CosmicBytez Labs https://labs.cosmicbytez.ca IT & Cybersecurity Intelligence - News, Security Alerts, HOWTOs, and Project Guides en-ca Sat, 15 Aug 2026 17:02:53 GMT https://labs.cosmicbytez.ca/images/icon.png CosmicBytez Labs https://labs.cosmicbytez.ca <![CDATA[Hackers Arrested Over €30M Bank Fraud Exploiting Service Provider Flaw]]> https://labs.cosmicbytez.ca/news/2026-08-15-hackers-arrested-over-30m-bank-fraud-exploiting-service-provider-flaw https://labs.cosmicbytez.ca/news/2026-08-15-hackers-arrested-over-30m-bank-fraud-exploiting-service-provider-flaw Sat, 15 Aug 2026 00:00:00 GMT news cybercrime banking fraud supply-chain arrest third-party-risk <![CDATA[How Anthropic Plans to Watermark Claude's AI-Generated Text]]> https://labs.cosmicbytez.ca/news/2026-08-15-how-anthropic-plans-to-watermark-claudes-ai-generated-text https://labs.cosmicbytez.ca/news/2026-08-15-how-anthropic-plans-to-watermark-claudes-ai-generated-text Sat, 15 Aug 2026 00:00:00 GMT news Anthropic Claude AI watermarking EU-AI-Act SynthID C2PA <![CDATA[New Evooo1Bot Linux Botnet Turns Routers Into Traffic Relay Nodes]]> https://labs.cosmicbytez.ca/news/2026-08-15-new-evooo1bot-linux-botnet-turns-routers-into-traffic-relay-nodes https://labs.cosmicbytez.ca/news/2026-08-15-new-evooo1bot-linux-botnet-turns-routers-into-traffic-relay-nodes Sat, 15 Aug 2026 00:00:00 GMT news botnet Linux router Mirai SOCKS5 threat-intel <![CDATA[CVE-2026-63700: Dell Wyse Management Suite Privilege Escalation]]> https://labs.cosmicbytez.ca/security/cve-2026-63700 https://labs.cosmicbytez.ca/security/cve-2026-63700 Sat, 15 Aug 2026 00:00:00 GMT security CVE Dell Wyse privilege-escalation enterprise patch <![CDATA[CVE-2026-72819: Grav CMS RCE via ZIP Upload Bypass in Flex Objects Plugin]]> https://labs.cosmicbytez.ca/security/cve-2026-72819 https://labs.cosmicbytez.ca/security/cve-2026-72819 Sat, 15 Aug 2026 00:00:00 GMT security CVE Grav CMS Remote Code Execution File Upload PHP Flex Objects <![CDATA[Cyera's $1B Oasis Security Acquisition Is All About AI Agent Control]]> https://labs.cosmicbytez.ca/news/2026-08-14-cyeras-oasis-security-buy-is-all-about-ai-agent-control https://labs.cosmicbytez.ca/news/2026-08-14-cyeras-oasis-security-buy-is-all-about-ai-agent-control Fri, 14 Aug 2026 00:00:00 GMT news AI Security Identity Data Security Mergers and Acquisitions Agentic AI <![CDATA[Data Analyst Sent to Prison for Stealing Data, Extorting Employer]]> https://labs.cosmicbytez.ca/news/2026-08-14-data-analyst-sent-to-prison-for-stealing-data-extorting-employer https://labs.cosmicbytez.ca/news/2026-08-14-data-analyst-sent-to-prison-for-stealing-data-extorting-employer Fri, 14 Aug 2026 00:00:00 GMT news Insider Threat Cybercrime Legal <![CDATA[France Investigates Tax Authority Breach After Hacker Claims 600,000 Victims]]> https://labs.cosmicbytez.ca/news/2026-08-14-france-investigates-tax-authority-breach-after-hacker-claims-600000-victims https://labs.cosmicbytez.ca/news/2026-08-14-france-investigates-tax-authority-breach-after-hacker-claims-600000-victims