Posts of last few hours

Apache Tomcat has fixed eight security flaws that could let attackers bypass password checks, expose data between users, and disrupt connections under specific conditions. Apache disclosed the vulnerabilities on October 20, 2026, after releasing fixes in Tomcat 11.0.27, 10.1.61, and 9.0.123. The eight issues span different release branches, so not every flaw affects every version. […]

The post Apache Tomcat Fixes 8 Security Flaws That Could Let Hackers Bypass Authentication appeared first on Cyber Security News.

Every breach eventually touches a file a dropped binary, an edited config, a replaced DLL and file integrity monitoring is the control that notices. The 2026 challenge isn’t detection, it’s signal: PCI DSS 4.x demands FIM, but a tool that pages on every patch Tuesday trains the SOC to ignore the one change that matters. […]

The post Top 10 Best File Integrity Monitoring (FIM) Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

The fastest way to leak production data is to copy it somewhere less defended and most organizations do exactly that every sprint, cloning customer records into test, analytics, and now AI-training environments with a fraction of production’s controls. Data masking closes that gap by making the copies worthless to steal while keeping them useful to […]

The post Top 10 Best Data Masking Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Privacy stopped being a policy problem and became a data-engineering problem: you cannot fulfill a deletion request against data you cannot find, and in 2026 more US states, deeper AI-governance rules, and shrinking DSAR deadlines punish teams still running privacy on spreadsheets. We scored ten platforms across discovery depth, DSAR automation, consent orchestration, and mid-market […]

The post Top 10 Best Data Privacy Management Software in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Databases hold what attackers came for, and service accounts hold the widest keys database security decides whether either gets noticed.We scored ten options from enterprise DAM anchors to warehouse-era access layers. Imperva takes 1 for watching-plus-stopping; IBM Guardium and Satori complete the podium. Key Takeaways • 1 overall: Imperva the DAM anchor that blocks policy […]

The post Top 10 Best Database Security & Activity Monitoring Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

SafePay ransomware has affected at least 600 separate victims across multiple critical infrastructure sectors, according to a joint government advisory released on October 20, 2026. Active since August 2024, the group has targeted businesses and essential services across North America, South America, Europe, and Australia, becoming one of the most active ransomware threats in 2026. […]

The post SafePay Ransomware Has Affected 600+ Organizations by Exploiting VPNs and Backup Servers appeared first on Cyber Security News.

CISA has warned that SafePay ransomware actors have compromised at least 600 organizations across multiple critical infrastructure sectors, combining data theft and encryption with deliberate attacks on backup systems to obstruct recovery. The October 20, 2026, joint advisory describes operations spanning North America, South America, Europe, and Australia since August 2024. Published with the FBI, […]

The post CISA Warns SafePay Ransomware Has Hit 600+ Organizations and Destroyed Backup Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Rust 1.100, scheduled for November 12, 2026, will introduce stable support for Cargo dependency cooldowns, allowing developers to reject newly published package versions until they reach a configurable minimum age. The feature gives security researchers, maintainers, and registries time to identify malicious releases before automated updates spread them across development environments and CI pipelines access. […]

The post Rust 1.100 Will Let Developers Block Fresh Cargo Packages to Reduce Malware Supply Chain Risks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

State Bank of India (SBI) has disclosed a data loss incident after a preliminary review identified 3,897 customer records containing personal information on the dark web. The bank reported the findings in an October 21, 2026, stock exchange filing, while saying investigators still needed to establish the data’s authenticity, completeness, and source. The disclosure confirms […]

The post SBI Confirms Data Breach – 3000+ Customer Records Exposed on Dark Web appeared first on Cyber Security News.

Meta has paused Muse AI’s conversation sharing feature after a privacy flaw exposed confidential business records and personal details through discoverable chat links. The problem affected pages users chose to share, not every private Muse conversation. Anyone who found an affected link could open its contents without signing in. The exposure came from how Muse […]

The post Meta Muse AI Privacy Flaw Exposes Confidential Business Data Through Shared Chat Links appeared first on Cyber Security News.

Ransomware affiliates associated with INC and The Gentlemen exposed an intrusion ecosystem after leaving operational servers publicly accessible. The investigation began in late September 2026 with open directories on 45.227.254[.]43. Configuration files and credentials led researchers to six additional adversary servers, exposing development infrastructure, command infrastructure and ransomware staging systems. The findings describe an active […]

The post INC Ransomware Hackers Use Claude AI, Expose 8,257 Messages and 46 Malware Builds appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has expanded its ChatGPT Chrome extension so the assistant can read information across open tabs and carry out browser tasks. The update moves ChatGPT beyond answering questions about a single page, adding tools for comparing content, filling forms, sending messages, and organizing tabs. The announcement appeared on October 16 in India. OpenAI says the […]

The post Now ChatGPT Chrome Extension Can See and Analyze the Content in Open Tabs appeared first on Cyber Security News.

Microsoft has introduced new rules for assessing reports in its bug bounty programs, tying submission completeness more directly to potential rewards. Announced by the Microsoft Security Response Center (MSRC) on October 20, 2026, these changes replace the previous multiple report quality levels with two assessments: “Complete” and “Not Complete.” This updated approach establishes clearer expectations […]

The post Microsoft Introduces New Bug Bounty Rules That Could Affect Security Researchers’ Rewards appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Attackers exploited compromised UpdraftCentral connection keys to send trusted remote-management commands to WordPress sites, ultimately installing malicious plugins that could provide unauthorized access to these websites. This incident followed unauthorized access to TeamUpdraft’s website on October 17-18, 2026. The company suspects attackers accessed its customer database, which contained UpdraftCentral connection keys and customer account information. […]

The post Hackers Exploit Compromised UpdraftCentral Keys to Install Malicious Plugins on WordPress Sites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

TeamUpdraft, the developer behind the UpdraftPlus WordPress backup plugin, has disclosed a website breach that exposed remote management keys. Attackers used those keys to install malicious plugins on connected WordPress sites, turning a trusted management feature into a route for running harmful code. The company identified unauthorized access to teamupdraft.com during October 17–18, 2026. Attackers […]

The post WordPress Backup Plugin Developer Hacked to Inject Malicious Code on Installed Sites appeared first on Cyber Security News.

Researchers discovered that private keys could be extracted from public certificate data, compromising eight intermediate certificates from eMudhra’s Certificate Authority. The incident, publicly disclosed on October 20, 2026, prompted emergency blocks across browser platforms and trust stores and revealed failures in the authority’s cryptographic key generation process. The affected certificates consist of six TLS intermediates […]

The post eMudhra Security Incident Exposes Weak Private Keys Used to Sign Trusted Certificates appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0. This warning, published on October 20, 2026, advises administrators to prepare for immediate upgrades. Additionally, watchTowr has reported two potential remote code execution (RCE) vulnerabilities. However, PHP has not yet confirmed their identifiers or […]

The post Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.