Cyber Security News

Fireworks AI has disclosed a wider security breach involving customer account details, billing records, datasets, and incomplete model weights. In a November 9, 2026 update, the company said attackers reached its development machines through a third-party cloud provider, expanding the impact beyond the exposed credentials reported in October. The findings change the picture presented in […]

The post Hackers Breach Fireworks AI Through Third-Party Cloud Provider to Steal Customer Data appeared first on Cyber Security News.

Google has fixed a Chrome zero-day that attackers are already using. The flaw is tracked as CVE-2026-125350, and it lets a remote attacker run malicious code in the browser. Google’s Stable channel update moves Chrome to version 157.0.8103.50/.51 for Windows and Mac and 157.0.8103.50 for Linux. The rollout will reach users over the coming days […]

The post Google Chrome 0-Day Vulnerability in the Wild to Execute Malicious Code Remotely appeared first on Cyber Security News.

Terminal2Shell claims a critical flaw dating back to 1971 affects more than two billion devices, allowing anyone who opens a terminal to gain an interactive shell. However, the website is satire, not a confirmed vulnerability disclosure. Its “exploit” describes normal terminal use, making it a joke about security marketing rather than a newly discovered threat. […]

The post Terminal2Shell: 55-Year-Old ‘Zero-Day’ Dating Back to 1971 Claims to Affect Billions of Devices appeared first on Cyber Security News.

N-able took its hosted N-central environments offline on November 9, 2026, after an independent researcher published details of 33 alleged zero-day vulnerabilities and exploit code. The company also told customers running N-central on their own servers to take them offline until further notice, creating an outage for users of its remote monitoring and management platform. […]

The post N-able Takes N-central Servers Offline Worldwide After 33 0-Day Vulnerabilities and Able2Shell Exploits appeared first on Cyber Security News.

A new remote-access trojan called Abe Office can steal browser passwords and cookies, even from Chrome’s App-Bound Encryption. It poses as an office helper tool and carries a valid code-signing certificate. Researchers at Rogue Authority broke its weak protections and watched the operator at work in a sandbox. Abe Office malware The file is named […]

The post New Abe Office Malware Bypasses Chrome App-Bound Encryption to Steal Browser Passwords and Cookies appeared first on Cyber Security News.

Notepad++ released version 8.9.9 on November 6, 2026, fixing six security flaws across Windows message handling, protected file saving, clipboard operations, and MIME Tools decoding. The update addresses flaws including conditional plugin command execution, memory exposure, and buffer overflow. The release notes list no assigned CVE identifiers for these issues. The command execution issue involves […]

The post Notepad++ 8.9.9 Released With Fixes for 6 Vulnerabilities Allowing Plugin Command Execution appeared first on Cyber Security News.

A new wave of the GhostAction campaign has hit more than 500 GitHub accounts. The attackers use those accounts to plant a fake security workflow in tens of thousands of repositories, and the workflow steals cloud, AI, and publishing keys. Security firm Socket reports that the accounts added the malicious file starting October 7, 2026, […]

The post GhostAction Hackers Compromise 500+ GitHub Accounts to Steal AWS, OpenAI, and Cloud Credentials appeared first on Cyber Security News.

Attackers using Anubis ransomware broke into a U.S. organization in October 2026. They used a new custom backdoor called Lindnor and dropped at least 13 tools built to switch off security software. Symantec’s Protection Bulletin says the encryption payload was blocked before it could run. Anubis ransomware Lindnor backdoor Symantec tracks the developer of Anubis […]

The post Anubis Ransomware Hackers Deploy New Lindnor Backdoor and 13 Security-Killing Tools in U.S. Attack appeared first on Cyber Security News.

A jailbroken DeepSeek AI agent spent more than two weeks breaking into a European telecom provider and 13 companies hosted on its systems. It reportedly reached millions of healthcare records along the way. Researchers at Malbear Labs call the campaign “Operation Snowball.” They found it after a routine sweep turned up an open directory holding […]

The post Jailbroken DeepSeek AI Agent Breaches European Telecom and Accesses Millions of Patient Records appeared first on Cyber Security News.

Researchers used default admin:admin credentials as part of a vulnerability chain that let them run code on two automakers’ production ForgeRock servers and remotely unlock connected cars. Found in early 2026 and disclosed on November 7, the flaws also exposed vehicle locations and supported remote engine commands. The findings came from controlled security research, not […]

The post Hackers Used Default admin:admin Credentials to Exploit ForgeRock RCE and Remotely Unlock Cars appeared first on Cyber Security News.

