Cyber Security News

The Federal Bureau of Investigation has confirmed that North Korean hackers stole more than $6 billion in virtual assets from Binance on or about October 29, 2026. The agency tracks the activity as TraderTraitor, linking the cryptocurrency theft to an operation previously blamed for major attacks against digital asset platforms. In its official security alert, […]

The post FBI Confirms North Korean Hackers Responsible for $6 Billion+ Binance Attack appeared first on Cyber Security News.

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software packages, government records, and grocery chains. Binance investigated billions of dollars in unauthorized transactions, PHP issued emergency fixes, and a malicious LiteLLM release put developer credentials at risk. Other incidents involved Railway, OpenCode, Polymarket, Coinbase, Cursor, eMudhra, and Capcom. […]

The post Hacktober – Cyberattack Wave Hits PHP, Node.js, Binance, LiteLLM, Pentagon, and a Few More appeared first on Cyber Security News.

Cursor has confirmed that malicious Claude Code extension packages were available through its VS Code Extension Marketplace for roughly 11 hours on October 29, 2026. The altered packages targeted Windows and macOS users and attempted to install an SSH backdoor for lasting remote access. According to Cursor’s security notice, the affected versions were Anthropic.claude-code 2.1.312 […]

The post Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours appeared first on Cyber Security News.

Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence threat intelligence snapshot lists 60,471 blocked attempts over 24 hours. These are attack attempts, not confirmed website compromises, and the figure does not establish how many individual sites were targeted. WordPress released version 7.1.4 on […]

The post Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours appeared first on Cyber Security News.

Google has announced Gemini 4 Carbon, its latest AI model built to find software flaws, test whether attackers could exploit them, and produce fixes. Unveiled on October 28, 2026, Carbon builds on Gemini 4 Argon and targets complex security and coding work that can take days. Access will begin with selected cyber defenders, not a […]

The post Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities appeared first on Cyber Security News.

A newly disclosed TeamViewer vulnerability could let an attacker turn a routine remote support session against the technician providing help. Tracked as CVE-2026-111585, the flaw allows a malicious remote computer to crash the viewer application and potentially run code on the technician’s machine. TeamViewer rates it High, with a CVSS score of 8.8. Remedio researcher […]

The post TeamViewer Security Flaw Could Turn Remote Support Sessions Into Computer Takeovers appeared first on Cyber Security News.

Anthropic researchers have shown that Claude can design training data that slips past an AI safety monitor and causes a separate research model to blackmail users, weaken security code, and resist oversight. The October 2026 study exposes a gap between text that looks safe during screening and behavior learned through training. The distinction matters. These […]

The post Anthropic’s Claude Bypasses AI Safety Checks, Triggering Blackmail and Code Sabotage in Tests appeared first on Cyber Security News.

Apple has issued a fresh round of threat notifications to selected iPhone users in 99 countries, warning that they have been targeted by sophisticated mercenary spyware attacks. Security researcher Costin Raiu reported the new wave on October 30, 2026, saying it was separate from August’s alerts and linked to new attacks. “Today’s notification is being […]

The post Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks appeared first on Cyber Security News.

Chainalysis has confirmed that an attacker used “offensive agentic techniques” to access its systems and internal tools, exposing customer account details. The blockchain investigation company said the accessed information included user IDs, full names, email addresses, and organization role labels, while its investigation has found no evidence that customer investigation content or authentication secrets were […]

The post Chainalysis Confirms Cyberattack Using Agentic Techniques That Exposed Customer Data appeared first on Cyber Security News.

A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in trusted software projects. The group, tracked as DeceptiveDevelopment, used the stolen access to change code in public and private repositories between April and September 2026. Every poisoned project then became a new way into the […]

The post North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages appeared first on Cyber Security News.

Dhananjay Ganjoo, Managing Director – India & SAARC  The uncomfortable part of an adaptive attack is not how quickly it starts, but  how quickly it can change course.   AI-assisted operations can probe environments, learn from responses, switch techniques and chain subsequent actions while an attack is still in progress. Anthropic’s 2026 analysis of 832 accounts […]

The post When Threats Don’t Wait, Security Can’t Either  appeared first on Cyber Security News.

A new malware framework called NetamLoader is being used against a custom version of Windows 10 that only government bodies in Asia use. The campaign looks like a supply-chain operation, and nobody has linked it to a known hacking group yet. The malware hides inside a Windows update package, borrows trusted software to run, and […]

The post APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments appeared first on Cyber Security News.

Security flaws in the embedded browsers of Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop could enable code execution, file theft, and address-bar spoofing on developer machines. The findings published on October 29 show how browser features built into AI assistants can break security boundaries when given extra access to their host apps. The […]

The post Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers appeared first on Cyber Security News.

Palo Alto Networks has confirmed that attackers are actively exploiting PHP2Shell vulnerabilities against PAN-OS management interfaces exposed to the internet. In its October 29, 2026, update, Unit 42 said it independently verified attacker tools used to combine the PHP flaws with a Linux kernel vulnerability and gain root access. The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, each […]

The post Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces appeared first on Cyber Security News.

Trezor has warned that a suspected hardware implant inside a Trezor Safe 5 could steal recovery phrases and send them over a mobile network. The warning covers every Trezor model bought from CryptoBilis from March 2026 onward, although only one suspected device has been reported. In its October 30 security notice, Trezor urged affected users […]

The post Trezor Warns of Suspected Spy Implant in Crypto Wallet That Could Steal Recovery Phrases appeared first on Cyber Security News.

Binance reportedly lost approximately $6.36 billion in cryptocurrency on October 29, 2026, after an attacker drained wallets across ten blockchains. TRM Labs describes the incident as the largest cryptocurrency theft ever recorded, with most of the stolen funds transferred out within about 20 minutes of the attack. Its investigation attributes the operation to TraderTraitor, a […]

The post Binance Faces Largest Crypto Heist – $6.36 Billion Reportedly Stolen by North Korean Group appeared first on Cyber Security News.

An unauthorized AI relay service is installing genuine OpenAI Codex and Anthropic Claude Code tools on company computers, then changing their settings to send requests through third-party servers. The setup also removes sandbox controls, creating a path for sensitive business data to leave approved systems. Symantec’s Threat Hunter Team documented the activity in an October […]

The post Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data appeared first on Cyber Security News.

The Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting CVE-2026-97229. This GitLab vulnerability could allow code execution without logging in. CISA added the flaw to its Known Exploited Vulnerabilities catalog on October 29, 2026, confirming evidence of active exploitation and raising the urgency for organizations running affected GitLab servers. The vulnerability affects […]

The post CISA Warns of GitLab Integer Overflow Vulnerability Exploited in Attacks appeared first on Cyber Security News.

Attackers are chaining zero-day flaws in Ivanti Connect Secure VPN appliances to gain unauthenticated root access, exposing stored credentials and sensitive Active Directory data. Ivanti confirmed attacks against a limited number of customers and released additional fixes on October 29, 2026, following its initial October patches. Volexity tracked UTA0576 activity to October 3 and, during […]

The post Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root Access appeared first on Cyber Security News.

Microsoft resolved a Windows 11 issue that blocked non-admin users from connecting via Remote Desktop when Administrator protection was enabled, releasing fixes on October 28, 2026, for connection failures with error 0xC000000D. The bug appeared after the September 22 non-security preview update, KB5124010, or later updates. Affected users could see the message, “The token that […]

The post Microsoft Fixes Remote Desktop Connection Failures Following Recent Updates appeared first on Cyber Security News.