Fri, 14 Aug 2026 00:00:00 GMT news Data Breach France Government Tax Authority DGFiP Identity Theft <![CDATA[Hackers Exploiting Unpatched GeoServer Zero-Day With SQL Injection to RCE]]> https://labs.cosmicbytez.ca/news/2026-08-14-hackers-exploiting-unpatched-geoserver-zero-day https://labs.cosmicbytez.ca/news/2026-08-14-hackers-exploiting-unpatched-geoserver-zero-day Fri, 14 Aug 2026 00:00:00 GMT news Zero-Day GeoServer SQL Injection RCE Active Exploitation Geospatial <![CDATA[In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities]]> https://labs.cosmicbytez.ca/news/2026-08-14-in-other-news-rapid7-layoffs-hacking-a-boeing-737-refrigeration-system-vulnerabi https://labs.cosmicbytez.ca/news/2026-08-14-in-other-news-rapid7-layoffs-hacking-a-boeing-737-refrigeration-system-vulnerabi Fri, 14 Aug 2026 00:00:00 GMT news Security Roundup Rapid7 Aviation Security North Korea ICS Security DEF CON <![CDATA[Max Severity SAP Commerce Cloud Flaw Now Targeted in Attacks]]> https://labs.cosmicbytez.ca/news/2026-08-14-max-severity-sap-commerce-cloud-flaw-now-targeted-in-attacks https://labs.cosmicbytez.ca/news/2026-08-14-max-severity-sap-commerce-cloud-flaw-now-targeted-in-attacks Fri, 14 Aug 2026 00:00:00 GMT news Vulnerability Cloud Security SAP Security Updates <![CDATA[Over 1,000 Charities Hit by Beacon CRM Data Breach]]> https://labs.cosmicbytez.ca/news/2026-08-14-over-1000-charities-hit-by-beacon-crm-data-breach https://labs.cosmicbytez.ca/news/2026-08-14-over-1000-charities-hit-by-beacon-crm-data-breach Fri, 14 Aug 2026 00:00:00 GMT news Data Breach AWS CRM Nonprofits Cloud Security Secrets Management <![CDATA[Scottish Government Suffers Potentially Widening Data Breach at Prosecutor's Office]]> https://labs.cosmicbytez.ca/news/2026-08-14-scottish-govt-suffers-potentially-widening-data-breach-at-prosecutors-office https://labs.cosmicbytez.ca/news/2026-08-14-scottish-govt-suffers-potentially-widening-data-breach-at-prosecutors-office Fri, 14 Aug 2026 00:00:00 GMT news Data Breach Scotland Government Supply Chain Third Party COPFS <![CDATA[Shell Investigates 'Potential Incident' After Clop Data Theft Claims]]> https://labs.cosmicbytez.ca/news/2026-08-14-shell-investigates-potential-incident-after-clop-data-theft-claims https://labs.cosmicbytez.ca/news/2026-08-14-shell-investigates-potential-incident-after-clop-data-theft-claims Fri, 14 Aug 2026 00:00:00 GMT news Ransomware Cybercrime Data Breach <![CDATA[Ukraine Shuts Down 94 Fraudulent Call Centers, Seizes Millions in Cash]]> https://labs.cosmicbytez.ca/news/2026-08-14-ukraine-shuts-down-94-fraudulent-call-centers-seize-millions-in-cash https://labs.cosmicbytez.ca/news/2026-08-14-ukraine-shuts-down-94-fraudulent-call-centers-seize-millions-in-cash Fri, 14 Aug 2026 00:00:00 GMT news Ukraine Cybercrime Fraud Call Center Law Enforcement SBU <![CDATA[CVE-2026-12949: Critical Account Takeover in WordPress Wishlist Member Plugin]]> https://labs.cosmicbytez.ca/security/cve-2026-12949 https://labs.cosmicbytez.ca/security/cve-2026-12949 