💀 Gentlemen ransomware doesn’t just encrypt — it kills nearly 180 security tools before it locks your files. For Defenders: cybersecuritynews.com/gentle… #cybersecuritynews

Microsoft Edge Vulnerability Allows Remote Attacker to Execute Arbitrary Code Source: cybersecuritynews.com/micros… Microsoft has disclosed a new security vulnerability in Microsoft Edge (Chromium-based) that could allow a remote attacker to execute arbitrary code on affected systems. Tracked as CVE-2026-57992, the flaw stems from a Use-After-Free (UAF) memory corruption issue and carries a CVSS score of 7.5 (High). As of publication, there is no available patch or public proof-of-concept exploit. CVE-2026-57992 is classified as a critical Use-After-Free vulnerability affecting Microsoft Edge’s Chromium engine. The flaw allows an unauthorized attacker to execute code over a network by tricking a user into visiting a specially crafted webpage. #cybersecuritynews

🔐 Microsoft’s New Option Allows Organizations to Block Copilot Access to Office Files Source: cybersecuritynews.com/micros… Microsoft has announced a significant update to its Microsoft 365 security and compliance features, introducing enhanced controls that allow organizations to block Copilot and other connected experiences from analyzing content in Office files. According to Microsoft Message Center alert MC1297982, the company is expanding an existing sensitivity label setting, “Prevent some connected experiences that analyze content,” to enforce a broader restriction across Word, Excel, and PowerPoint. This means that files tagged with the configured label will no longer be sent to any Microsoft-connected services, including AI-powered tools like Copilot, for content analysis. #cybersecuritynews

⚠️ New iPhone BootROM Vulnerability Exposes Apple SoCs to Full Chain-of-Trust Compromise Source: cybersecuritynews.com/iphone… A novel BootROM vulnerability, dubbed usbliter8, affects Apple devices powered by A12, S4/S5, and A13 SoCs. The exploit chains a hardware-level bug in the Synopsys DWC2 USB controller with a firmware configuration flaw, enabling full application processor boot-chain compromise with no software patch possible due to the immutable nature of BootROM code. The vulnerability originates in how the DWC2 USB controller handles consecutive USB Setup packets. The controller stores up to three Setup packets in memory before resetting the DMA base address (stored in the DOEPDMA register) to its starting position, functioning like a ring buffer. #cybersecuritynews

PoC Exploit Released for HTTP/2 Bomb Remote DoS Vulnerability in Apache HTTP Server Source: cybersecuritynews.com/http-2… A proof-of-concept (PoC) exploit has been publicly released for a critical Denial of Service vulnerability in Apache HTTP Server, tracked as CVE-2026-49975, dubbed the "HTTP/2 Bomb." The flaw allows remote attackers to exhaust server memory and disrupt services without authentication, posing a significant risk to organizations running unpatched Apache deployments. The publicly released PoC, available on GitHub, demonstrates the attack using a Python-based exploit script. The attack is reproducible in a Dockerized environment, where the server is containerized with an 8 GB memory limit. Upgrade immediately to Apache HTTP Server 2.4.68 or later. #cybersecuritynews

🚨 Teams and Google Drive Leveraged to Compromise Systems Within 20 Minutes Source: cybersecuritynews.com/micros… Hackers are increasingly abusing trusted enterprise platforms such as Microsoft Teams and Google Drive to deploy stealthy remote access malware, with a newly observed campaign leveraging social engineering and cloud-based command-and-control to evade detection. Within minutes, the threat actor delivered a Java-based remote access trojan known as Nimbus RAT, completing the compromise in under 20 minutes. The attack followed a structured, repeatable kill chain, highlighting the growing operational maturity of these campaigns. #cybersecuritynews

Microsoft Unveils Always-On AI Agent Scout to Integrate With Teams, Outlook, and More Source: cybersecuritynews.com/micros… Microsoft has officially introduced Microsoft Scout, its first-ever "Autopilot" AI agent, a persistent, always-on autonomous assistant designed to operate continuously across Microsoft 365 apps without waiting to be prompted. Microsoft is launching a new category of AI agents it calls Autopilots, always-on, identity-bearing systems that act autonomously on a user's behalf. Unlike traditional AI assistants that respond only when queried, Autopilots remain active in the background, monitoring signals, reacting to triggers, and resuming tasks without user initiation. Scout is the first of this new class, and Microsoft has indicated more Autopilots will follow. #cybersecuritynews #Technews

🚨 Fake Claude Code Installer Via Google Sites Delivers Credential-Stealing Malware Source: cybersecuritynews.com/fake-c… A recently identified campaign uses fake pages mimicking Claude Code and OpenAI Codex, hosted on trusted Google Sites infrastructure, to trick users into running commands that quietly steal their credentials and other sensitive personal data from their devices. The attack follows a technique known as ClickFix, where victims are shown what looks like a legitimate setup page and told to execute a short command. There is no file downloaded in the traditional sense. Instead, the entire malicious operation runs silently in memory, making it much harder for standard security tools to catch it in the act. #cybersecuritynews

🚨 HTTP/2 Bomb — Remote DoS Exploit Hits nginx, Apache, IIS, Envoy, and Cloudflare Pingora Source: cybersecuritynews.com/http-2… A newly disclosed remote denial-of-service exploit dubbed "HTTP/2 Bomb" targets the default HTTP/2 configurations of the world's most widely deployed web servers, nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora, enabling a single attacker on a home internet connection to exhaust tens of gigabytes of server memory in seconds. Chaining two techniques that have individually been known to the security community for nearly a decade: an HPACK compression bomb and a Slowloris-style connection hold. #cybersecuritynews #vulnerability

🚨 Hackers Exploit Microsoft Teams' Collaboration Features to Impersonate IT Helpdesk Staff Source: cybersecuritynews.com/micros… A growing wave of vishing (voice phishing) campaigns in which threat actors abuse Microsoft Teams’ external collaboration features to impersonate IT helpdesk personnel and investigators is now turning to the Microsoft 365 Unified Audit Log (UAL) as a critical forensic data source to reconstruct attack timelines. The attack chain begins when a threat actor operating from an external or cross-tenant Teams account initiates an unsolicited call or message to a targeted employee, presenting as internal IT support. #cybersecuritynews