Cyber Security News

Citrix has disclosed four XenServer vulnerabilities, including three that could let a malicious user with elevated rights inside a virtual machine compromise or crash the underlying host. Citrix published the high-severity bulletin CTX697170 on October 13, 2026, covering XenServer 8.4 and XenServer 9. Citrix lists the advisory in its XenServer security bulletin archive. The host-impacting […]

The post Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems appeared first on Cyber Security News.

Hackers are using ClickFix tricks to install malware loaders and Python tunnels on Windows systems, creating access that could support ransomware attacks. A late September incident shows how a user running a command can start an infection chain built around trusted Microsoft programs, hidden code, and encrypted network traffic. The attack was stopped before ransomware […]

The post Hackers Use ClickFix and Python Tunnels to Prepare Systems for Ransomware Attacks appeared first on Cyber Security News.

A Chinese-run phishing network has been linked to one billion phishing emails targeting 75,000 organizations, according to a report published on October 14, 2026. The operation centers on Iron Man System, a paid phishing platform that lets criminals deploy fake websites and collect sensitive information without building their own tools. The report lists those headline […]

The post Chinese Phishing Network Linked to 1 Billion Messages Targeting 75,000 Organizations appeared first on Cyber Security News.

Simply viewing an online advertisement can be enough to infect a device with powerful spyware, without the user clicking, downloading a file, or seeing any warning. Citizen Lab researchers documented what they call the first public technical proof of zero-click mercenary spyware delivered through targeted ads. The method, named “AdFection,” infected devices at international news […]

The post Just Viewing an Online Ad Can Infect Your Device With Spyware, Researchers Reveal appeared first on Cyber Security News.

AI agents can expose API keys and cloud secrets during ordinary work, even when no malware is present. When an agent runs a command, reads a configuration file or fetches a secret to complete a task. Even sensitive data can move from protected storage into command histories, logs, agent transcripts and the model’s context. The […]

The post AI Agents Create an Unseen Credential Surface That Exposes API Keys and Cloud Secrets appeared first on Cyber Security News.

The UK Legal Aid Agency (LAA) has confirmed that its 2025 cyberattack stole personal records dating back to 1978. An updated investigation found approximately 250,000 records from before 2007, widening the known scope of a breach that affected legal aid applicants, providers and some probation service users. In its October 14, 2026 update, the agency […]

The post UK Legal Aid Agency Data Breach Exposes Personal Records Dating Back to 1978 appeared first on Cyber Security News.

A Windows remote access trojan called KGB RAT gives attackers a way to spy on infected computers, collect credentials and control a victim’s desktop. The malware is sold as a service and advertised with a “fully undetectable” crypter that its sellers claim can bypass Windows Defender and other antivirus products. That claim should be treated […]

The post KGB RAT Malware Bypasses Windows Defender to Steal Credentials and Control PCs appeared first on Cyber Security News.

Next.js has released security updates for two critical vulnerabilities that could let remote attackers run malicious code without logging in. A third, high-severity flaw could stop affected applications from serving requests. The issues involve cached functions, SVG image processing, and Server Actions, with fixes available in Next.js 16.4.1 and 15.5.28. Published on October 14, 2026, […]

The post Critical Next.js Vulnerabilities Allow Hackers to Execute Malicious Code Remotely appeared first on Cyber Security News.

A fake Google Chrome app appeared on Google Play with a screenshot showing more than 100,000 downloads, raising fresh concerns about app checks and paid search results. The listing copied Chrome’s name, icon, and description, but its developer was Hizbartech rather than Google LLC. The app reportedly appeared above the real browser as a sponsored […]

The post Fake Chrome App on Google Play Evades Detection and Reaches 100,000+ Downloads appeared first on Cyber Security News.

Microsoft has disclosed three Active Directory vulnerabilities that could let a remote attacker bypass a key security feature in Windows domain environments. The issues are tracked as CVE-2026-69982, CVE-2026-96252, and CVE-2026-108131, and administrators should review Microsoft’s Security Update Guide entries and deploy the available fixes as soon as possible. Active Directory is the central identity […]

The post Multiple Active Directory Vulnerabilities Let Attackers Bypass Security Feature Remotely appeared first on Cyber Security News.

