Cyber Security News

Hackers are posing as trusted artificial intelligence bots to search websites for passwords, API keys, and cloud credentials. The campaign uses the names of ChatGPT, Claude, Perplexity, and other AI services to disguise automated scanning, testing whether businesses will let requests through simply because they appear to come from a familiar provider. The operation highlights […]

The post Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys appeared first on Cyber Security News.

Hackers are now using an AI-driven command framework called CyberStrikeAI to break into Windows networks and take over entire domains. Education organizations in Africa and Latin America were among the confirmed victims. The tool lets a language model decide which commands to run, so the operator no longer types each step by hand. CyberStrikeAI is […]

The post Hackers Use CyberStrikeAI Agents to Automate Windows Domain Takeovers and Credential Theft appeared first on Cyber Security News.

Hackers have reportedly targeted refrigeration systems at Swedish supermarkets, leaving stores with spoiled food after freezers reached temperatures as high as 55°C. Several ICA locations and six Coop stores were affected overnight into November 2, forcing staff to clear damaged stock and restore cooling systems. The incidents follow similar attacks against French supermarkets in October, […]

The post Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C appeared first on Cyber Security News.

Quick Answer: Linx is the AI-native solution for modern IGA across all identity types; SailPoint remains the IGA benchmark with AI-driven certifications; Saviynt leads cloud-native converged governance; Microsoft Entra ID Governance wins bundled economics in M365 estates; Omada owns the configurable mid-enterprise; One Identity rules AD-heavy shops. IGA answers the question auditors always ask: who should have access and can you prove it? Access reviews done […]

The post Top 10 Best Identity Governance & Administration (IGA) Tools in 2026 appeared first on Cyber Security News.

Every penetration testing firm is facing the same pressure right now. AI tools are faster, cheaper, andincreasingly capable, and testers are using them whether the company has a policy on it or not. There’s ahigh change AI has already entered your workflow the question is whether it has entered on your terms oryour employee’s personal […]

The post PentestPad: How Pentest Companies Adapt In The Era of AI appeared first on Cyber Security News.

A retainer converts breach-day chaos into a phone number with obligations attached: guaranteed response times, pre-negotiated rates, privilege structure already standing, and in the modern form unused hours flexing into proactive work so the contract pays for itself in quiet years. Rosters overlap with our DFIR-capability ranking by nature; this piece ranks the contracts: SLA […]

The post Top 10 Best Incident Response Retainer Services in 2026 [Ranked & Scored] appeared first on Cyber Security News.

The Federal Bureau of Investigation has confirmed that North Korean hackers stole more than $6 billion in virtual assets from Binance on or about October 29, 2026. The agency tracks the activity as TraderTraitor, linking the cryptocurrency theft to an operation previously blamed for major attacks against digital asset platforms. In its official security alert, […]

The post FBI Confirms North Korean Hackers Responsible for $6 Billion+ Binance Attack appeared first on Cyber Security News.

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software packages, government records, and grocery chains. Binance investigated billions of dollars in unauthorized transactions, PHP issued emergency fixes, and a malicious LiteLLM release put developer credentials at risk. Other incidents involved Railway, OpenCode, Polymarket, Coinbase, Cursor, eMudhra, and Capcom. […]

The post Hacktober – Cyberattack Wave Hits PHP, Node.js, Binance, LiteLLM, Pentagon, and a Few More appeared first on Cyber Security News.

Cursor has confirmed that malicious Claude Code extension packages were available through its VS Code Extension Marketplace for roughly 11 hours on October 29, 2026. The altered packages targeted Windows and macOS users and attempted to install an SSH backdoor for lasting remote access. According to Cursor’s security notice, the affected versions were Anthropic.claude-code 2.1.312 […]

The post Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours appeared first on Cyber Security News.

Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence threat intelligence snapshot lists 60,471 blocked attempts over 24 hours. These are attack attempts, not confirmed website compromises, and the figure does not establish how many individual sites were targeted. WordPress released version 7.1.4 on […]

The post Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours appeared first on Cyber Security News.

Google has announced Gemini 4 Carbon, its latest AI model built to find software flaws, test whether attackers could exploit them, and produce fixes. Unveiled on October 28, 2026, Carbon builds on Gemini 4 Argon and targets complex security and coding work that can take days. Access will begin with selected cyber defenders, not a […]

The post Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities appeared first on Cyber Security News.

A newly disclosed TeamViewer vulnerability could let an attacker turn a routine remote support session against the technician providing help. Tracked as CVE-2026-111585, the flaw allows a malicious remote computer to crash the viewer application and potentially run code on the technician’s machine. TeamViewer rates it High, with a CVSS score of 8.8. Remedio researcher […]

The post TeamViewer Security Flaw Could Turn Remote Support Sessions Into Computer Takeovers appeared first on Cyber Security News.

Anthropic researchers have shown that Claude can design training data that slips past an AI safety monitor and causes a separate research model to blackmail users, weaken security code, and resist oversight. The October 2026 study exposes a gap between text that looks safe during screening and behavior learned through training. The distinction matters. These […]

The post Anthropic’s Claude Bypasses AI Safety Checks, Triggering Blackmail and Code Sabotage in Tests appeared first on Cyber Security News.

Apple has issued a fresh round of threat notifications to selected iPhone users in 99 countries, warning that they have been targeted by sophisticated mercenary spyware attacks. Security researcher Costin Raiu reported the new wave on October 30, 2026, saying it was separate from August’s alerts and linked to new attacks. “Today’s notification is being […]

The post Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks appeared first on Cyber Security News.

Chainalysis has confirmed that an attacker used “offensive agentic techniques” to access its systems and internal tools, exposing customer account details. The blockchain investigation company said the accessed information included user IDs, full names, email addresses, and organization role labels, while its investigation has found no evidence that customer investigation content or authentication secrets were […]

The post Chainalysis Confirms Cyberattack Using Agentic Techniques That Exposed Customer Data appeared first on Cyber Security News.

A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in trusted software projects. The group, tracked as DeceptiveDevelopment, used the stolen access to change code in public and private repositories between April and September 2026. Every poisoned project then became a new way into the […]

The post North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages appeared first on Cyber Security News.

Dhananjay Ganjoo, Managing Director – India & SAARC  The uncomfortable part of an adaptive attack is not how quickly it starts, but  how quickly it can change course.   AI-assisted operations can probe environments, learn from responses, switch techniques and chain subsequent actions while an attack is still in progress. Anthropic’s 2026 analysis of 832 accounts […]

The post When Threats Don’t Wait, Security Can’t Either  appeared first on Cyber Security News.

A new malware framework called NetamLoader is being used against a custom version of Windows 10 that only government bodies in Asia use. The campaign looks like a supply-chain operation, and nobody has linked it to a known hacking group yet. The malware hides inside a Windows update package, borrows trusted software to run, and […]

The post APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments appeared first on Cyber Security News.

Security flaws in the embedded browsers of Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop could enable code execution, file theft, and address-bar spoofing on developer machines. The findings published on October 29 show how browser features built into AI assistants can break security boundaries when given extra access to their host apps. The […]

The post Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers appeared first on Cyber Security News.

Palo Alto Networks has confirmed that attackers are actively exploiting PHP2Shell vulnerabilities against PAN-OS management interfaces exposed to the internet. In its October 29, 2026, update, Unit 42 said it independently verified attacker tools used to combine the PHP flaws with a Linux kernel vulnerability and gain root access. The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, each […]

The post Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces appeared first on Cyber Security News.