Posts of last few hours

New York, NY, USA, October 21st, 2026, CyberNewswire According to the 2026 Autonomous Agents Threat Report, published by Arrakis Security, 76% of active agents have not run in 60 days, but their credentials still work and their triggers still fire. 44% have not run in 180 days. 24% of dormant agents can be started by […]

The post Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections appeared first on Cyber Security News.

AI adoption is accelerating across enterprises, with employees increasingly relying on platforms like ChatGPT, Claude, and Microsoft Copilot for everyday work. Cybercriminals are exploiting this growing trust, distributing malicious applications disguised as legitimate AI tools to steal credentials, deliver malware, and gain access to corporate environments.  Recent research by ANY.RUN reveals how attackers are impersonating […]

The post The AI Adoption Blind Spot: How Fake AI Tools Put Enterprises at Risk  appeared first on Cyber Security News.

Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting DNS lookups, TLS certificate checks, and Brotli decompression. The supplied release details identify 26.12.1, 24.22.1, and 22.23.4 as the patched versions. The most serious potential outcome is remote code execution through the Brotli decoder. […]

The post Node.js Releases Security Updates to Fix High-Severity TLS, DNS and Brotli Vulnerabilities appeared first on Cyber Security News.

Cybercriminals are using AI-enabled “antidetect” browsers to manage large networks of fake online accounts while making each profile appear to come from a different person, device, or location. Check Point Research reported that these tools can help a single operator or small group run thousands of accounts across social media and other platforms, making it […]

The post Hackers Use AI-Powered Browsers to Hide Thousands of Fake Accounts and Bypass Security Detection appeared first on Cyber Security News.

A ransomware operation known as The Gentlemen is using a mix of security tampering, service disruption and file encryption to make recovery harder for affected organizations. Its Windows malware can turn off Microsoft Defender’s real-time protection, add broad exclusions that reduce scanning, stop backup-related services and delete Volume Shadow Copies. These steps weaken defenses and […]

The post Hackers Use Gentlemen Ransomware to Disable Windows Defender and Destroy Backups appeared first on Cyber Security News.

Google has upgraded Chrome’s Enhanced Protection mode with a more powerful Gemini AI model to detect fake antivirus alerts, browser update scams, and other deceptive websites. Announced on October 20, 2026, the changes also introduce suspicious site warnings and protection against ClickFix attacks that trick users into running malicious commands. The update expands Google’s earlier […]

The post Google Upgrades Chrome With Gemini AI to Detect Fake Antivirus and Browser Update Scams appeared first on Cyber Security News.

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files. The malicious release also reached Docker images, putting developer systems, build runners, and AI services at risk. Aikido warned that anyone who installed the affected release should assume credentials […]

The post LiteLLM Compromised – Hackers Injected an Infostealer and RAT in the Latest 1.107.0 PyPI Release appeared first on Cyber Security News.

China-linked hackers are using trusted Windows applications to load hidden backdoors, collect system details, and steal Active Directory credential data. The group, tracked as BRONZE SANDCASTLE, places malicious files beside legitimate software, allowing familiar programs to run attacker-controlled code without changing the original application. The campaign shows how genuine software can become part of an […]

The post China-Linked Hackers Turn Trusted Windows Applications Into Backdoors to Steal Credentials appeared first on Cyber Security News.

PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers. Tracked as CVE-2026-109618 and CVE-2026-109619, and collectively called PHP2Shell, the flaws affect PHP’s handling of memory during web requests. The PHP project rates both vulnerabilities 9.2 out of 10 under CVSS 4.0. Administrators should […]

The post PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers appeared first on Cyber Security News.

Russian cyberespionage group APT28 used the Hookedge backdoor to reach a naval shipbuilder’s network in a NATO member state, steal login material and set up a hidden SSH tunnel. The intrusion lasted at least two months, according to a report by Symantec’s Threat Hunter Team. The report does not name the shipbuilder or the country. […]

The post APT28 Hackers Open Secret SSH Tunnel Into NATO Country’s Naval Shipbuilder Network appeared first on Cyber Security News.