Cyber Security News

Trezor has warned that a suspected hardware implant inside a Trezor Safe 5 could steal recovery phrases and send them over a mobile network. The warning covers every Trezor model bought from CryptoBilis from March 2026 onward, although only one suspected device has been reported. In its October 30 security notice, Trezor urged affected users […]

The post Trezor Warns of Suspected Spy Implant in Crypto Wallet That Could Steal Recovery Phrases appeared first on Cyber Security News.

Binance reportedly lost approximately $6.36 billion in cryptocurrency on October 29, 2026, after an attacker drained wallets across ten blockchains. TRM Labs describes the incident as the largest cryptocurrency theft ever recorded, with most of the stolen funds transferred out within about 20 minutes of the attack. Its investigation attributes the operation to TraderTraitor, a […]

The post Binance Faces Largest Crypto Heist – $6.36 Billion Reportedly Stolen by North Korean Group appeared first on Cyber Security News.

An unauthorized AI relay service is installing genuine OpenAI Codex and Anthropic Claude Code tools on company computers, then changing their settings to send requests through third-party servers. The setup also removes sandbox controls, creating a path for sensitive business data to leave approved systems. Symantec’s Threat Hunter Team documented the activity in an October […]

The post Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data appeared first on Cyber Security News.

The Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting CVE-2026-97229. This GitLab vulnerability could allow code execution without logging in. CISA added the flaw to its Known Exploited Vulnerabilities catalog on October 29, 2026, confirming evidence of active exploitation and raising the urgency for organizations running affected GitLab servers. The vulnerability affects […]

The post CISA Warns of GitLab Integer Overflow Vulnerability Exploited in Attacks appeared first on Cyber Security News.

Attackers are chaining zero-day flaws in Ivanti Connect Secure VPN appliances to gain unauthenticated root access, exposing stored credentials and sensitive Active Directory data. Ivanti confirmed attacks against a limited number of customers and released additional fixes on October 29, 2026, following its initial October patches. Volexity tracked UTA0576 activity to October 3 and, during […]

The post Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root Access appeared first on Cyber Security News.

Microsoft resolved a Windows 11 issue that blocked non-admin users from connecting via Remote Desktop when Administrator protection was enabled, releasing fixes on October 28, 2026, for connection failures with error 0xC000000D. The bug appeared after the September 22 non-security preview update, KB5124010, or later updates. Affected users could see the message, “The token that […]

The post Microsoft Fixes Remote Desktop Connection Failures Following Recent Updates appeared first on Cyber Security News.

A security researcher got Claude AI to hand over an internal Anthropic program and a memory dump that held pieces of a working Google Cloud token. The findings were published on October 29, 2026. They show how a helpful chatbot can expose the systems that run it. The work started with a plain question about […]

The post Researcher Uses Claude AI to Extract Internal Anthropic Binary and Recover Google Cloud Token appeared first on Cyber Security News.

Stolen credentials beat most controls because they are the control which is why behavior became the detection substrate. UEBA baselines how every user and entity normally acts, then surfaces the deviation: the service account suddenly browsing HR files, the engineer’s badge in one country and login in another. One honest note up front: our source […]

The post Top 10 Best UEBA Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

An Accenture employee allegedly gave a personal Claude Code AI agent administrative access to a secure U.S. Department of Defense environment, allowing it to write and deploy code. The agent reportedly operated for about two months and appears to have sent credentials and network details to an outside website. Accenture disputes the allegations, saying an […]

The post Accenture Contractor Allegedly Gave Claude AI Agent Access to Secure Pentagon Network appeared first on Cyber Security News.

The U.S. Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting a Linux kernel vulnerability (CVE-2026-46300) that can help them gain control of affected systems. The flaw was added to CISA’s Known Exploited Vulnerabilities catalog on October 28, 2026, placing it among security issues with confirmed exploitation. CISA’s catalog entry sets an October […]

The post CISA Warns of Linux Kernel Missing Initialization Vulnerability Exploited in Attacks appeared first on Cyber Security News.

