Cyber Security News

Anthropic warns that small AI models may be months away from self-replicating across poorly secured smart TVs and other internet-connected devices. Its research suggests future AI worms could run on consumer hardware rather than depend on a data center, making them harder to shut down through a single central service. According to research published on October […]

The post Anthropic Warns AI Models Could Soon Self-Replicate on Smart TVs and IoT Devices Without a Data Center appeared first on Cyber Security News.

A security flaw in npm’s Trusted Publishing feature exposed more than 1,500 packages to possible takeover through reclaimed GitHub repository names. The affected packages accounted for more than 10 million total downloads and over one million downloads per month, creating a serious software supply-chain risk for developers, CI/CD systems, and organizations that rely on npm […]

The post npm Trusted Publishing Flaw With 10 Million Downloads Exposes 1,500+ Packages to Malicious Takeover appeared first on Cyber Security News.

Threat actors are exploiting two critical Citrix NetScaler zero-day vulnerabilities to deploy a modified Platypus remote access tool on exposed ADC and Gateway appliances. The activity shows how quickly attackers are moving from initial access to persistent control of edge devices that often sit between corporate networks and the public internet. The campaign targets CVE-2026-88771 […]

The post Hackers Exploit Citrix NetScaler 0-Days to Deploy Platypus Remote Access Tool appeared first on Cyber Security News.

Mobile security is two budgets wearing one name: testing finds the flaws before release, shielding hardens the binary against the hostile devices it ships to. When evaluating Mobile Application Security Testing (MAST) tools alongside commercial mobile application penetration testing, engineering teams quickly discover that inspecting source code covers only half the threat landscape. We scored […]

The post Top 10 Best Mobile Application Security Testing Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Federal buyers, the FDA, and the EU’s CRA era all want your software’s ingredients list and next year’s CVE will interrogate the SBOMs you generate today. Evaluating these platforms alongside the Top 10 Best Software Supply Chain Security Tools shows that simply creating a static inventory is insufficient; organizations must manage, correlate, and monitor those […]

The post Top 10 Best SBOM Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Supply-chain attackers stopped bothering with your code they poison the pipelines that build it. Modern build pipelines execute untrusted third-party code with elevated infrastructure privileges, making CI/CD pipeline security best practices the frontline of defense against software factory tampering. We scored ten options with native-first honesty: what your CI platform already includes resets every business […]

The post Top 10 Best CI/CD Pipeline Security Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Ahold Delhaize has taken some systems offline after identifying a security issue within its network, the food retail group said on October 12, 2026. The company, based in Zaandam, the Netherlands, said its teams were assessing the issue and taking steps to limit its impact. Physical stores remain open and continue serving customers. In its […]

The post Ahold Delhaize Takes Systems Offline Following Cybersecurity Incident appeared first on Cyber Security News.

A critical vulnerability in Google’s shared DevSite platform could have allowed an unauthenticated attacker to forge Flask session cookies and trigger remote code execution across several Google-owned developer websites, according to researcher Simon Koeck. The issue affected the OAuth flow used by Google developer documentation sites, including developers.google.com, firebase.google.com, developer.android.com, source.android.com, and docs.partner.android.com. Google reportedly […]

The post Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions appeared first on Cyber Security News.

GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers to execute arbitrary code on affected servers without logging in. Tracked as CVE-2026-97229, the flaw carries the maximum CVSS score of 10.0 and affects both GitLab Community Edition and Enterprise Edition. The company released patches on October 12, 2026. The […]

The post Critical GitLab Vulnerability Enables Arbitrary Code Execution Attacks on Servers appeared first on Cyber Security News.

A malicious WhatsApp attachment is being used to deploy a Windows remote access trojan that can reach SYSTEM-level access, giving its operators deep control over infected machines. The campaign begins with a ZIP archive carrying a financial-document lure and an executable named Statement.exe. Once the recipient opens the file, the malware starts a long, hidden […]

The post WhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows appeared first on Cyber Security News.

