The U.S. Department of Homeland Security has ordered federal civilian agencies to stop buying DeepSeek products and remove related technology from their…
Category: Cyber Security News
Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and AI API Keys
A campaign called GhostAction has placed malicious GitHub Actions workflows in 790 repositories, putting cloud credentials, software-publishing tokens,…
ThreatBook Launches RedAgents AI Platform That Uses Multiple Hacking Agents to Find Security Flaws
ThreatBook has launched RedAgents, a cloud platform that brings several AI-powered penetration-testing agents together to assess an organization’s…
Hackers Target South Korean Banks With AI, Then Accidentally Expose Their Own Attack Tools
Hackers linked to AI-assisted attacks on South Korean banks left parts of their own infrastructure open, giving researchers a view of their tools and…
Hackers Compromise Rank Math PRO WordPress Plugin to Install Self-Rebuilding Backdoors
Hackers planted malware in copies of the Rank Math PRO WordPress plugin, exposing websites to hidden backdoors that can rebuild themselves after removal.…
Hackers Hijack OVHcloud GitHub Releases to Distribute Secret-Stealing Malware
Hackers compromised the GitHub account of an OVHcloud developer and used it to distribute malicious files through the company’s official command-line tool…
Hackers Hijack AOMEI Software Updates for Just 5 Minutes to Secretly Install Backdoors
A short-lived change to AOMEI’s software update system gave hackers a way to deliver malware through a trusted route. Google Threat Intelligence Group…
Hackers Exploit Palo Alto VPN Flaw to Bypass MFA and Steal Credentials From VMware Disks
Ransomware operators are exploiting a Palo Alto Networks GlobalProtect VPN flaw to bypass multi-factor authentication and enter corporate networks. In one…
Hackers Using Fake Google Meet Pages to Steal Google Credentials
Two websites are hosting fake Google Meet pages designed to steal Google account credentials and carry out phishing involving two-factor authentication…
SBI Data Breach Claim – Hackers Allegedly Claim Access to 3.75 Lakh Users’ Database
An unverified SBI data breach claim alleges that a threat actor named Siriusim posted customer records and banking documents online. The claimed dataset…
One Hacker Uses AI Agents to Breach Over 100 Company Websites for Just $5,000
A Chinese-speaking hacker used AI agents to break into more than 100 company websites while spending an estimated $5,000 on AI tokens, according to a…
Claude AI Detects Hidden Crypto Miner While Building Temperature Monitor App on Mac
An ordinary coding task led to an unexpected security discovery when Claude Code reportedly found a hidden cryptocurrency miner on a developer’s Mac. The…
Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication
Drupal has released security updates for a critical remote code execution vulnerability that could let attackers take over affected websites without…
Microsoft Says AI Agents Cannot Be Trusted and Could Become Insider Security Threats
Microsoft warns organizations to treat AI agents as potential insider risks not because they are automatically malicious, but because they can access…
Hackers Registered New Teams-Based Domains and Used a Login Page to Steal Your Logins
A newly registered domain copies Microsoft Teams’ login page and interface, raising concerns about a phishing attempt targeting workplace users. Security…
16-Year-Old Broadcom Wi-Fi Flaw Lets Attackers Hack Routers Without Knowing Passwords
A 16-year-old flaw in Broadcom’s Wi-Fi software can let attackers within wireless range take control of affected routers without knowing the network…
Hackers Exploit SiteGuard WAF Vulnerability That Could Give Them Full Control of Servers
Hackers are exploiting a command injection flaw in SiteGuard Server Edition, a web application firewall installed directly on protected servers. Tracked…
NSA, CISA and NIST Release New Security Guidelines to Detect and Shut Down Rogue AI Agents
NSA, CISA, and NIST have released joint security guidelines to help organizations detect, contain, and shut down AI agents that act beyond their approved…
Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft
Google has announced a new set of Android security protections designed to stop mobile scams across calls, text messages, chat apps, web links, and…
Microsoft Confirms October Windows Updates Can Break Exchange Server Email Services
Microsoft has confirmed that Windows Server security updates released on October 13, 2026, can disrupt Exchange Server email services, blocking webmail…