Polymarket suffered a security incident on October 29, 2026, after a compromised third-party provider exposed users of its international platform to wallet theft. Traders reported missing funds, unexpected withdrawals, and positions being closed without permission. The company temporarily stopped trading, said it had fixed the issue, and promised to reimburse affected users. Trading later resumed. […]

The post Polymarket Hacked – Users Reported Funds Stolen From Their Wallets appeared first on Cyber Security News.

Binance, the world’s largest cryptocurrency exchange, has suspended deposits and withdrawals while investigating a suspected security breach involving billions of dollars in digital assets. Reports suggest that around $5.7 billion may have left wallets linked to the exchange, although Binance has not confirmed the total stolen or established that every flagged transfer belongs to the […]

The post World’s Largest Crypto Exchange Binance Hacked, Over $5.7 Billion Reportedly Stolen appeared first on Cyber Security News.

The ad fraud landscape changed sharply in 2026. That is the central finding of the State of Ad Fraud 2026: ADEX Trust & Safety Report, published by anti-fraud platform ADEX. The report analyzes January–September 2026 moderation and verification data from eight ad platforms, covering 1.2 million campaigns and 4.9 million creatives. Below are the key […]

The post State of Ad Fraud 2026: 52% of Schemes Use AI as Cloaking Loses Ground to iOS Exploits and Messenger Phishing appeared first on Cyber Security News.

Cloudflare blocked an average of more than 8,200 network-layer DDoS attacks every hour during the third quarter of 2026, showing how attackers are using frequent, short bursts to disrupt online services rather than relying only on record-breaking traffic floods. The company’s latest DDoS Threat Report, produced by its Cloudforce One threat intelligence team, covers July […]

The post Hackers Launch 8,200 DDoS Attacks Every Hour, Cloudflare’s Latest Report Reveals appeared first on Cyber Security News.

Anthropic says an unreleased Claude research model wrote a working exploit for a critical Linux kernel bug, tracked as CVE-2026-98432. The exploit lets a remote attacker run commands as root with no login and no user action. Anthropic’s Frontier Red Team shared the finding on October 27, 2026, and the flaw is already patched upstream. […]

The post Claude AI Exploits Linux Kernel Flaw to Execute Root Commands Without User Interaction appeared first on Cyber Security News.

The National Institute of Standards and Technology (NIST) has released guidance on moving to post-quantum cryptography, giving federal agencies and technology providers a clearer path to quantum-resistant security. Published October 27, 2026, the finalized report identifies vulnerable cryptographic standards, their replacements, and the timelines that should shape migration plans. The report, Transition to Post-Quantum Cryptography […]

The post NIST Officially Released Guidance for Transition to Post-Quantum Cryptography appeared first on Cyber Security News.

A security researcher has published details of a zero-click Android flaw called “SMS of Death.” One malformed text message can crash the phone service on an Android device, drop active calls, and in the worst case leave the phone without telephony after every restart. Google has marked the report “Won’t Fix” and treats it as […]

The post Zero-Click ‘SMS of Death’ Flaw Lets Hackers Disrupt Android Phones With a Single Text appeared first on Cyber Security News.

New York, New York, October 29th, 2026, CyberNewswire Now available as a standalone solution, Quantum Trust Hub delivers cryptographic posture management and agility for enterprises to uncover risk exposure, drive remediation at scale, and accelerate quantum readiness.   AppViewX, the leading identity security company built for the AI-powered and post-quantum enterprise, today announced new capabilities for […]

The post AppViewX Expands Quantum Trust Hub with Cryptographic Discovery, Posture Management, and Remediation appeared first on Cyber Security News.

New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec today announced the release of a free, interactive hands-on lab in Proving Grounds Play (PG Play) to help security practitioners examine and defend against the critical “PHP2Shell” vulnerabilities (CVE-2026-109618 and […]

The post OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery appeared first on Cyber Security News.

Security researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers. He also says he chained them to run code on iOS. The work was due to be presented on October 28 at OffensiveCon in Tokyo, according to the conference agenda. Aziz says he got past Telegram’s server-side checks and that the flawed […]

The post Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS appeared first on Cyber Security News.