Fri, 14 Aug 2026 00:00:00 GMT security CVE WordPress Account Takeover Authentication Bypass Plugin Vulnerability <![CDATA[CVE-2026-15413: WordPress 'Link Factory' Plugin Is an Intentional Backdoor (CVSS 10.0)]]> https://labs.cosmicbytez.ca/security/cve-2026-15413 https://labs.cosmicbytez.ca/security/cve-2026-15413 Fri, 14 Aug 2026 00:00:00 GMT security CVE WordPress Backdoor Supply Chain CWE-912 Critical <![CDATA[CVE-2026-17482: Critical RCE in IBM Documentation Offline]]> https://labs.cosmicbytez.ca/security/cve-2026-17482 https://labs.cosmicbytez.ca/security/cve-2026-17482 Fri, 14 Aug 2026 00:00:00 GMT security CVE IBM Remote Code Execution Path Traversal Critical <![CDATA[CVE-2026-28154: Reflected XSS in WooCommerce WordPress Themes]]> https://labs.cosmicbytez.ca/security/cve-2026-28154 https://labs.cosmicbytez.ca/security/cve-2026-28154 Fri, 14 Aug 2026 00:00:00 GMT security Vulnerability CVE WordPress XSS WooCommerce <![CDATA[CVE-2026-59500: Priority Portal Generator Authentication Bypass — CVSS 10.0]]> https://labs.cosmicbytez.ca/security/cve-2026-59500 https://labs.cosmicbytez.ca/security/cve-2026-59500 Fri, 14 Aug 2026 00:00:00 GMT security CVE ERP Authentication Bypass Priority ERP CWE-287 Critical <![CDATA[CVE-2026-59504: Priority Portal Generator Client-Side Security Bypass (CVSS 9.1)]]> https://labs.cosmicbytez.ca/security/cve-2026-59504 https://labs.cosmicbytez.ca/security/cve-2026-59504 Fri, 14 Aug 2026 00:00:00 GMT security CVE ERP Security Bypass Priority ERP CWE-602 Critical <![CDATA[Adobe Patches Three CVSS 10.0 Flaws in ColdFusion and Campaign Classic]]> https://labs.cosmicbytez.ca/news/2026-08-13-adobe-cvss-10-coldfusion-campaign-classic https://labs.cosmicbytez.ca/news/2026-08-13-adobe-cvss-10-coldfusion-campaign-classic Thu, 13 Aug 2026 00:00:00 GMT news Adobe ColdFusion Campaign Classic RCE patch tuesday critical vulnerability CVE <![CDATA[Akira Hackers Disable EDR with Safe Mode, Steal Data but Fail to Encrypt]]> https://labs.cosmicbytez.ca/news/2026-08-13-akira-hackers-disable-edr-with-safe-mode-steal-data-but-fail-to-encrypt https://labs.cosmicbytez.ca/news/2026-08-13-akira-hackers-disable-edr-with-safe-mode-steal-data-but-fail-to-encrypt Thu, 13 Aug 2026 00:00:00 GMT news Ransomware Akira EDR Bypass Safe Mode Cybercrime Incident Response <![CDATA[Apple Sends New Threat Notification Alerts Over Mercenary Spyware Attacks]]> https://labs.cosmicbytez.ca/news/2026-08-13-apple-sends-new-threat-notification-alerts-over-mercenary-spyware-attacks https://labs.cosmicbytez.ca/news/2026-08-13-apple-sends-new-threat-notification-alerts-over-mercenary-spyware-attacks Thu, 13 Aug 2026 00:00:00 GMT news Apple Spyware iOS Pegasus Threat Intelligence Zero-Click <![CDATA[737 Chrome VPN Extensions Caught Routing Traffic Through Attacker Proxies]]> https://labs.cosmicbytez.ca/news/2026-08-13-chrome-vpn-extensions-proxy-routing https://labs.cosmicbytez.ca/news/2026-08-13-chrome-vpn-extensions-proxy-routing Thu, 13 Aug 2026 00:00:00 GMT news Chrome browser extensions VPN supply