Wednesday, May 6, 2026
HomeCyber News

Cyber News

Hackers Exploiting Langflow RCE Vulnerability to Deploy Flodrix Botnet

A critical vulnerability in Langflow to deliver the Flodrix botnet malware. The vulnerability, tracked as CVE-2025-3248 with a CVSS score of 9.8, affects Langflow versions prior to 1.3.0 and allows unauthenticated remote code execution on vulnerable servers. The vulnerability, tracked as CVE-2025-3248 with a...

Hackers Exploiting Zyxel RCE Vulnerability Through UDP Port

A critical remote code execution vulnerability affecting Zyxel Internet Key Exchange (IKE) packet decoders. GreyNoise Intelligence has observed a concentrated burst of exploitation attempts targeting CVE-2023-28771. The security firm detected 244 unique IP addresses attempting to exploit the vulnerability over UDP port 500 on...

Washington Post Journalists’ Email Accounts Hacked in ‘Targeted’ Cyberattack

The Washington Post has confirmed that cybercriminals successfully infiltrated email accounts belonging to select journalists in what security experts are characterizing as a sophisticated targeted attack. The breach, discovered last Thursday, prompted immediate security protocols and a comprehensive system-wide credential reset affecting all newspaper...

Zoomcar Data Breach: 8.4 Million Users’ Sensitive Information Exposed

Car-sharing platform Zoomcar Holdings, Inc. has disclosed a significant cybersecurity breach that compromised personal information of approximately 8.4 million users. The Delaware-incorporated company, which operates primarily in India, filed a Form 8-K with the Securities and Exchange Commission on June 9, 2025, detailing the...

Authorities Take Down Darknet Market Archetyp in Joint Operation ‘Deep Sentinel

In a coordinated international law enforcement operation, authorities have successfully dismantled one of the world's largest darknet marketplaces, "Archetyp Market," resulting in the arrest of its alleged German administrator and the seizure of millions in assets. The operation, involving German, Spanish, Dutch, and Swedish...

Microsoft Purview DLP to Limit Microsoft 365 Copilot’s Access to Sensitive Emails

Microsoft is expanding its data protection capabilities by integrating Data Loss Prevention (DLP) controls with Microsoft 365 Copilot, specifically targeting emails containing sensitivity labels. This significant update will automatically prevent Copilot from processing sensitive email content as enterprise grounding data, with the public preview...