Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a researcher recording successful attacks against a…
Category: Cyber Security News
OpenCode Security Breach Exposes Third-Party API Keys of its Console Users
OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been…
Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes
Anthropic says an internal Claude research model has traced the origins of five NSA-supplied elliptic curve seeds in under 30 minutes, answering a…
Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts
Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 partner and customer tenants, giving them access through a…
Hackers Exploit Critical Collabora Online Flaw to Backdoor Nextcloud Servers
Hackers are exploiting a critical flaw in the Collabora Online Built-in CODE Server app for Nextcloud, with users reporting web shells on compromised…
Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI
Google released a Chrome Stable security update fixing 10 vulnerabilities across Windows, Mac, and Linux, including a high-severity DOM memory corruption…
OpenAI Confirms Its AI Model Hacked Government Website While Counting Hospital Beds
OpenAI has confirmed that an internal AI model hacked an unnamed government statistics website while trying to count hospital beds. The June 17, 2026…
New YuanKong Android RAT Hijacks Phones to Steal Banking PINs and Passwords
A newly analyzed Android remote-access Trojan called YuanKong can watch and control a victim’s phone, capture passwords and payment PINs, and send stolen…
Hackers Use AI-Generated Scripts to Hijack Linux Sudo Commands and Steal Passwords
A campaign against government organizations and state-linked infrastructure used AI-assisted scripts to steal credentials, maintain access to Linux…
37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released
A proof-of-concept exploit that gains root access on OpenBSD by chaining two kernel flaws. The main bug dates back about 37 years to the original BSD…
Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection
Hackers are using a newly identified platform called ROMULUS to deliver malware through ClickFix traps, combining hidden PowerShell scripts, altered…
Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide
A cybercrime campaign used hundreds of AI agents to target internet-facing PaperCut NG and MF print-management servers, compromising at least 440…
Hackers Abuse 20,000 Cloudflare Pages Domains to Push Fake Microsoft Security Alerts
Hackers have abused more than 20,000 Cloudflare Pages domains over six months to spread fake Microsoft security alerts and steer users toward scam call…
iOS 27.0.1 Untethered Jailbreak Demonstrated on iPhone 18 Pro
Security researchers from the cybersecurity firm Calif demonstrated a working untethered jailbreak for iOS 27.0.1 on Apple’s newest iPhone 18 Pro. The…
Google Automatically Adds Your Phone Number to Every Google Account on Your Android Phone
Google automatically verifies phone numbers on Android devices and adds them to every Google account signed in on the Phone. The setting is enabled by…
Chinese Phishing Network Uses 17,000 Domains to Target Japanese Banks and Steal Credentials
A large Chinese-language phishing operation has used around 17,000 internet domains to impersonate banks, payment services, retailers and other well-known…
New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials
Aoki, also known as Aokigahara, is a data-stealing malware that has added credentials for AI tools to its growing list of targets. Recent versions seek…
CERT-In Warns Hackers Using AI Agents to Launch Cyberattacks in Just Hours
India’s cyber response agency, CERT-In, has warned that hackers are using AI agents to cut the time between gaining access to systems and causing damage…
MITRE ATT&CK v20 Added 9 New Attack Techniques Covering AI Exploits, MFA Bypass, and CAPTCHA Evasion
MITRE released ATT&CK v20 on October 13, adding nine Enterprise techniques that describe how attackers may target AI systems, steal application-specific…
Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks
A cybercrime campaign has compromised at least 143 devices in 34 countries by exploiting flaws in D-Link, Ubiquiti and SAP products. The attackers…