chain AiTM malware SOCKS5 <![CDATA[Critical VMware vCenter RCE Flaw Exploited for Reverse SSH Access]]> https://labs.cosmicbytez.ca/news/2026-08-13-critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access https://labs.cosmicbytez.ca/news/2026-08-13-critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access Thu, 13 Aug 2026 00:00:00 GMT news VMware vCenter RCE CVE Exploitation APT Reverse Shell <![CDATA[FBI: Hackers Using Social Engineering to Breach Accounts and Steal Explicit Content]]> https://labs.cosmicbytez.ca/news/2026-08-13-fbi-hackers-using-social-engineering-to-breach-accounts-and-steal-explicit-conte https://labs.cosmicbytez.ca/news/2026-08-13-fbi-hackers-using-social-engineering-to-breach-accounts-and-steal-explicit-conte Thu, 13 Aug 2026 00:00:00 GMT news social-engineering fbi phishing account-takeover sextortion <![CDATA[Germany Moves to Give Spy Agencies Hacking and Sabotage Powers]]> https://labs.cosmicbytez.ca/news/2026-08-13-germany-moves-to-give-spy-agencies-hacking-and-sabotage-powers https://labs.cosmicbytez.ca/news/2026-08-13-germany-moves-to-give-spy-agencies-hacking-and-sabotage-powers Thu, 13 Aug 2026 00:00:00 GMT news government intelligence cybersecurity-policy germany surveillance <![CDATA[Hackers Breach Govt Webmail While Running Parallel Crypto Fraud]]> https://labs.cosmicbytez.ca/news/2026-08-13-hackers-breach-govt-webmail-while-running-parallel-crypto-fraud https://labs.cosmicbytez.ca/news/2026-08-13-hackers-breach-govt-webmail-while-running-parallel-crypto-fraud Thu, 13 Aug 2026 00:00:00 GMT news APT Espionage Cryptocurrency Fraud China Webmail Supply Chain Data Breach <![CDATA[Microsoft Patches LegacyHive Windows Zero-Day That Grants Admin Privileges]]> https://labs.cosmicbytez.ca/news/2026-08-13-microsoft-patches-legacyhive-windows-zero-day-vulnerability https://labs.cosmicbytez.ca/news/2026-08-13-microsoft-patches-legacyhive-windows-zero-day-vulnerability Thu, 13 Aug 2026 00:00:00 GMT news Zero-Day Vulnerability Microsoft Windows Privilege Escalation Patch Tuesday <![CDATA[Ukraine Dismantles 94 Fraudulent Call Centers, Seizes $2M and a Kilogram of Gold]]> https://labs.cosmicbytez.ca/news/2026-08-13-ukraine-shuts-down-94-fraudulent-call-centers-seize-millions-in-cash https://labs.cosmicbytez.ca/news/2026-08-13-ukraine-shuts-down-94-fraudulent-call-centers-seize-millions-in-cash Thu, 13 Aug 2026 00:00:00 GMT news Cybercrime Fraud Ukraine Call Center Scam Law Enforcement <![CDATA[Venture Firm Team8 Secures Additional $365 Million]]> https://labs.cosmicbytez.ca/news/2026-08-13-venture-firm-team8-secures-additional-365-million https://labs.cosmicbytez.ca/news/2026-08-13-venture-firm-team8-secures-additional-365-million Thu, 13 Aug 2026 00:00:00 GMT news cybersecurity venture-capital funding ai-security team8 <![CDATA[Who Vets AI's Code? The Scale Challenge Facing Open Source Ingestion]]> https://labs.cosmicbytez.ca/news/2026-08-13-who-vets-ais-code-the-scale-challenge-facing-open-source-ingestion