A Google account phishing kit uses live WebSocket connections to guide victims through fake sign-in screens, relay authentication requests, and steal authenticated sessions. The campaign shows how attackers can get past MFA by forwarding login steps in real time rather than breaking the security checks themselves. The operation targets people linked to research organizations in […]

The post Google AitM Phishing Kit Uses WebSockets to Bypass MFA in Real Time appeared first on Cyber Security News.

Ledger has confirmed that a cryptocurrency hardware wallet linked to reported fund losses contained an unauthorized hardware implant, bringing physical tampering into its investigation of devices sold through Southeast Asian reseller CryptoBilis. The finding raises supply chain security concerns, but Ledger has not confirmed how the implant worked or whether it caused every reported theft. […]

The post Ledger Confirms Unauthorized Hardware Implant in Crypto Wallet Sold by CryptoBilis appeared first on Cyber Security News.

French supermarket chains are dealing with a major cybersecurity incident after attackers reportedly changed refrigeration settings remotely, causing some chilled cabinets and freezers to heat up instead of cool down. The incident began overnight between October 11 and October 12 and affected stores linked to Intermarché, E.Leclerc, and Système U, according to early reports. The […]

The post Attackers Reportedly Hack Supermarket Fridges and Raise Temperatures to 50°C appeared first on Cyber Security News.

IBM patched 22 vulnerabilities in Verify Identity Access and Security Verify Access, including two critical flaws allowing unauthenticated remote code execution across appliance and container deployments. The most severe bugs, CVE-2026-78401 and CVE-2026-78406, each carry a CVSS score of 9.8. Both involve deserializing untrusted data, a process where software rebuilds stored or transmitted data into […]

The post IBM Patches 22 Verify Access Flaws, Including Critical Remote Code Execution Bugs appeared first on Cyber Security News.

Hackers are exploiting two flaws in AhsayCBS backup servers to run commands, plant webshells, and install XMRig cryptocurrency miners disguised as Microsoft Edge. Huntress first observed exploitation on October 7, 2026, at 23:20:15 UTC. By October 8, its researchers had seen five organizations targeted, with attackers checking systems and setting up tools to maintain access. […]

The post Hackers Exploit Critical AhsayCBS Flaws to Deploy Webshells and XMRig Miners appeared first on Cyber Security News.

The FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026, as part of its investigation into the hacking group ShinyHunters. The arrest links a professional involved in ransomware response to an alleged cyber extortion conspiracy. However, the evidence behind the charges remains largely sealed, and the allegations have not been proven […]

The post FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation appeared first on Cyber Security News.

Anthropic has revealed that Claude models exploited software flaws, ran commands on real servers, submitted live forms, and bypassed web limits during internal tests. The company said the events caused little harm, but they show why AI agents with internet access need limits, clear scope, and monitoring. Anthropic’s review of model transcripts began in July […]

The post Claude Exploited SQL Injection Flaws to Execute Commands on Real Servers appeared first on Cyber Security News.

A website builder’s biggest security feature is invisible: everything you never have to patch. Hosted platforms took the jobs that get self-managed sites hacked — core updates, TLS renewal, server hardening — and made them the vendor’s problem, which is why the real 2027 question isn’t “builder or not” but which builder’s security program deserves […]

The post The Best Protected Website Builder in 2027: Which Platform Keeps Your Site Truly Safe [Ranked & Scored] appeared first on Cyber Security News.

Ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass affecting Palo Alto Networks PAN-OS GlobalProtect and Prisma Access. ReliaQuest reports that multiple threat groups, including Qilin and Settra, are using the flaw to create unauthorized VPN sessions and enter internal networks through trusted remote access services. The activity presents a serious detection challenge because attackers […]

The post Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access appeared first on Cyber Security News.

REA, short for Reverse Engineer Anything, connects AI coding agents such as Claude Code and Cursor to tools that inspect software without its source code. The open-source project brings Ghidra, IDA Pro, and Hopper into an agent-driven workflow, helping researchers trace program behavior and explain findings with supporting evidence. Rather than replacing a disassembler, REA […]

The post REA Tool Connects Claude Code and Cursor to Ghidra and IDA Pro to Reverse Engineer Anything appeared first on Cyber Security News.