Attackers have taken over 10 npm packages and slipped hidden code into 12 releases. The code uses the Ethereum blockchain to find a server and download more malware. Sonatype Research Labs confirmed the finding on November 4, 2026, and tracks it as sonatype-2026-010515, with a high severity score of 8.7. PolinRider malware The hijacked packages […]

The post Hackers Hijack 10 npm Packages to Spread PolinRider Malware Using Ethereum Blockchain appeared first on Cyber Security News.

Google Gemini allowed users to download AI-generated images that its safety filters had refused to display, according to research published by Fog Security on November 5, 2026. The bypass did not require a jailbreak. Instead, the download feature sometimes delivered a rejected image while the conversation showed a different, allowed picture. Gemini Image Safety Filter […]

The post Google Gemini Safety Bypass Lets Users Download AI-Generated Images That Its Own Filters Blocked appeared first on Cyber Security News.

CISA added a SonicWall SonicOS SSLVPN vulnerability, CVE-2026-19868, to its Known Exploited Vulnerabilities catalog, warning that valid-credential users can bypass SAML authentication controls and potentially evade multi-factor authentication. CISA added the vulnerability on November 6, 2026, and set a November 20 remediation deadline. Its entry lists ransomware use as unknown and does not require forensic […]

The post CISA Warns of SonicWall SonicOS SSLVPN Vulnerability Exploited in Attacks appeared first on Cyber Security News.

Varonis Threat Labs has built NotC2, a proof-of-concept command-and-control (C2) framework. It runs entirely on native AWS services and uses Amazon Bedrock to turn plain English into cloud commands. It is service abuse, not a flaw in Bedrock, and it only works after an attacker already holds AWS credentials . NotC2 AI-powered C2 framework Classic […]

The post Researchers Uncover NotC2 AI-Powered C2 Framework That Hides Malicious Commands Inside AWS Services appeared first on Cyber Security News.

Veeam warned that a critical Linux kernel flaw with a CVSS score of 9.8, could cause denial of service or memory corruption across backup and recovery products. Veeam’s November 6 impact statement identified a Linux kernel use-after-free vulnerability (CVE-2026-98432) in TCP/IPv4 connection setup and outlined update paths for affected systems. Its security advisory does not […]

The post Veeam Warns Critical 9.8 Linux Kernel Flaw Could Crash Backup Appliances and Disrupt Recovery Operations appeared first on Cyber Security News.

CISA, FBI, HHS, USDA, and DOT have warned that hackers are targeting industrial refrigeration and cold chain monitoring systems worldwide, putting food, medicine, and other temperature-sensitive goods at risk. The November 5, 2026, warning urges operators to secure exposed controllers before attackers can change temperatures, damage equipment, or disrupt storage operations. The joint federal fact […]

The post U.S. Agencies Warn of Hackers Targeting Industrial Refrigeration to Disrupt Food and Medicine Storage appeared first on Cyber Security News.

Attackers have started targeting the SSHole authentication bypass affecting certain OpenSSH servers, according to new SANS Internet Storm Center findings. The flaw allows remote attackers to access some password-disabled Linux accounts by submitting an unusually long password, without knowing valid credentials or holding an SSH key. SANS researcher Johannes Ullrich reported the first clear exploit […]

The post Hackers Begin Exploiting OpenSSH SSHole Authentication Bypass Vulnerability appeared first on Cyber Security News.

University of Chicago law professor William Baude says Anthropic’s Claude AI deleted his current syllabus and a year of constitutional law lecture notes while handling a simple editing task. He recovered every file through Dropbox, preventing the mistake from becoming a permanent loss of teaching material. Baude shared the incident on November 5, 2026, explaining […]

The post Claude AI Accidentally Deletes Law Professor’s Entire Syllabus and One Year of Lecture Notes appeared first on Cyber Security News.

NVIDIA has opened an independent investigation into reports that a foreign intelligence operation targeted founder and CEO Jensen Huang. Announced on November 8, 2026, the review will examine the reported activity and any possible security impact. The board said it has no reason to believe company secrets or U.S. national security were compromised. A committee […]

The post NVIDIA Investigates Suspected Chinese Spy Operation Targeting CEO Jensen Huang appeared first on Cyber Security News.

A critical security flaw in React Server Components can let attackers run code remotely without logging in. React published the advisory, tracked as GHSA-xqc2-xf4c-x3h3, on October 14, 2026. The issue carries a CVSS v4 score of 9.5, and the React team recommends immediate updates for affected applications. The flaw affects react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack. These […]

The post Critical React Server Components Flaw Lets Hackers Execute Code Remotely Without Authentication appeared first on Cyber Security News.