked details about an unfixed issue in Chromium that keeps JavaScript running in the background even when the browser is closed, allowing remote code execution on the device. bleepingcomputer.com/news/security/…