US security operations centers are not short on security products. They are short on time, people and context. Current industry research suggests the…
Category: Cyber Security News
Discord Users’ Data Exposed in Security Bot Double Counter Security Breach
Double Counter, a Discord security bot, has disclosed a breach that exposed user data after an attacker broke into its cloud systems on October 4, 2026.…
CrowdStrike, AWS, and NVIDIA Expand Global Cybersecurity Startup Accelerator
CrowdStrike announced its fourth annual Cybersecurity Startup Accelerator on October 6, 2026, expanding its collaboration with Amazon Web Services and…
FBI Warns of FortiBleed Attack Compromising 80,000+ Devices and Locking Out Admins
The FBI and U.S. Secret Service have issued a joint cybersecurity advisory warning that the ongoing FortiBleed campaign is targeting internet-facing…
Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates
Hackers compromised the .gh, .sl and .as country-code domain registries and used their access to obtain unauthorized HTTPS certificates for Google and…
FortiBleed Attack Campaign Exploiting Fortinet Firewalls and VPNs – FBI Warns
The FBI and U.S. Secret Service have issued a joint cybersecurity advisory warning that the ongoing FortiBleed campaign is targeting internet-facing…
Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware
Earth Sirrush is hiding espionage malware inside PNG images and malicious Notepad++ plugins to compromise Ukrainian organizations. The Russia-aligned…
Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People
Hackers breached two major South Korean churches, exposing more than one million congregant records and extensive financial and administrative data. The…
CyberXero Combines Claude Code, PentAGI and Cobalt Strike in AI-Augmented Cyberattacks
CyberXero has emerged as an initial access broker that combines familiar hacking tools with artificial intelligence to run large-scale intrusions. The…
PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access
A proof-of-concept exploit has been released for CVE-2026-21589, a critical arbitrary file-read vulnerability affecting multiple self-managed Atlassian…
Hackers Compromise 100+ Websites With Fake Cloudflare Checks to Spread LUNEXSTEALER
Hackers compromised more than 100 websites and used fake Cloudflare verification pages to spread LUNEXSTEALER, a Windows malware capable of stealing…
SonicWall Patches 4 SMA1000 Flaws, Including Critical Pre-Auth SSRF Rated CVSS 10
SonicWall has patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 Series appliances, including a critical server-side request forgery…
Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build
Rockstar Games has faced separate intrusions involving proprietary source code, 78.6 million business records, and what researchers describe as a playable…
OpenAI Sandbox Escape Flaw Allowed Free Access to Paid AI Models Without an API Key
Security researcher Oliver Fish says he found an OpenAI sandbox escape that let him request paid AI models without an API key or an account. A screenshot…
Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code
Anthropic’s Mythos AI has identified a critical vulnerability in Rejetto HTTP File Server that could allow remote attackers to forge administrator…
Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands
Progress disclosed critical command injection flaw CVE-2026-91140 in DataDirect Autonomous REST Connector AI Model Generator agents, allowing malicious…
Critical WordPress Vulnerabilities Enable XSS, SQL Injection and Data Disclosure Attacks
WordPress released version 7.1.3 on October 6, 2026, addressing vulnerabilities involving cross-site scripting, SQL injection, information disclosure, and…
Multiple OpenSSH Vulnerabilities Could Enable Plaintext Recovery, File Write and Injection Attacks
OpenSSH 10.6, released on October 6, 2026, fixes security flaws that could expose secrets, write files outside intended folders, or enable shell injection…
Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them
Cybersecurity Awareness Month 2026 arrives as online attacks become easier to launch, harder to spot, and more focused on people. Observed every October,…
Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes
Hackers are impersonating ChatGPT, Claude and Gemini with fake advertising products that steal passwords and multifactor authentication codes. Instead of…