Cybersecurity News: Breaches, Ransomware & Zero-Days

10,242 stories · Updated every 5 minutes · Page 22 of 25

1. Ampath finds no evidence that test results were taken in breach

   TechCentral · 14 Oct 2026, 22:06 IST · Medium severity

   ID numbers, medical aid details and payment information may have been taken, Ampath has told patients.

2. Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel

   SecurityWeek · 17 Oct 2026, 16:30 IST · Medium severity

   Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. The post Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel appeared first on...

3. Police arrests 95 suspects in international CSAM crackdown action

   BleepingComputer · 15 Oct 2026, 17:25 IST · Medium severity

   Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups.

4. Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

   BleepingComputer · 15 Oct 2026, 23:50 IST · Medium severity

   A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network.

5. Meta says hackers stole code and data on 1,500 people, SecurityWeek reports

   TNW · 17 Oct 2026, 15:22 IST · Medium severity

   “This was not a vulnerability in any Meta product, and Meta’s internal systems were not breached,” a Meta spokesperson told SecurityWeek. Hackers got into some of Meta’s GitHub repositories and took personal data on about 1,500 people....

6. Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

   The Hacker News · 17 Oct 2026, 11:46 IST · Medium severity

   Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain...

7. Biomemory’s DNA Shield stores critical data in synthetic DNA — beyond the reach of cyberattacks

   TechRadar · 17 Oct 2026, 05:35 IST · Medium severity

   Christian Cawley has extensive experience as a writer and editor in consumer electronics, IT and entertainment media. He has contributed to TechRadar since 2017 and has been published in Computer Weekly, Linux Format, ComputerActive,...

8. AI has graduated from hacking companies to stealing from crypto wallets

   Android Authority · 17 Oct 2026, 03:07 IST · Medium severity

   TL;DR OpenAI shares an incident where a test model independent gained access to a crypto wallet in order to fund its work. When the model couldn’t find test tokens to complete its assignment, it computer common recovery phrases to find...

9. CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support

   CISA Alerts · 16 Oct 2026, 17:30 IST · Critical severity

   CISA is aware of critical authentication bypass vulnerability CVE-2026-102764 , affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later);...

10. BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs

    darkreading · 17 Oct 2026, 02:04 IST · Critical severity

    Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.

11. Windows Defender now works in Linux, because why not

    TechSpot · 17 Oct 2026, 02:10 IST · Medium severity

    Microsoft believes Linux systems also need a corporate-oriented security solution such as Defender. Redmond's anti-malware solution, notorious for its arguably excessive false positives, is now offering expanded support for major Linux...

12. Critical BlockStrap flaw lets hackers run code on Magento servers

    BleepingComputer · 17 Oct 2026, 01:30 IST · Medium severity

    Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.

13. This New Cyberattack Can Infect Your Computer Just By Running An Ad

    BGR · 17 Oct 2026, 01:17 IST · Medium severity

    Internet ads already collect plenty of information about you. A reported attack on journalists shows how much worse things get when spyware enters the picture.

14. Japan’s False Emergency Alert for a 9.9 Earthquake Wasn’t a Cyberattack

    Gizmodo · 16 Oct 2026, 23:40 IST · Medium severity

    Japan’s False Emergency Alert for a 9.9 Earthquake Wasn’t a Cyberattack

15. Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026

    Palo Alto Unit 42 · 16 Oct 2026, 23:17 IST · Medium severity

    Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential abuse and phishing The post Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026 appeared...

16. Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

    The Hacker News · 16 Oct 2026, 22:13 IST · Medium severity

    Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked...

17. FTC Subpoenas AI Companies Over Security Breaches Amid Shifting White House Policy

    PYMNTS.com · 16 Oct 2026, 23:14 IST · Medium severity

    The Federal Trade Commission (FTC) on Wednesday (Oct. 14) sent civil subpoenas to OpenAI and Anthropic seeking documents related to a series of recent safety and security incidents in which the companies’ artificial intelligence (AI)...

18. CISA KEV: CVE-2025-61624 — Fortinet Multiple Products actively exploited

    CISA KEV · 16 Oct 2026, 05:30 IST · Critical severity

    Fortinet Multiple Products Path Traversal Vulnerability. FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write...

19. CISA KEV: CVE-2026-102764 — BeyondTrust Remote Support actively exploited

    CISA KEV · 16 Oct 2026, 05:30 IST · Critical severity

    BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability. BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the...

20. The Good, the Bad and the Ugly in Cybersecurity - Week 42 (2026)

    SentinelOne Blog · 16 Oct 2026, 23:01 IST · High severity

    The Good | Authorities Arrest Cyber Exec for Extortion & Dismantle DPRK Laptop Farms The FBI arrested Edward Dubrovsky, a Canadian former cybersecurity executive at incident response and ransomware negotiation firm CYPFER , on charges...

21. AI Agent Hacked Into Crypto Wallet and Stole Funds, OpenAI Says

    Gizmodo · 16 Oct 2026, 22:50 IST · Medium severity

    It questioned the ethics of what it was doing—before proceeding to do it.

