Cybersecurity News: Breaches, Ransomware & Zero-Days

10,232 stories · Updated every 5 minutes · Page 20 of 25

1. US federal court work hit after BAE Systems cyberattack affects bankruptcy court systems

   TechRadar · 19 Oct 2026, 20:45 IST · Medium severity

   US federal court work hit after BAE Systems cyberattack affects bankruptcy court systems

2. OnlyFans Copyright Takedowns Expose Compromised Websites

   darkreading · 19 Oct 2026, 19:58 IST · Medium severity

   Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's Greg Pollock explains what...

3. 19th October – Threat Intelligence Report

   Checkpoint Research · 19 Oct 2026, 20:24 IST · High severity

   For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES CenterPoint Energy, a US utility company serving Texas and several other states, has...

4. Microsoft fixes game, app crashes caused by recent Windows update

   BleepingComputer · 19 Oct 2026, 20:25 IST · Medium severity

   Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010).

5. ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

   The Hacker News · 19 Oct 2026, 19:44 IST · Critical severity

   The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.

6. Hackers Use AI Agents to Do Hacking for Them

   PYMNTS.com · 19 Oct 2026, 20:05 IST · Medium severity

   New research shows the growing use of AI-powered hacking systems in cybercrime operations. The trend was uncovered in an investigation by cybersecurity firm NorForge, findings from which were published Monday (Oct. The company’s...

7. AOMEI Backupper update servers hijacked to push malware: Check your PC

   Malwarebytes Labs · 19 Oct 2026, 19:51 IST · Medium severity

   The Google Threat Intelligence Group (GTIG) reports that attackers compromised AOMEI Technology’s update and notification infrastructure in a campaign investigated between April and July. AOMEI Backupper is backup software that the...

8. Conduent Agrees to Pay $80m to Settle Data Breach Class Action

   Infosecurity Magazine · 19 Oct 2026, 19:45 IST · High severity

   The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm

9. AI agents broke into 100+ sites for one hacker at $50 each, researcher says

   TNW · 19 Oct 2026, 19:28 IST · Medium severity

   A cybersecurity researcher watched a Chinese-speaking hacker break into the websites of more than 100 companies, leaving almost all the work to AI agents. Snorre Fagerland, principal threat researcher at NorForge, set out the findings...

10. Inside the Underground Market for Know Your Client Services

    BleepingComputer · 19 Oct 2026, 19:30 IST · Medium severity

    Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to...

11. Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

    Krebs on Security · 19 Oct 2026, 19:18 IST · High severity

    federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with...

12. A hacker broke into John Deere and SharkNinja with an army of AI agents

    The Verge · 19 Oct 2026, 19:28 IST · Medium severity

    A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security firm Norforge . Though Norforge doesn't name the targets, Reuters reports that the...

13. Microsoft ditches residency plans at UK's largest data center over power supply concerns

    TechRadar · 19 Oct 2026, 19:02 IST · Medium severity

    Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...

14. ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access

    Help Net Security · 19 Oct 2026, 19:03 IST · Medium severity

    American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ Microsoft 365 accounts. The intruders used a compromised...

15. From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

    The Hacker News · 19 Oct 2026, 17:20 IST · Medium severity

    In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the agent's prompt. Separately, Email-to-Case and Web-to-Case turn...

16. GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

    The Hacker News · 19 Oct 2026, 18:35 IST · Critical severity

    The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake...

17. OpenCode Breach Could Affect OpenAI, Anthropic and Google

    Infosecurity Magazine · 19 Oct 2026, 19:00 IST · Medium severity

    A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users

18. ConnectWise Suspends Cloud Services in Response to Cyberattack

    SecurityWeek · 19 Oct 2026, 18:46 IST · Medium severity

    The services remain unavailable as the company continues remediation and security validation. The post ConnectWise Suspends Cloud Services in Response to Cyberattack appeared first on SecurityWeek .

19. Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

    SecurityWeek · 19 Oct 2026, 18:14 IST · Medium severity

    Threat actors have been observed delivering cryptocurrency miners and proxy software. The post Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure appeared first on SecurityWeek .

20. Microsoft fixes classic Outlook bug that hid Copilot buttons

    BleepingComputer · 19 Oct 2026, 18:14 IST · Medium severity

    Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users.

21. A sextortion conspiracy killed his son (Lock and Code S07E21)

    Malwarebytes Labs · 19 Oct 2026, 17:40 IST · Medium severity

    This week on the Lock and Code podcast… At just 17 years old, Jordan DeMay was murdered by strangers online. That’s how Jordan’s father, John DeMay, described what happened to his son four years ago. At home in Michigan, Jordan was...

