Cyber Security News

OpenAI has removed a cluster of ChatGPT accounts linked to a covert influence operation from Russia. The accounts produced social-media posts and replies designed to steer people toward the International Burke Institute, or IBI, a purported Israeli expert community. The campaign did not depend on malicious software or an exploit. It used generative AI to […]

The post OpenAI Bans Russia-Linked ChatGPT Accounts Used in Covert Influence Campaign appeared first on Cyber Security News.

Iran-linked hackers have expanded an espionage effort with a Windows backdoor and reverse SSH tunnelling utility. The activity is tied to Tortoiseshell, also tracked as Mirage Kitten, UNC1549 and Nimbus Manticore. The campaign gives operators more ways to retain access after breaking into a network. The tunnelling tool can route traffic from an attacker-controlled server […]

The post Iran-Linked Hackers Expand Attacks With New Backdoor and Reverse SSH Tunnels appeared first on Cyber Security News.

Cybercriminals are using a counterfeit Claude desktop application to compromise Windows systems, disable key security checks, and install remote-access malware. The campaign turns a familiar AI software search into a route for credential theft and long-term access. It also shows how trusted-looking download pages can make a dangerous file appear routine. For organizations, the campaign […]

The post Hackers Use Fake Claude Desktop App to Disable Defender and Install Remote Access Malware appeared first on Cyber Security News.

Twenty-four malicious npm packages have been used to turn trusted package mirrors into staging points for ClickFix phishing pages. The campaign does not infect a developer by installing a package. Instead, it exploits the confidence users place in familiar hosting domains to make a phishing page appear safer than it is. The packages contain a […]

The post 24 Malicious npm Packages Abuse Trusted Mirrors to Host ClickFix Phishing Pages appeared first on Cyber Security News.

A phishing operation is abusing legitimate remote monitoring and management tools to give attackers direct control over victim systems. The campaign uses convincing document lures, rapidly changing hosting infrastructure, and signed software that can blend into normal IT activity. A phishing campaign is turning familiar support software into a direct route into corporate systems. Rather […]

The post Hackers Abuse Legitimate RMM Tools in 46-Country Phishing Campaign to Gain Remote Access appeared first on Cyber Security News.

SonicWall has disclosed two security vulnerabilities in its NetExtender Linux client, including a critical path traversal flaw that could allow an attacker to write arbitrary files with root privileges. The issues affect NetExtender Linux Client versions 10.3.5 and earlier; the fixed release is version 10.3.6 and later. Tracked as CVE-2026-66152, the more severe vulnerability received […]

The post SonicWall NetExtender Vulnerabilities Allow an Attacker to Write Arbitrary Files as Root appeared first on Cyber Security News.

A critical vulnerability in the TranslatePress WordPress plugin could allow unauthenticated attackers to hijack administrator accounts and fully compromise affected websites. The flaw, tracked as CVE-2026-19632, affects TranslatePress versions up to 3.3.1 and has been fixed in version 3.3.2. TranslatePress is a multilingual WordPress plugin with more than 400,000 active installations. Wordfence assigned the vulnerability […]

The post WordPress Plugin Vulnerability Exposes 400,000 Sites to Account Takeover Attacks appeared first on Cyber Security News.

Iran-linked operators are using a trusted developer tool to conceal a backdoor called Dindoor inside Windows environments. The malware uses the Deno JavaScript and TypeScript runtime to execute encoded code, helping its activity blend into legitimate software use. Dindoor has appeared as a later-stage payload in spearphishing intrusions. Researchers observed it at U.S. software and […]

The post Iran-Linked Hackers Abuse Legitimate Developer Tool to Hide Dindoor Backdoor appeared first on Cyber Security News.

Researchers tie the LinX Coders phishing-as-a-service toolkit to 9,332 compromise events across 94 countries, with 63.7% of victims in the United States and stolen session cookies accounting for more than half of all outcomes. A phishing-as-a-service (PhaaS) toolkit tracked as Mirage2FA has been linked to the potential compromise of 4,532 Microsoft 365 accounts in a […]

The post Mirage2FA Phishing Kit Bypasses MFA to Hijack Microsoft 365 Sessions, Targeting 3,500+ Organizations appeared first on Cyber Security News.

Google has released Chrome 152 for Windows, macOS, and Linux, delivering 327 security fixes and improvements. The update addresses 10 critical vulnerabilities, making it an important security release for individual users and enterprise environments. Chrome 152 is rolling out as version 152.0.7977.64 for Linux and version 152.0.7977.64/.65 for Windows and macOS. Google said availability will […]

The post Google Chrome 152 Released With 327 Security Fixes, Including 10 Critical Vulnerabilities appeared first on Cyber Security News.

