Cybersecurity News: Breaches, Ransomware & Zero-Days

10,148 stories · Updated every 5 minutes · Page 4 of 25

1. 'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

   darkreading · 26 Oct 2026, 23:31 IST · Critical severity

   An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.

2. Rogue AI agent engages 'Skynet mode' to search the internet for exposed LLMs to hijack and run malware attacks

   TechRadar · 26 Oct 2026, 23:35 IST · Medium severity

   Rogue AI agent engages 'Skynet mode' to search the internet for exposed LLMs to hijack and run malware attacks

3. Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

   The Hacker News · 26 Oct 2026, 21:22 IST · High severity

   Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation...

4. PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

   The Hacker News · 26 Oct 2026, 23:15 IST · Medium severity

   PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP...

5. Serbian autocrat loses election following widespread reports of digital repression

   The Record by Recorded Future · 26 Oct 2026, 23:00 IST · Medium severity

   Serbian strongman leader Aleksandar Vučić on Sunday admitted defeat in his race for prime minister, a loss that follows a series of incidents of digital repression that galvanized the opposition.

6. USN-8955-1: nginx vulnerabilities

   Ubuntu security notices · 26 Oct 2026, 21:04 IST · Medium severity

   It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or...

7. USN-8956-1: Brotli vulnerability

   Ubuntu security notices · 26 Oct 2026, 21:24 IST · Medium severity

   It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

8. This abandoned torrent app could have exposed millions of devices to cyberattack

   TechRadar · 26 Oct 2026, 22:35 IST · Medium severity

   This abandoned torrent app could have exposed millions of devices to cyberattack

9. Ukraine disputes Musk's claims of Starlink misuse as military connectivity restored

   The Record by Recorded Future · 26 Oct 2026, 22:10 IST · Medium severity

   Ukrainian Defense Minister Yevhen Khmara said Saturday that Starlink and Starshield connectivity had been restored.

10. As Anthropic goes public, it warns of AI’s catastrophic and existential risks to humanity

    Digital Trends · 26 Oct 2026, 22:01 IST · Medium severity

    Anthropic has officially filed to go public, and buried inside its S-1 is a blunt warning about the technology at the center of its business. The maker of Claude AI says advanced AI could cause everything from large-scale cyberattacks...

11. Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

    BleepingComputer · 26 Oct 2026, 21:57 IST · Medium severity

    A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.

12. AI agents tricked by a rogue downloads file into running dangerous malware

    TechRadar · 26 Oct 2026, 21:45 IST · Medium severity

    AI agents tricked by a rogue downloads file into running dangerous malware

13. 26th October – Threat Intelligence Report

    Checkpoint Research · 26 Oct 2026, 21:42 IST · Medium severity

    For the latest discoveries in cyber research for the week of 26th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Japanese cloud hosting provider Onamae Desktop Cloud has confirmed a cyberattack in...

14. PHP2Shell: No login, no app code, no warning. What next?

    The Register · 26 Oct 2026, 13:30 IST · Medium severity

    If you run PHP anywhere in your environment, patch to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. Two critical flaws disclosed last week, CVE-2026-109618 and CVE-2026-109619 (nicknamed "PHP2Shell"), let an unauthenticated attacker run...

15. Microsoft releases emergency .NET patches for critical Brotli flaw

    BleepingComputer · 26 Oct 2026, 21:08 IST · Critical severity

    Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.

16. Anthropic unveils plans for largest stock market listing in history — including investments 'that may seem irresponsibly large at first glance' despite losses of over $80 billion this year

    TechRadar · 26 Oct 2026, 20:31 IST · Medium severity

    Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...

17. Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens

    Infosecurity Magazine · 26 Oct 2026, 20:30 IST · Medium severity

    A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows

18. Former DOGE Staffers’ New Startup Claims It Hacked Anthropic

    Gizmodo · 26 Oct 2026, 20:30 IST · Medium severity

    The AI agents took less than 12 hours to hack into Anthropic, the report says.

19. ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More

    The Hacker News · 26 Oct 2026, 19:36 IST · Medium severity

    This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere.

20. Industrial Vendors Check Products for PHP2Shell Vulnerabilities

    SecurityWeek · 26 Oct 2026, 20:22 IST · Medium severity

    Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities. The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared first on SecurityWeek .

21. Podatności w produktach boneIO

    CERT Polska · 26 Oct 2026, 19:25 IST · Medium severity

    W produktach boneIO wykryto 11 podatności różnego typu (od CVE-2026-77052 do CVE-2026-77062)

22. Genesys Hack Exposes Customer Data From Internal Systems

    SecurityWeek · 26 Oct 2026, 20:10 IST · Medium severity

    The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected. The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek .

23. Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras

    The Record by Recorded Future · 26 Oct 2026, 19:51 IST · Medium severity

    CERT-UA says it has identified cases in which hackers compromised Dahua internet-connected cameras and video recorders, changed their settings and created unauthorized user accounts.

