Cybersecurity News – The Ash Hacker News

Atlassian Rovo vulnerability exposing Jira and Confluence data

AI Security Cyber Attacks Cybersecurity News

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

Atlassian's Rovo AI assistant can be manipulated into collecting Jira and Confluence data that an authenticated user is allowed to access and sending that information to an attacker-controlled server. Two…

No Comments

Chinese Threat Actor Deploys GHOSTBLADE on iOS Using Leaked DarkSword Kit

AI Security Cyber Attacks Cyber Espionage

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

A previously unidentified Chinese threat actor has been linked to a campaign targeting Apple iOS devices by using a publicly leaked version of the DarkSword exploit kit. According to attack…

No Comments

Illustration depicting the Confucius threat group targeting Pakistan with WooperStealer and Anondoor malware through spear-phishing and DLL side-loading attacks.

AI Security Cyber Attacks Cyber Espionage

Confucius Hackers Target Pakistan with WooperStealer and Anondoor Malware

Cybersecurity researchers have uncovered a new phishing campaign attributed to the Confucius threat group that targets organizations in Pakistan using two malware families, WooperStealer and Anondoor. According to Fortinet FortiGuard…

No Comments

Illustration showing a SideCopy spear-phishing campaign targeting Afghanistan's Ministry of Finance with Xeno RAT through a malicious LNK file and HTA-based malware delivery chain.

AI Security Cyber Attacks Cyber Espionage

Pakistan-Linked SideCopy Targets Afghanistan’s Finance Ministry with Xeno RAT

Cybersecurity researchers have uncovered a new spear-phishing campaign believed to be carried out by the Pakistan-linked SideCopy threat group, targeting Afghanistan's Ministry of Finance with the open-source Xeno RAT remote…

No Comments

Illustration of the Pakistan-linked SideCopy APT targeting India's DRDO with a phishing campaign delivering Action RAT and AuTo Stealer malware.

AI Security Cyber Attacks Cyber Espionage

Pakistan-Linked SideCopy Targets India’s Ministry of Defence in New Action RAT Phishing Campaign

A Pakistan-linked advanced persistent threat (APT) group known for targeting organizations in India and Afghanistan has been connected to a new phishing campaign that distributes the Action RAT malware. Security…

No Comments

Feature image illustrating the wp2shell WordPress core vulnerability that enables unauthenticated remote code execution through CVE-2026-63030 and CVE-2026-60137.

Cyber Attacks Cybersecurity News

New wp2shell WordPress Core Vulnerability Allows Unauthenticated Remote Code Execution

Updated July 18, 2026: The vulnerabilities have now received official CVE identifiers. Researchers have also published the complete exploitation process, confirmed an important condition involving persistent object caching, and released…

No Comments