CISA’s latest advisory for red teams warns critical infrastructure operators that security systems can fail even if they have a lot of funding. This is because trained analysts are needed to respond to alerts effectively. The agency’s “A Tale of Two SOCs” report compares two parallel red team engagements: one against a Government Services and […]

The post CISA Red Team Breaches Critical Infrastructure to Reveal SOC and Cloud Security Gaps appeared first on Cyber Security News.

Alice, the AI trust, safety, and security company formerly known as ActiveFence, has closed a $140 million funding round led by Apax Digital Funds, with new backing from SentinelOne, Samsung Electronics, Maj Invest, MoreTech, and Phoenix Insurance, alongside existing investors Resolute Ventures, Grove Ventures, CRV, Highland Europe, Vintage Investment Partners, Norwest, NFX, and Claltech. The […]

The post AI Security Startup Alice Raises $140 Million as Enterprise AI Threats Surge appeared first on Cyber Security News.

SynkLoader is using Microsoft Teams conversations to turn routine IT support requests into a route for malware delivery. The campaign relies on impersonation rather than a software flaw, placing the decision to install a supposed fix directly in front of an employee. Attackers contact targets through Teams messages and voice phishing, also called vishing, while […]

The post SynkLoader Mimic as IT Support Personnel Attacking Users Via Microsoft Teams appeared first on Cyber Security News.

ToxNetV2 is a Linux botnet that shows how artificial intelligence can move closer to real attack operations. Instead of using a model only to write text, the malware feeds system and botnet data into an AI service, then turns selected replies into proposed commands. That design gives operators a faster way to judge what to […]

The post ToxNetV2 Linux Botnet Uses NVIDIA AI to Generate Shell and Remote SSH Attack Actions appeared first on Cyber Security News.

WhatsApp has confirmed that more than 1 billion people now use passkeys to log into the messaging app, marking one of the largest passwordless authentication rollouts in consumer tech history. Alongside this milestone, Meta’s flagship messaging platform is rolling out a major upgrade to two-step verification, replacing the long-standing six-digit PIN with a full alphanumeric […]

The post WhatsApp Passkeys Reach 1 Billion Users as Two-Step Verification Gets Stronger Passwords appeared first on Cyber Security News.

ASOS US Sales LLC reported unauthorized access to customer accounts using credentials obtained from outside the company, detected on July 28 and confirmed the next day. In a breach notification dated August 21, 2026, ASOS said it identified unusual activity involving customer accounts and launched an investigation immediately. The retailer determined that an unauthorized third […]

The post ASOS Warns Customer Accounts Were Accessed Using Compromised Login Credentials appeared first on Cyber Security News.

A near-autonomous cyberattack using open-source AI agent frameworks compromised government systems in Asia, cracked 85 employee accounts, and stole more than 2,500 personnel records, according to research from Dream. The campaign demonstrates how coordinated AI agents can now execute large parts of an intrusion operation at machine speed. Dream researchers uncovered a 160 MB archive […]

The post Eight AI Agents Breach Government Systems, Crack 85 Accounts and Steal 2,500+ Records appeared first on Cyber Security News.

A new web-based scam is using fake Microsoft-branded security scans to frighten people into removing the antivirus software protecting their computers. The pages claim to inspect a device, report serious security failures, and insist that third-party antivirus products are no longer supported by Windows. The message is false, but it is designed to feel urgent […]

The post Fake Microsoft Security Scan Tells You to Remove Antivirus—Then Scammers Ask for Remote Access appeared first on Cyber Security News.

AliExpress’s homepage quietly builds hidden WebAudio processing graphs in the browser, a technique that appears to power an aggressive device-fingerprinting system while producing an unexpected real-world side effect: interfering with Bluetooth multipoint audio switching on connected headphones. Security researcher Laserphile, using multipoint Bluetooth headphones that stay simultaneously paired to a PC and a phone, noticed […]

The post AliExpress Uses WebAudio API and Zero-Gain Audio Graphs for Silent Device Fingerprinting appeared first on Cyber Security News.

A critical authentication flaw in Tata Nexarc, a B2B procurement platform for small and medium businesses in India, allowed attackers to take over accounts by knowing only a registered mobile number. The platform reportedly exposed the one-time password used for login within a decryptable API response, removing the need to intercept SMS messages, phish users, […]

The post Tata’s B2B Platform Flaw Enables Account Takeover Just by Knowing Victim’s Phone Number appeared first on Cyber Security News.