24. The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans

    Wired Security · 26 Oct 2026, 19:39 IST · Medium severity

    Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program.

25. Popcorn Time’s forgotten updater left millions of devices exposed to hijacking

    Malwarebytes Labs · 26 Oct 2026, 19:18 IST · Medium severity

    You may have forgotten about Popcorn Time. Unfortunately, its updater didn’t forget about your device. Security researchers have intervened to disable an abandoned update mechanism in Time4Popcorn, a version of the once-popular...

26. Chinese man extradited for role in $36 million cryptocurrency scam

    BleepingComputer · 26 Oct 2026, 19:26 IST · Medium severity

    A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole nearly $37 million from 174 victims in the United States.

27. China Mobile International Launches Four-Month Innovation Programme in Kenya

    TechAfrica News · 26 Oct 2026, 18:42 IST · Medium severity

    China Mobile International (CMI) has launched a four-month innovation programme in Kenya to connect university students with industry expertise, mentorship and opportunities to develop technology solutions for commercial use. The...

28. Build a Hidden Lock With a Magnetic Imager

    IEEE Spectrum · 26 Oct 2026, 18:30 IST · Medium severity

    Like many a nerd, I have a certain fascination with locks. This originates in reading the memoir Surely You’re Joking, Mr. Feynman as a teenager, in which Richard Feynman recounts picking locks and cracking combinations while at his day...

29. 953 Online Stores Infected in Long-Lasting Malware Campaign

    SecurityWeek · 26 Oct 2026, 18:16 IST · Medium severity

    Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection. The post 953 Online Stores Infected in Long-Lasting Malware Campaign appeared first on SecurityWeek .

30. The UK government wants to invest £100 million in a ‘world first’ AI Biosecurity Lab — OpenAI and Anthropic to supply £200 million in credits to help safeguard national security

    TechRadar · 26 Oct 2026, 18:00 IST · Medium severity

    Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...

31. AI will not close India’s cybersecurity skills gap on its own: Fortinet Survey

    CIO&Leader · 26 Oct 2026, 17:33 IST · Medium severity

    Cyberattacks are costing Indian enterprises more and taking longer to recover from. Fortinet’s India Cybersecurity Skills Gap survey, which polled 60 IT and security decision-makers in December 2025, links part of that damage to a...

32. Backdoor attacks on Indian SMB systems jump 52% in H1 2026: Kaspersky

    Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · 26 Oct 2026, 17:24 IST · Medium severity

    Kaspersky Security Network data showed 4.52 lakh backdoors were detected between January and June, up from 2.97 lakh in H1 2025 and 4.08 lakh in H2 2025

33. Popular AI tool LiteLLM says unrevoked key allowed hackers to target users

    The Record by Recorded Future · 26 Oct 2026, 17:30 IST · Medium severity

    LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed to have hit tens of thousands of users last week.

34. Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts

    SecurityWeek · 26 Oct 2026, 17:17 IST · Medium severity

    The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts. The post Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts appeared...

35. ChatGPT and Claude blocked by Swedish government over "problematic" security concerns

    TechRadar · 26 Oct 2026, 17:05 IST · Medium severity

    Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...

36. PHP warns of a third PHP2Shell flaw but won’t rush out a fix

    TNW · 26 Oct 2026, 16:55 IST · Medium severity

    PHP has warned of a third flaw that could let an attacker run code on a web server, two days after its emergency fixes for the PHP2Shell bugs. This time it will not rush out a fix. In a short advisory on 23 October, PHP said the new...

37. Qualys offers free services to help organisations quickly find and fix PHP2Shell vulnerabilities

    Intelligent CIO ME · 26 Oct 2026, 16:52 IST · Medium severity

    Qualys has announced it is offering its solutions for free as a service to the community to help organisations detect, validate and mitigate their exposure to PHP2Shell, two critical vulnerabilities in PHP tracked as CVE-2026-109618 and...

38. Conversion Kit Aims to Put PC Hardware Inside 2019 Mac Pro

    MacRumors · 26 Oct 2026, 16:54 IST · Medium severity

    Owners of Apple's 2019 Mac Pro could repurpose its enclosure for a custom PC using a conversion kit being crowdfunded by Practical Prototyping (via Hackster ). The project comes after Apple discontinued the Mac Pro in March, confirming...

39. StealC Malware Returns as Stadia RAT After Operation Endgame Takedown

    HackRead · 26 Oct 2026, 16:48 IST · Medium severity

    StealC’s seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using…

40. OTX Threat: deepveindrilling.com: Magento CMS block loader hits 953 stores

    AlienVault OTX · 25 Oct 2026, 11:37 IST · Medium severity

    A criminal group has compromised 953 online stores, predominantly Magento shops, since July 2025 by injecting malicious JavaScript loaders into CMS blocks. The latest domain, deepveindrilling.com, was registered in October 2026 and...