22. Whopper of a data breach sees Burger King Japan expose over 11 million customer records

    TechRadar · 19 Oct 2026, 17:35 IST · High severity

    Whopper of a data breach sees Burger King Japan expose over 11 million customer records

23. Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft

    HackRead · 19 Oct 2026, 17:37 IST · Medium severity

    More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new…

24. ConnectWise backup credentials exposed multiple Microsoft 365 tenants

    CSO Online Security · 19 Oct 2026, 17:30 IST · High severity

    ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to authenticate into customer...

25. Hackers steal customer data from major Russian hosting provider FirstVDS

    The Record by Recorded Future · 19 Oct 2026, 17:15 IST · Medium severity

    Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers.

26. 4 ways to tame shadow AI (hint: you need them all)

    Computerworld · 19 Oct 2026, 17:28 IST · Medium severity

    In olden days — last year, say — employees using unsanctioned AI tools might copy-and-paste sensitive data that could end up in the AI company’s training data set. Today, an unsanctioned AI can hack into another company for an employee...

27. Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

    The Hacker News · 19 Oct 2026, 15:36 IST · Medium severity

    A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude...

28. Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack

    SecurityWeek · 19 Oct 2026, 16:43 IST · Medium severity

    The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek .

29. OTX Threat: QuartzLine: A working PDF viewer with a backdoor inside

    AlienVault OTX · 16 Oct 2026, 18:34 IST · Medium severity

    QuartzLine, also tracked as CLOUDHAZE by Mandiant, is malicious software disguised as a functional Windows PDF viewer that conceals a backdoor enabling attackers to execute commands and deploy additional malware. The malware has...

30. ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants

    Infosecurity Magazine · 19 Oct 2026, 16:00 IST · Medium severity

    Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens

31. OpenAI Model Hacked Crypto Wallet and Spent Funds to Deploy Smart Contracts

    HackRead · 19 Oct 2026, 15:41 IST · Medium severity

    OpenAI disclosed that an internal AI model hacked a crypto wallet and spent Sepolia test ETH without permission…

32. OTX Threat: ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

    AlienVault OTX · 19 Oct 2026, 15:20 IST · Medium severity

    A Microsoft 365 API credential belonging to ConnectWise Cloud Backup (formerly SkyKick) was compromised and used to gain unauthorized access to customer M365 environments. The threat actor authenticated from IP address 144.172.64.128 on...

33. Mecka AI recruits growth hackers behind “IRL sidequest” app Thirdspace

    BetaKit · 19 Oct 2026, 15:30 IST · Medium severity

    Toronto- and New York City-based Mecka AI , which aims to supply the training data necessary to deploy robots in the real world, has completed its second acquisition to date. The buzzy AI startup announced today that it bought Ottawa’s...

34. OTX Threat: YuanKong RAT: the Android remote-control service that stamps its operators' names into every build

    AlienVault OTX · 16 Oct 2026, 20:55 IST · Medium severity

    YuanKong is a multi-tenant Android remote access trojan whose dropper stores decryption keys in cleartext configuration files. The malware uses a two-key XOR scheme to unpack payloads signed with a shared certificate across all operator...

35. OTX Threat: CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

    AlienVault OTX · 17 Oct 2026, 06:36 IST · Critical severity

    On September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution vulnerability affecting NetScaler Application Delivery Controller and NetScaler Gateway with a CVSS score of 9.8. The vulnerability enables...

36. Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks

    Help Net Security · 19 Oct 2026, 15:08 IST · Medium severity

    Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in the previous quarter and roughly four times the share of any other brand. Top 10 most impersonated...

37. OTX Threat: Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection

    AlienVault OTX · 16 Oct 2026, 12:59 IST · Medium severity

    Since April 2017, a Russian-language affiliate program called Hotejka, believed to be a rebrand of ROI777, has operated the Help Traffic Distribution System (TDS), delivering tech support scams to victims. The operation uses browser...

38. OTX Threat: An Analysis of Suo5-Based Tunneling and Pivoting Attack Techniques Through Case Studies

    AlienVault OTX · 16 Oct 2026, 13:03 IST · Medium severity

    This analysis examines exploitation of Suo5, an HTTP/HTTPS-based tunneling tool, for pivoting attacks through compromised web servers to access internal networks. Suo5 relays TCP traffic and enables SOCKS5 proxy access to internal...

39. OTX Threat: BREAK THE SILENCE: Tracking Silent Lynx Through Exposed Infrastructure

    AlienVault OTX · 16 Oct 2026, 12:51 IST · Medium severity

    Silent Lynx, a persistent cyber espionage threat actor, has conducted targeted intrusion campaigns against government ministries, diplomatic missions, and civil society organizations across Central Asia since 2024. The group focuses on...

40. Are clearinghouses the answer to the AI hacking threat?

    AI coding token costs are on track to rival human payroll | InfoWorld · 19 Oct 2026, 14:30 IST · Medium severity

    This summer, the White House rolled out the Gold Eagle Initiative , billed as an “unprecedented” effort to coordinate cybersecurity vulnerability disclosure across government and industry. It was easy to miss this news with all of the...