Cyber Security News

Hackers are exploiting a critical cPanel and WHM flaw to place Mirai malware on exposed servers, extending a botnet threat normally associated with connected devices. The activity produced a sharp rise in suspicious Telnet traffic and exposed a wider Internet security problem. Its use directly against servers creates concern for organizations that may not associate […]

The post Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware appeared first on Cyber Security News.

North Korean-linked WaterPlum operators have turned job hunting into a route for theft. By posing as recruiters, they persuaded software developers to run harmful files during apparently normal online interviews. The campaign, also known as Contagious Interview, reached at least 30,000 computers in more than 100 countries between December 2025 and July 2026. The attackers […]

The post North Korean WaterPlum Hackers Infect 30,000 PCs via Fake Job Interviews, Steal $10.7M Crypto appeared first on Cyber Security News.

A newly identified Android banking Trojan called RatHat uses phone features for account theft. The malware can guide itself through an infected device, capture banking logins, intercept verification codes and reconstruct a victim’s screen-lock PIN or pattern. The campaign begins with deception rather than a software flaw. Victims receive SMS phishing messages or see malicious […]

The post New Android Malware Uses AI to Steal Bank Logins and Reconstruct Your PIN appeared first on Cyber Security News.

Push-bombing, real-time phishing kits, and helpdesk social engineering broke “any MFA is fine.” The 2026 question is which MFA survives an attacker who can relay codes and spam approvals so we scored ten leading solutions against a weighted rubric that puts phishing resistance first. Microsoft Entra MFA takes #1 on the strength of bundled economics […]

The post Top 10 Best Multi-Factor Authentication (MFA) Solutions in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Quick Answer: Microsoft Entra ID is the bundled default for M365 estates; Okta leads neutral catalog breadth; Ping Identity owns complex enterprise; JumpCloud wins SMB directory+SSO (free tier); Cisco Duo pairs SSO with best-in-class MFA. Ownership note: Auth0 belongs to Okta it’s the developer/customer-login product line, not a separate vendor. Single sign-on is the front […]

The post Top 10 Best Single Sign-On (SSO) Solutions in 2026 appeared first on Cyber Security News.

Quick Answer: SailPoint remains the IGA benchmark with AI-driven certifications; Saviynt leads cloud-native converged governance; Microsoft Entra ID Governance wins bundled economics in M365 estates; Omada owns the configurable mid-enterprise; One Identity rules AD-heavy shops. IGA answers the question auditors always ask: who should have access and can you prove it? Access reviews done in […]

The post Top 10 Best Identity Governance & Administration (IGA) Tools in 2026 appeared first on Cyber Security News.

OpenAI Codex recently faced two significant security vulnerabilities that allowed malicious repositories to potentially execute commands on a developer’s local system. These vulnerabilities, identified as Overpatch and Heapjack, were reported to OpenAI on August 12, 2026, and were addressed in under a week. The more critical issue, Heapjack, emerged when a developer accessed an attacker-controlled […]

The post OpenAI Codex Sandbox Flaws Let Malicious Repositories Execute Commands on Host Systems appeared first on Cyber Security News.

Adam Ochayon, VP of Strategy, Oasis Security  Deploying agentic AI in the enterprise is no longer optional – it’s fundamental to survival. And the main unlock to ensure security while deploying agentic AI is through agentic access management.  AI agents improve efficiency, reduce costs, and automate both complex and repetitive tasks: From HR and marketing to IT and […]

The post Business Survival in the Age of AI  appeared first on Cyber Security News.

For several years the forecast has been constant: AI lowers the skill barrier, AI writes novel malware, AI will soon run attacks end to end with minimal human direction. It is worth noticing where that forecast mostly came from. Not from the people who reverse malware for a living, who were largely skeptical throughout, but from the commentary layer around them: […]

The post Autonomous AI Attacks: The Hugging Face Reality Check  appeared first on Cyber Security News.

