Cyber Security News

Whether you’re investigating a suspicious URL or a file, you need more than a verdict to make a confident, evidence-based decision. You need to understand what the threat does, whether others have encountered it before, and what the findings mean for your next steps. Here are key questions to guide your SOC investigation and will […]

The post Beyond the Sandbox Verdict: 3 Questions for Faster SOC Decisions appeared first on Cyber Security News.

TeamViewer has released security updates for three high-severity vulnerabilities that could let attackers run malicious code, crash remote desktop clients, or gain root access on macOS. The flaws affect client components used with TeamViewer Remote, TeamViewer Tensor, and TeamViewer ONE, with CVSS scores reaching 8.8. The company published security bulletin TV-2026-1011 on October 27, 2026, […]

The post TeamViewer Vulnerabilities Could Let Hackers Execute Malicious Code Through Remote Desktop Sessions appeared first on Cyber Security News.

Security researchers at Searchlight Cyber chained several small flaws in Cloudflare’s image feature. The chain let them run JavaScript on a site that was meant to block it. Kevin Gervot and Adam Kues published the work on October 28, 2026, in a write-up titled Cache Me If You Can. They showed a working cross-site scripting […]

The post Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript appeared first on Cyber Security News.

By Farukh Rakhimov, Head of Compliance, Data Protection, and Information Security at AdTech Holding In March 2026, Google Threat Intelligence Group (GTIG) disclosed Coruna, an iOS exploit kit with five exploit chains and 23 exploits covering iOS 13.0 through 17.2.1. The most instructive part of the disclosure is what happened before the exploit got any […]

The post PropellerAds: Why Modern Malware Delivery Starts Before the Payload appeared first on Cyber Security News.

OWASP found that ChatGPT helped an operator with no offensive security knowledge take over an administrator account during a controlled hacking test. The operator largely copied commands, returned results to the chatbot, and followed its guidance to change a password and log in. The finding shows how AI can lower the skill needed for some […]

The post OWASP Finds ChatGPT Helped Low-Skilled User Take Over Admin Account in Hacking Test appeared first on Cyber Security News.

Google released a Chrome security update that fixes 52 vulnerabilities, including four critical flaws affecting FileSystem, FileAPI, Skia, and Layout. According to the release notice, the Stable channel is moving to version 156.0.8078.73/.74 for Windows and Mac. At the same time, Linux users will receive version 156.0.8078.73. The update will reach users over the coming […]

The post Google Fixes 52 Chrome Security Flaws, Including Four Critical Vulnerabilities appeared first on Cyber Security News.

The FBI seized virtualine.net, the main website of a bulletproof hosting provider linked to ransomware operators, stolen-data markets, and other cybercrime services. Announced on October 27, 2026, the court-authorized action targeted a business accused of helping criminals keep their websites online, ignore abuse complaints, and hide payments. The U.S. Justice Department said Virtualine also operated […]

The post FBI Seizes Virtualine Bulletproof Hosting Domain Linked to Ransomware and Cybercrime appeared first on Cyber Security News.

Three malicious Firefox extensions posed as the Phantom, Jupiter, and Bitget crypto wallets to steal recovery phrases and private keys. Whoever holds these secrets controls the wallet and every coin in it. All three listings were live on the Firefox Add-ons store during the research and have since been removed. The fake add-ons copied the […]

The post Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Crypto Wallet Keys appeared first on Cyber Security News.

Microsoft released emergency Windows trust updates after discovering eight recoverable eMudhra intermediate CA private keys that could let attackers forge trusted certificates or sign malicious content. Microsoft said the issue affected eMudhra’s certificate hierarchy, not Microsoft systems. The response includes an October 26 out-of-band Windows update removing seven certificates from the Windows trust list. Microsoft […]

The post Microsoft Releases Emergency Windows Updates to Block Compromised eMudhra Certificates appeared first on Cyber Security News.

Hackers have abused CyberStrikeAI, an open-source penetration-testing platform, to coordinate 44 AI agents across network scanning, exploitation, persistence, and data theft. The activity primarily targeted Japanese organizations, showing how attackers can turn security tools into repeatable intrusion workflows without developing new vulnerabilities or manually directing every task. During a short period in October 2026, the […]

The post Hackers Use CyberStrikeAI Agents to Automate Network Scanning, Exploitation, and Data Theft appeared first on Cyber Security News.

