Posts of last few hours

ByteMe CTF 26
Name: ByteMe CTF 26 (an ByteMe CTF event.)
Date: Oct. 9, 2026, 4:30 a.m. — 09 Oct. 2026, 12:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Location: Pune, India
Offical URL: https://bytemectf.owasppccoe.in/
Rating weight: 0
Event organizers: OWASP_PCCOE-CORE
https://ctftime.org/event/3438
Mastering Cybersecurity with VMware vDefend and Avi via Hands-on Labs

Cybersecurity Awareness Month is underway, and the rapid growth of generative AI makes robust defense strategies more critical than ever. Organizations must move beyond basic awareness to build practical, active defenses that protect their VMware Cloud Foundation (VCF) private clouds from increasingly sophisticated, AI-driven threats. To help you strengthen your security posture, VMware is excited … Continued

The post Mastering Cybersecurity with VMware vDefend and Avi via Hands-on Labs appeared first on VMware Security Blog.

https://blogs.vmware.com/security/2026/10/mastering-cybersecurity-with-vmware-vdefend-and-avi-via-hands-on-labs.html
ASOS Breach Reveals the Risks in Customer-Facing SaaS
The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.
https://www.darkreading.com/cyberattacks-data-breaches/asos-breach-risks-customer-facing-saas
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks. [...]
https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/
AI Scramble Drives Cybersecurity M&A Boom
Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What's different: Many of the buyers are not your typical cybersecurity firms.
https://www.darkreading.com/cybersecurity-analytics/ai-scramble-cybersecurity-ma-boom
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 13:20 UTC," StepSecurity
https://thehackernews.com/2026/10/credential-stealing-github-actions.html
Germany Arrests Suspected Qilin Ransomware Leader After Japan Detention
Japan helped extradite a Russian suspect linked to Qilin ransomware to Germany, but the gang continued attacking victims after his arrest. Germany has arrested a Russian national believed to be a leading figure in the Qilin ransomware group, and Japan’s National Police Agency just put its own role in that arrest on the record. The […]
https://securityaffairs.com/200695/uncategorized/germany-arrests-suspected-qilin-ransomware-leader-after-japan-detention.html
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI's jobs portal and stolen sensitive data on almost all FBI agents and job applicants. The FBI has not named the suspect, and no charges have been made public. The
https://thehackernews.com/2026/10/fbi-arrests-another-shinyhunters.html
What We Missed: FBI Strikes Back at ShinyHunters
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run data center.
https://www.darkreading.com/identity-access-management-security/fbi-shinyhunters-claims-hack
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. [...]
https://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/
AnyDesk Linux Flaw Lets Remote Attackers Execute Code as Root Without Authentication

A working proof-of-concept for a serious AnyDesk Linux vulnerability that can let remote attackers run commands as root without authentication or user approval. The issue, named AnyPwn, affects AnyDesk Linux 8.0.2 and was fixed in version 8.0.3. Organizations using AnyDesk for Linux should update immediately and check whether TCP port 7070 is exposed to untrusted […]

The post AnyDesk Linux Flaw Lets Remote Attackers Execute Code as Root Without Authentication appeared first on Cyber Security News.

https://cybersecuritynews.com/anydesk-linux-vulnerability/
How the Canadian Centre for Cyber Security uses frontier AI to accelerate malware reverse engineering
This technical article is the second in a series on the work of the Frontier AI Lab. This second article focuses on malware reverse engineering, the process of deconstructing malicious software without its original source code to help cyber defenders understand its functionality and purpose.
https://cyber.gc.ca/en/guidance/canadian-centre-cyber-security-uses-frontier-ai-accelerate-malware-reverse-engineering
FBI arrests another suspected ShinyHunters hacker after agency breach
The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. [...]
https://www.bleepingcomputer.com/news/security/fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach/
New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets

A new GhostAction campaign has compromised 346 GitHub repositories after threat actors used two hijacked maintainer accounts to add a fake “security audit” workflow designed to steal CI/CD secrets, cloud keys, API tokens, and credentials stored in source-code history. Security firm Socket reported that the October 8 activity affected repositories connected to the GitHub accounts […]

The post New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets appeared first on Cyber Security News.

https://cybersecuritynews.com/ghostaction-github-repo-attack/
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker's infrastructure," iVerify said in a new report published Thursday. The name
https://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.html
Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
Those closest to executives must match their security postures because the weakest link in a family can become the entry point for attacks.
https://www.darkreading.com/cyber-risk/security-threats-don-t-stop-at-the-office-why-executives-families-need-training-too
Moveciti Administrator Access and Exported Database Offered for Sale With 1.18 Million Bus-App Documents
An actor using the handle "DaOnlySpark" claims to be selling administrator access to Moveciti's database along with a database export dated October 9, 2026.
https://darkwebinformer.com/moveciti-administrator-access-and-exported-database-offered-for-sale-with-1-18-million-bus-app-documents/
4 Ways AI Is Changing the Public Safety Threat Landscape
Learn how AI is reshaping the public safety threat landscape and reducing the time, effort, and expertise threat actors need to conduct harmful activities.
https://www.cisecurity.org/insights/blog/4-ways-ai-changing-public-safety-threat-landscape
New Agentic AI Red Team Checklist Adds 222 Tests Across 20 Attack Categories

A free agentic AI red-team checklist offers 222 tests across 20 attack categories to assess autonomous AI systems beyond prompt injection, covering infrastructure, cloud access, tools, memory, and agent communications. The checklist targets a common testing gap. Teams may spend days trying to manipulate a model while overlooking an exposed MLflow server, a reachable cloud […]

The post New Agentic AI Red Team Checklist Adds 222 Tests Across 20 Attack Categories appeared first on Cyber Security News.

https://cybersecuritynews.com/agentic-ai-red-team-checklist/
Germany arrests alleged core Qilin ransomware member after extradition
Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. [...]
https://www.bleepingcomputer.com/news/security/germany-arrests-alleged-core-qilin-ransomware-member-after-extradition/

Managed ad