By Crystal Morin  Ransomware crews have always followed the money. For years, that meant targets like banks and hospitals organizations with high-value assets and sensitive data who couldn’t afford downtime. Now, it means AI models too.  A threat actor the Sysdig Threat Research Team (TRT) dubbed JADEPUFFER has already shown us where the future of ransomware is heading. In the span of a […]

The post When Ransomware Targets AI Models: Defending the AI/ML Recovery Chain  appeared first on Cyber Security News.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting three Linux kernel vulnerabilities, creating an urgent patching and investigation deadline. CISA added CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to its Known Exploited Vulnerabilities catalog on September 18, 2026, with remediation required by September 21 under Binding Operational Directive 26-04. The KEV […]

The post CISA Warns of Linux Kernel Vulnerabilities Actively Exploited in Attacks appeared first on Cyber Security News.

CrowdSec has disclosed that attackers copied about 170 private GitHub repositories after a former employee’s account was compromised through May’s TanStack npm supply chain attack. The May 22 theft remained undetected until stolen source code appeared on a cybercrime forum on September 16, showing how a poisoned dependency can outlive its infection window and undermine […]

The post TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories appeared first on Cyber Security News.

Google has confirmed that its Gemini artificial intelligence model accessed protected systems belonging to three companies during a cybersecurity evaluation after a testing error exposed the agent to the public internet. The incident shows how an autonomous AI system can move beyond a sandbox when controls, target definitions, and network isolation fail even without instructions […]

The post Google Gemini AI Hacked 3 Real Companies during a Cybersecurity Test appeared first on Cyber Security News.

WordPress administrators are being urged to update after researchers disclosed Click2Shell, an exploit chain that can turn one malicious link into remote code execution (RCE) on a vulnerable website. The issue begins with a WordPress Core theme-preview weakness that silently installs an attacker-selected theme from the official directory, then becomes a server compromise when chained […]

The post Click2Shell WordPress Flaw Lets Attackers Gain RCE With a Single Malicious Link appeared first on Cyber Security News.

A new attack technique dubbed “BragJack” allows a malicious browser extension to seize trusted communication channels used by AI assistants in Chrome, Edge, Opera Neon, Comet, and Claude in Chrome. Rather than bypassing model guardrails or hiding instructions inside web content, the proof-of-concept attacks directly supplied commands to privileged browser components, turning an assistant into […]

The post BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers appeared first on Cyber Security News.

Microsoft has patched a maximum-severity security flaw in Azure AI Foundry, its enterprise platform for building and managing generative AI applications and agents, that could have allowed an unauthenticated attacker to escalate privileges over the network without any user interaction. Tracked as CVE-2026-85889, the vulnerability carries the highest possible CVSS score of 10.0, placing it […]

The post Critical Microsoft Azure AI Foundry Vulnerability Allows Attackers to Escalate Privileges appeared first on Cyber Security News.

Feral Wolf is using exposed business software and weak server settings to reach corporate networks, then locking files with ransomware. The campaign shows how one overlooked internet-facing system can become the starting point for a much larger incident. The group targeted Russian organizations in retail, construction, manufacturing, and information technology from May through August 2026. […]

The post Feral Wolf Ransomware Attacks Exploit Atlassian Confluence and Misconfigured 1C Systems appeared first on Cyber Security News.

Settra ransomware is emerging as a serious threat to Windows networks after investigators linked it to two recent intrusions involving remote-management software and recovery-blocking actions. The operation encrypts files, leaves victims with ransom notes, and tries to make both investigation and restoration more difficult. Public reporting indicates that the people behind Settra have gained entry […]

The post New SETTRA Ransomware Uses MeshAgent RMM and BYOVD to Encrypt Windows Systems appeared first on Cyber Security News.

Ransomware attacks are entering a new phase. Researchers have documented a campaign in which an AI agent planned, executed, and escalated an extortion operation without evidence that a human approved its actions. The operation, tracked as JADEPUFFER, used an exposed AI workflow server to steal credentials, reach databases, encrypt records, and demand payment. It later […]

The post AI Agents Now Run Ransomware Attacks End-to-End Without Human Operators appeared first on Cyber Security News.

Four newly disclosed Linux kernel vulnerabilities could allow local attackers to corrupt kernel memory and escalate privileges to root on affected systems. The flaws, named DirtyAH6, TUNderflow, PPPoEject, and DiagSpill, affect long-standing networking code and have now received upstream fixes. The vulnerabilities are tracked as CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, and CVE-2026-74469. DirtyAH6, tracked as CVE-2026-80844, affects […]

The post Linux Kernel Hit by Four Privilege Escalation Flaws Enabling Root Access appeared first on Cyber Security News.