https://labs.cosmicbytez.ca/news/2026-08-13-who-vets-ais-code-the-scale-challenge-facing-open-source-ingestion Thu, 13 Aug 2026 00:00:00 GMT news ai-security open-source supply-chain software-development slopsquatting <![CDATA[CVE-2026-11325: Cloudflare pages-action GitHub Actions RCE]]> https://labs.cosmicbytez.ca/security/cve-2026-11325 https://labs.cosmicbytez.ca/security/cve-2026-11325 Thu, 13 Aug 2026 00:00:00 GMT security CVE GitHub Actions Cloudflare CI/CD RCE credential-theft <![CDATA[CVE-2026-14182: WooCommerce Email Verification Bypass Allows Account Takeover]]> https://labs.cosmicbytez.ca/security/cve-2026-14182 https://labs.cosmicbytez.ca/security/cve-2026-14182 Thu, 13 Aug 2026 00:00:00 GMT security WordPress WooCommerce CVE-2026-14182 Account Takeover Type Juggling Web Security <![CDATA[CVE-2026-19001: MongoDB BI Connector ODBC Driver Buffer Overflow (CVSS 9.8)]]> https://labs.cosmicbytez.ca/security/cve-2026-19001 https://labs.cosmicbytez.ca/security/cve-2026-19001 Thu, 13 Aug 2026 00:00:00 GMT security CVE MongoDB Buffer Overflow RCE Database Security <![CDATA[Cisco Warns of ASA and FTD VPN Flaw Actively Exploited to Crash Firewalls]]> https://labs.cosmicbytez.ca/news/2026-08-12-cisco-asa-ftd-vpn-dos-cve-2026-20349 https://labs.cosmicbytez.ca/news/2026-08-12-cisco-asa-ftd-vpn-dos-cve-2026-20349 Wed, 12 Aug 2026 00:00:00 GMT news Cisco CVE Vulnerability VPN Firewall Denial of Service <![CDATA["City-Forum" Data-Theft Attacks Target Salesforce and ServiceNow Portals]]> https://labs.cosmicbytez.ca/news/2026-08-12-city-forum-data-theft-attacks-target-salesforce-servicenow-portals https://labs.cosmicbytez.ca/news/2026-08-12-city-forum-data-theft-attacks-target-salesforce-servicenow-portals Wed, 12 Aug 2026 00:00:00 GMT news Cloud Security Salesforce ServiceNow Data Theft Misconfiguration <![CDATA[DeadLock Ransomware Uses Blockchain to Resist Infrastructure Takedown]]> https://labs.cosmicbytez.ca/news/2026-08-12-deadlock-ransomware-blockchain-infrastructure https://labs.cosmicbytez.ca/news/2026-08-12-deadlock-ransomware-blockchain-infrastructure Wed, 12 Aug 2026 00:00:00 GMT news Ransomware Blockchain Cybercrime Threat Intelligence Infrastructure <![CDATA[Hackers Exploit Critical Adobe Commerce Flaw to Hijack Customer Accounts]]> https://labs.cosmicbytez.ca/news/2026-08-12-hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts https://labs.cosmicbytez.ca/news/2026-08-12-hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts Wed, 12 Aug 2026 00:00:00 GMT news Adobe Commerce Magento CVE-2026-71362 E-Commerce Security Account Takeover Exploitation Vulnerability <![CDATA[Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor]]> https://labs.cosmicbytez.ca/news/2026-08-12-lazarus-exploits-windows-zero-day-to-gain-system-access-and-deploy-backdoor https://labs.cosmicbytez.ca/news/2026-08-12-lazarus-exploits-windows-zero-day-to-gain-system-access-and-deploy-backdoor Wed, 12 Aug 2026 00:00:00 GMT news Zero-Day Lazarus Group Windows Kernel Exploit Rootkit Backdoor CVE-2026-68820 <![CDATA[Lazarus Hackers Exploited Windows Zero-Day