Hackers are exploiting a high-severity flaw in Palo Alto Networks PAN-OS that allows authenticated attackers to run code with root privileges on affected firewalls. Tracked as CVE-2026-0322, the vulnerability affects the management interface, with the company confirming “very limited exploitation” and urging customers to apply fixes as soon as possible. Palo Alto Networks published its […]

The post Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls appeared first on Cyber Security News.

Cisco has warned that attackers are actively exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway that can give them root access to affected appliances. Tracked as CVE-2026-76519, the flaw carries a CVSS score of 9.8 and allows attacks through specially crafted email attachments without requiring a login. Cisco published its advisory on October […]

The post Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks appeared first on Cyber Security News.

F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers crash worker processes by sending crafted HTTP requests. In certain setups, the memory errors could also allow code execution, although F5 says that outcome requires Address Space Layout Randomization, known as ASLR, to be disabled […]

The post Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code appeared first on Cyber Security News.

The curl project released curl 8.23.0 on October 14, 2026, announcing 24 security fixes affecting the widely used data transfer tool and its underlying library, libcurl. The vulnerabilities include credential leaks, authentication errors, command injection, and flaws that can disrupt applications. The release also removes SMB and SMBS protocol support, making compatibility checks important before […]

The post 24 Security Vulnerabilities Patched in curl Used Across 30 Billion Installations appeared first on Cyber Security News.

As MSSPs take on more clients, alert volumes grow fast. Analyst capacity usually doesn’t. That gap shows up in triage and response first. Teams spend too much time checking IOCs, switching between tools, rebuilding context, and escalating cases that could have been closed earlier. Across thousands of investigations, those extra minutes turn into slower response, more […]

The post How MSSPs Can Cut Tier 1 Bottlenecks Eating into Profit Margins  appeared first on Cyber Security News.

Microsoft has confirmed a Windows 11 Remote Desktop issue that can prevent non-admin users from connecting to remote computers with Administrator protection enabled. The problem follows the September 22, 2026, non-security preview update, KB5124010, or later updates. It mainly affects company-managed computers used as Remote Desktop hosts. Failed connections may return error 0xC000000D and display […]

The post Microsoft’s Recent Windows Updates Break Remote Desktop Services With Error “0xC000000D” appeared first on Cyber Security News.

Hackers used a fake WatchGuard VPN download website to steal login details before offering visitors the real, digitally signed VPN installer. The attack collected a VPN server address, username, and password through a browser pop-up, leaving victims exposed without installing a malicious client. The campaign shows how a normal software search can lead to credential […]

The post Hackers Use Fake WatchGuard VPN Download Site to Steal Login Credentials appeared first on Cyber Security News.

Meta, Google, Microsoft and OpenAI joined an international crackdown on West African scam networks that removed more than 3.7 million Facebook and Instagram accounts, pages and groups. Announced on October 13, 2026, the operation led to 28 arrests and the rescue of 117 people forced to work inside scam centers. The United Kingdom’s National Crime […]

The post Meta, Google, Microsoft and OpenAI Join Global Crackdown on West African Scam Networks appeared first on Cyber Security News.

XBOW says its security researchers earned a $250,000 reward from Google after building a full-chain Chrome exploit with AI agents. The team says the work took six days and about $40,000 in computing costs, using OpenAI’s publicly available GPT-5.6 Sol model. Google has fixed the flaws. XBOW disclosed the work on October 13, 2026. Its […]

The post Google Awarded a $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6 appeared first on Cyber Security News.

Microsoft has released fixes for a Windows SmartScreen vulnerability that allows an attacker with local access to gain higher privileges. Tracked as CVE-2026-85851, the flaw was disclosed on October 13, 2026, and carries a CVSS base score of 7.8. Microsoft rates it Important. The issue involves a use-after-free memory error and affects several Windows 11 […]

The post Windows SmartScreen Vulnerability Enables Privilege Escalation Attacks appeared first on Cyber Security News.