Blog – Page 12 – Cyber Mike

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT (aka Winos 4.0) for persistent remote access.

“In this campaign, the group combines new vulnerable-driver abuse, newly observed abuse of legitimate

Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms

Unauthenticated attackers could send HTTP requests to an exposed endpoint to execute commands inside the MCP bridge container.

The post Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms appeared first on SecurityWeek.

1 in 5 Data Center Assets Are Within Easy Reach of Attackers

Claroty has analyzed 750,000 cyber-physical systems across some of the world’s largest data center facilities.

The post 1 in 5 Data Center Assets Are Within Easy Reach of Attackers appeared first on SecurityWeek.

US and Allies Update SBOM Guidance

Five years after the initial release, the refresh introduces new elements, removes others, and updates terminology.

The post US and Allies Update SBOM Guidance appeared first on SecurityWeek.

Chrome 151 Patches 370 Vulnerabilities

The major browser update resolves roughly 80 critical- and high-severity security defects.

The post Chrome 151 Patches 370 Vulnerabilities appeared first on SecurityWeek.

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, hospitality, and aerospace sectors.

The activity, which began on July 22, 2026, involves the

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US.

Previously authorized models can still be sold, and devices people already own are unaffected. Federal purchases and use

Cisco Secure FMC Zero-Day Exploited in the Wild

The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.

The post Cisco Secure FMC Zero-Day Exploited in the Wild appeared first on SecurityWeek.

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and a wallet-draining script pushed into at least 18 packages carrying more than 2 billion weekly downloads between them.

The original Aikido and Wiz reports did not attribute the

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation.

The vulnerability, assigned CVE-2026-20316 (CVSS score: 5.3), could permit an unauthenticated, remote attacker to log

Cyber News