Security news

• The Hacker News1 h ago

  Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

  Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a…

• The Hacker News1 h ago

  Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America

  The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and administrative-themed phishing lures to deliver a remote access trojan (RAT) that shares its lineage…

• The Hacker News1 h ago

  Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights

  Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affecting account and billing information, alongside secrets, datasets, and incomplete…

• The Hacker News4 h ago

  Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed

  An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance warned today.…

• The Hacker News5 h ago

  Beyond the Alert: The Case for Rich Network Data

  At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place. And, it’s why once we accept that prevention has its…

• The Hacker News6 h ago

  Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities

  An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone added to a group access…

• The Hacker News7 h ago

  Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

  The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exchange servers with an aim to…

• The Hacker News7 h ago

  SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

  Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP NetWeaver application server, the…

• The Hacker News8 h ago

  France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites

  An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday. The attackers broke into…

• The Hacker News8 h ago

  Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark

  Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models (LLMs) helped its engineers "complete…

• The Hacker News10 h ago

  Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

  Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A),…

• The Hacker News10 h ago

  N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits

  N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively tracked as…

• The Hacker News10 h ago

  CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog,…

• The Hacker News23 h ago

  Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

  An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that…

• The Hacker News23 h ago

  Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

  Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. Both releases download and run code…

Headlines and summaries belong to their publishers and link to the original articles.