to Target Defense Firms]]> https://labs.cosmicbytez.ca/news/2026-08-12-lazarus-hackers-exploited-windows-zero-day-to-target-defense-firms https://labs.cosmicbytez.ca/news/2026-08-12-lazarus-hackers-exploited-windows-zero-day-to-target-defense-firms Wed, 12 Aug 2026 00:00:00 GMT news Zero-Day Lazarus Group North Korea Windows CVE-2026-68820 Nation-State Defense Sector <![CDATA[Microsoft Plugs Nearly 400 Security Holes in August 2026 Patch Tuesday]]> https://labs.cosmicbytez.ca/news/2026-08-12-microsoft-plugs-nearly-400-security-holes https://labs.cosmicbytez.ca/news/2026-08-12-microsoft-plugs-nearly-400-security-holes Wed, 12 Aug 2026 00:00:00 GMT news Patch Tuesday Microsoft Windows Zero-Day CVE Vulnerability Management <![CDATA[SAP Commerce Cloud RCE Flaw Lets Unauthenticated Attackers Execute Arbitrary Code]]> https://labs.cosmicbytez.ca/news/2026-08-12-sap-commerce-cloud-rce-cve-2026-58231 https://labs.cosmicbytez.ca/news/2026-08-12-sap-commerce-cloud-rce-cve-2026-58231 Wed, 12 Aug 2026 00:00:00 GMT news SAP CVE RCE Vulnerability Cloud Security Security Updates Critical <![CDATA[Signal Adds Automatic Key Verification to Thwart Man-in-the-Middle Attacks]]> https://labs.cosmicbytez.ca/news/2026-08-12-signal-adds-new-security-feature-to-thwart-man-in-the-middle-attacks https://labs.cosmicbytez.ca/news/2026-08-12-signal-adds-new-security-feature-to-thwart-man-in-the-middle-attacks Wed, 12 Aug 2026 00:00:00 GMT news Signal Encryption Privacy Key Transparency MITM Security <![CDATA[Wesco Confirms Security Incident After ExfilSquad Claims 2.6M Record Theft]]> https://labs.cosmicbytez.ca/news/2026-08-12-wesco-confirms-security-incident-after-exfilsquad-claims-data-theft https://labs.cosmicbytez.ca/news/2026-08-12-wesco-confirms-security-incident-after-exfilsquad-claims-data-theft Wed, 12 Aug 2026 00:00:00 GMT news Data Breach Extortion CRM ExfilSquad Supply Chain Incident Response <![CDATA[PicketLink SAML Authentication Bypass — Forged Assertions Accepted Without Validation]]> https://labs.cosmicbytez.ca/security/cve-2026-10579 https://labs.cosmicbytez.ca/security/cve-2026-10579 Wed, 12 Aug 2026 00:00:00 GMT security CVE SAML Authentication Bypass Java Critical NVD <![CDATA[CVE-2026-18961: WordPress VentraConnect Plugin Authentication Bypass]]> https://labs.cosmicbytez.ca/security/cve-2026-18961 https://labs.cosmicbytez.ca/security/cve-2026-18961 Wed, 12 Aug 2026 00:00:00 GMT security CVE WordPress Authentication Plugin Vulnerability <![CDATA[TypeBot OAuth Credential Takeover via Low-Privilege Collaborator]]> https://labs.cosmicbytez.ca/security/cve-2026-48765 https://labs.cosmicbytez.ca/security/cve-2026-48765 Wed, 12 Aug 2026 00:00:00 GMT security TypeBot OAuth CVE-2026-48765 Privilege Escalation Credential Takeover Critical <![CDATA[SonicWall GMS Unauthenticated Command Injection RCE]]> https://labs.cosmicbytez.ca/security/cve-2026-66147 https://labs.cosmicbytez.ca/security/cve-2026-66147 Wed, 12 Aug 2026 00:00:00 GMT security SonicWall GMS CVE-2026-66147 RCE Command Injection Critical