Coinbase has disclosed that a security incident at analytics provider Amplitude exposed contact information belonging to a small subset of its customers. The cryptocurrency exchange said it found no evidence of unauthorized access to Coinbase systems and confirmed that customer funds were not impacted. In its official statement, Coinbase Support said the incident also affected […]

The post Coinbase Customer Data Exposed Via Analytics Vendor Amplitude Security Incident appeared first on Cyber Security News.

The U.S. Cybersecurity and Infrastructure Security Agency has added two critical PHP vulnerabilities, jointly known as PHP2Shell, to its Known Exploited Vulnerabilities catalog after confirming real-world exploitation. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, can let unauthenticated attackers remotely execute code on vulnerable PHP web servers. CISA added both issues to the KEV catalog on […]

The post CISA Warns of PHP2Shell Vulnerabilities Actively Exploited in Attacks appeared first on Cyber Security News.

Hackers have abused government and school domains to promote illegal gambling websites, creating unauthorized subdomains while leaving the institutions’ main websites running normally. Two unrelated operations used changes to Domain Name System (DNS) records to place gambling pages beneath trusted institutional addresses, borrowing their reputation to attract visitors through search results. The activity affected institutions […]

The post Hackers Hijack Government and School Subdomains to Promote Illegal Gambling Websites appeared first on Cyber Security News.

Prevention lost; now what? That question not backup-window math defines ransomware recovery, a discipline measured in hours-to-business and judged on three hard problems: finding the clean restore point, proving it’s actually clean, and rebuilding at scale without reinfecting yourself. We scored ten platforms specifically on the recovery day, not the backup night. Rubrik takes 1; […]

The post Top 10 Best Ransomware Recovery Solutions in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Ransomware crews attack backups before they attack production encrypting or deleting recovery points first, then ransoming what’s left. That inverted kill chain has turned backup from an infrastructure checkbox into a security control, judged now by immutability, blast-radius isolation, and verified restore speed rather than backup-window math. Our source sheet listed ten vendors, but Cohesity’s […]

The post Top 9 Best Backup & Recovery Solutions in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Sony Network Communications has confirmed a breach exposing 2,585,481 customer records linked to its So-net and plala (S Course) internet services. The company disclosed the incident on October 27, 2026, after finding unauthorized access to its member database. The exposed information includes contact details, account identifiers, and passwords for selected email services. According to the […]

The post Sony Suffers Massive Data Breach – 2.58 Million So-net and Plala Users’ Data Exposed appeared first on Cyber Security News.

Hackers targeting the U.S. Federal Election Commission forced officials to shut down its electronic filing system days before the November 3 midterm elections, blocking campaign finance disclosures during a critical spending period. The disruption affects how political committees report money flowing into races, not how Americans vote. The FEC does not run elections, and Reuters […]

The post Hackers Target U.S. Election Commission, Forcing Online System Shutdown Days Before Midterms  appeared first on Cyber Security News.

Hackers have quietly planted malware in 42 real GitHub repositories. The traps fire when a developer opens a project with Claude, Gemini, Cursor, or VS Code. The repositories belong to 11 legitimate owners, including individual developers, students, and one company. The hidden code sits in a file named .github/init.js, and it is huge, between 12.9 […]

The post Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users appeared first on Cyber Security News.

Hackers are sending fake FedEx tax invoices to trick users into installing a stealthy backdoor on Windows. The malware, called Sirius Backdoor, hides inside a blank PDF and loads its main code directly into memory, which leaves very few traces on the hard drive. The emails target people who handle bills and payments. They are […]

The post Hackers Use Fake FedEx Invoices to Deploy Sirius Backdoor and Evade Windows Security appeared first on Cyber Security News.

A malware campaign known as Yoba targets users by leveraging the popularity of AI tools like ChatGPT and Claude to trick them into installing infected software. They publish fake GitHub projects that pose as desktop apps named GPT-5.6 Sol, GPT-6 Astra, and Claude Opus. Because the projects sit on GitHub, a platform many developers trust, […]

The post Hackers Abuse Signed ChatGPT and Claude Binaries to Deploy Malware Through Fake GitHub Downloads appeared first on Cyber Security News.