DreamHost forced password resets for affected email and FTP/SFTP accounts after an unexplained incident disrupted webmail and File Manager, preventing…
Category: Cyber Security News
OpenAI Unveils GPT-6.1 Terra, a Faster AI Model With Critical Cybersecurity Capabilities
OpenAI has introduced GPT-6.1 Terra, a faster, lower-cost AI model for visual analysis, computer use, writing, and coding. Released on October 26, the…
Hackers Infect 953 Online Stores With Malicious JavaScript That Evades Security Scanners
A criminal group has infected Magento stores with malicious JavaScript since July 2025, and 953 online shops have been hit so far. Most of the victims run…
Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking
A cybersecurity researcher says he gained root access to a 2025 Samsung Smart TV and found software built to track far more than the picture on the…
Hackers Use AI Agents to Target Over 2,250 Microsoft 365 Tenants Through ConnectWise
Hackers used AI agents and stolen ConnectWise application credentials to attempt access to more than 2,250 Microsoft 365 tenants, according to Microsoft’s…
OpenAI Codex Breaks USB Encryption in Minutes, Exposing Hardcoded Keys and Security Flaws
OpenAI Codex helped researcher Xusheng Li uncover flaws in four USB protection products, including hardcoded encryption keys and hidden accounts that…
Claude Code Reportedly Finds 214,856 Deleted Photos and Videos Hidden on Android Phone
Anthropic’s Claude Code reportedly found 214,856 files linked to deleted photos and videos on a Google Pixel, raising privacy concerns about Android…
Hackers Use Malicious Instagram Ads to Infect iPhones With Spyware Without a Click
Hackers are using malicious Instagram advertisements to infect vulnerable iPhones with spyware while users scroll through their feeds. A documented attack…
New Aokigahara Malware Targets ChatGPT, Claude, Codex, and Cursor Login Credentials
A newly observed Windows infostealer called Aokigahara is targeting login credentials and session data associated with ChatGPT Desktop, Claude, Codex, and…
Hackers Sell ICMacOS Remote Access Trojan for $699 a Week to Target Mac Users
Cybercriminals are selling a Mac malware kit that can do far more than steal passwords. The tool, called ICMacOS or Icarus macOS, is offered for $699 a…
Hackers Abuse Claude’s Official Website and Google Ads to Spread Malware
Cybercriminals found a simple way to make a fake download page look trustworthy. Instead of registering a lookalike domain, they placed their lure on…
Palo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds
Palo Alto Networks has confirmed that a critical Brotli vulnerability affects some PAN-OS firewall deployments and its Prisma Cloud Application Security…
New DarkCore RAT Targets Gmail and WhatsApp Sessions While Hiding Behind Victims’ IP Addresses
A newly uncovered remote access trojan called DarkCore is being marketed with a browser designed to reuse stolen Gmail, WhatsApp, and other account…
Apache Camel Fixes Multiple Vulnerabilities Including High-Severity XXE One’s
Apache Camel has released fixes for multiple security flaws, including high-severity XML External Entity vulnerabilities that could expose local files or…
Hackers Use VLC Media Player and VMware Tools to Load Malware Through DLL Side-Loading
Hackers are using legitimate VLC Media Player and VMware components to load malware onto Windows systems, hiding harmful code behind familiar software.…
Hackers Can Abuse Logged-In WordPress Admin Sessions to Secretly Install PHP Backdoors
WordPress administrators often keep their dashboard open in the same browser they use for everyday browsing. A new attack chain shows why that habit is…
Hackers Revive BlackLotus Techniques to Bypass Windows Secure Boot and Deploy Malware
Hackers have revived techniques associated with the BlackLotus bootkit to bypass Windows Secure Boot and deploy espionage malware against diplomatic…
Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites
Hackers are now using public exploit code to break into websites that run PHP, and universities and business sites are among the main targets. The bugs…
PHP Releases New Windows Build Security Updates to Fix Critical HTTP2Shell Vulnerability
The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1, 8.4.27-1, 8.3.36-1, and…
Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder
A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens.…