22. Certes puts data protection beyond breach in focus

    Tahawul Tech · 16 Oct 2026, 21:38 IST · Medium severity

    Rami Nehme, Managing Director – META, Certes, and Simon Pamplin, CTO, Certes, with security leaders at the “Devalue the stolen data” roundtable in Dubai. Held alongside the CISO50 and Future Security Awards 2026, the Dubai roundtable...

23. China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign

    Cybersecurity Dive - Latest News · 16 Oct 2026, 20:31 IST · Critical severity

    Researchers say the hacker is harvesting credentials and stealing sensitive information.

24. Open-source security rests on understanding risks, scaling fixes

    Cybersecurity Dive - Latest News · 16 Oct 2026, 20:04 IST · Medium severity

    Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report.

25. Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials

    All CISA Advisories · 16 Oct 2026, 17:30 IST · Medium severity

    CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. Malicious cyber actors may use phishing and smishing...

26. Proofpoint lines up $6.3 billion deal for Varonis’ data security

    The Record by Recorded Future · 16 Oct 2026, 20:15 IST · Medium severity

    Cybersecurity giant Proofpoint says it will acquire Miami-based data visibility and security company Varonis in an all-cash transaction worth $6.3 billion.

27. This Week in Security: Critical DNS Keys Rotated, Hacking Freezers Isn’t Cool, OpenAI Spies On Itself, and Advanced Hardware Wallet Hacks

    Hackaday · 16 Oct 2026, 19:30 IST · Medium severity

    Critical Internet keys changed this week . The keys behind DNSSEC, the system for cryptographically validating DNS responses, rolled over on October 11 2026. This is the second time the DNSSEC keys have rotated since the system was...

28. In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

    SecurityWeek · 16 Oct 2026, 19:39 IST · Medium severity

    Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack. The post In Other News: ICS-Sniper Attack, Hacking XWorm...

29. When Your Ransomware Negotiator Works for the Other Side

    darkreading · 16 Oct 2026, 19:30 IST · High severity

    The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.

30. Forescout uncovers ROMULUS malware delivery platform behind ClickFix attacks

    IT Security Guru · 16 Oct 2026, 19:20 IST · High severity

    Forescout’s Vedere Labs has identified a previously undocumented malware delivery platform being used in ClickFix campaigns, alongside new delivery techniques associated with malware loaders linked to Vice Society ransomware activity....

31. Attack on BAE-managed system disrupts US bankruptcy courts

    The Register · 16 Oct 2026, 18:59 IST · Medium severity

    The US' bankruptcy courts are currently down owing to what officials are calling a “cybersecurity incident.” The Administrative Office of the US Courts said the websites and systems that support the Bankruptcy Noticing Center (BNC),...

32. Qualcomm Legally Proves Arm Breached Its License, Wins $2

    Hacker News · 16 Oct 2026, 17:46 IST · Medium severity

33. Moscow detains suspected DataSuckers hackers linked to breaches in Ukraine and Russia

    The Record by Recorded Future · 16 Oct 2026, 19:00 IST · Medium severity

    Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed vast amounts of customer information.

34. Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day

    The Record by Recorded Future · 16 Oct 2026, 18:30 IST · Critical severity

    An alleged Chinese state-backed group is using a new zero-day affecting BeyondTrust IT support software to conduct espionage attacks.

35. Baltimore suburb confirms August data breach after ransomware claims

    The Record by Recorded Future · 16 Oct 2026, 18:35 IST · High severity

    Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.

36. Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments

    Infosecurity Magazine · 16 Oct 2026, 18:30 IST · High severity

    New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments

37. Hackers disguise phishing as promising business opportunities

    Help Net Security · 16 Oct 2026, 18:15 IST · Medium severity

    Attackers are breaking into business email accounts with short messages asking whether a company can quote on an upcoming project, the kind of request sales and procurement staff answer every week. Cadence Riddle, a cybersecurity...

38. CyberSec Delhi Conference 2026

    CISO Mag · 10 Sep 2026, 15:37 IST · Medium severity

    Securing India’s Power, Defence, Manufacturing & Industrial Ecosystems The CyberSec Delhi Conference 2026 will bring together policymakers, government stakeholders, industry leaders, cybersecurity experts, and technology innovators to...

39. From Awareness to Relevance: Rethinking How We Teach Cybersecurity

    CISO Mag · 16 Sep 2026, 03:52 IST · Medium severity

    Cybersecurity lessons have a better chance to endure when people first understand how the same risks affect their own lives. By Jim West, based on the “inSECURITY” session for Hacker Halted / Global CISO Forum 2026 “Security awareness...

40. Atlanta Set to Host Hacker Halted and Global CISO Forum 2026, Uniting Practitioners and C-Suite Leaders

    CISO Mag · 18 Sep 2026, 00:53 IST · Medium severity

    The Westin Peachtree Plaza will anchor a week of hands-on training, offensive security research, and closed-door executive dialogue as EC-Council’s flagship events return to Georgia this October. Atlanta will once again become a...