News

World Cybersecurity News

The Hacker News

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories October 9, 2026
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 13:20 UTC," StepSecurity
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack October 9, 2026
The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI's jobs portal and stolen sensitive data on almost all FBI agents and job applicants. The FBI has not named the suspect, and […]
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands October 9, 2026
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker's infrastructure," iVerify said in a new report published Thursday. […]
TP-Link Sued by Four More U.S. States Over Router Security and China Ties October 9, 2026
Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers are and how separate it is from China. TP-Link denies the claims and says it will fight […]
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access October 9, 2026
Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described the fix only as "fixed a bug that could lead to a crash," with no CVE assigned and […]
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects October 9, 2026
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing," Anthropic said. "Projects that join will receive thorough, periodic security scans by our strongest models at no cost."
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge October 9, 2026
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4 score: 5.5) - An improper authentication vulnerability in the checkSysPwd() function in the "com/ahsay/obs/api/ApiStructsAction.java"
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies October 9, 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 (CVSS score: 10.0) - An improper access control vulnerability in ProFTPD that could […]
The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition October 9, 2026
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls, […]
GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys October 9, 2026
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the […]

Cybercrime Magazine

Advantage 26: The Trusted Mission Data Summit. Oct. 21, 2026. Reston, Virginia October 9, 2026
Sausalito, Calif. – Oct. 9, 2026 – Hosted by Everfox. REGISTER NOW Join senior government, defense, and industry leaders for a day exploring how trusted mission data and operational AI are transforming national security. REGISTER NOW for Advantage 26 on Oct. 21 in Reston, Virginia. Through The post Advantage 26: The Trusted Mission Data Summit. Oct. […]
Taylor Fox
Sophos Launches CISO Advantage Across North America and Europe October 8, 2026
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 8, 2026 – Read the Full Story in GlobalNewswire According to the 2026 CISO Report from Cybercrime Magazine in partnership with Sophos, an estimated 35,000 chief information security officers (CISOs) serve 359 The post Sophos Launches CISO Advantage Across North America and […]
Taylor Fox
Cybersecurity Awareness Month 2026: Cybercrime Costs The World $20M Per Minute October 7, 2026
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 7, 2026 October is Cybersecurity Awareness Month. CAM was established in 2004 by the U.S. Department of Homeland Security and the National Cybersecurity Alliance. There are many reasons to raise awareness The post Cybersecurity Awareness Month 2026: Cybercrime Costs The World […]
Taylor Fox
Cyber Incidents Put U.S. Water Infrastructure And Public Safety At Risk October 6, 2026
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 6, 2026 – Listen to the Podcast Episode A new study shows that malware stealing employee passwords has put more than a thousand U.S. water and wastewater providers at risk of cyberattacks. The post Cyber Incidents Put U.S. Water Infrastructure And Public […]
Taylor Fox
Bank CISO On Social Engineering Defense October 5, 2026
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 5, 2026 – Listen to the Podcast Episode Kevin Novak is the CISO at Evansville, Ind.-based Old National, the sixth largest commercial bank headquartered in the Midwest and a top 25 U.S. The post Bank CISO On Social Engineering Defense appeared first […]
Taylor Fox
Black Hat Europe 2026 Discount Code: CYBERCRIME. Register Now. Dec. 7-10, London October 2, 2026
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 2, 2026 Black Hat Europe 2026 returns to the Excel in London with a four-day program, Dec. 7-10. The event will open with two-and four-day options of specialized cybersecurity Trainings, with The post Black Hat Europe 2026 Discount Code: CYBERCRIME. Register […]
Taylor Fox
Cybersecurity Brands Use YouTube Videos To Show Up In Google AI Overviews October 1, 2026
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 1, 2026 – Read the Full Report Cybercrime Magazine’s 2026 Cybersecurity CMO Report sheds light on a powerful Generative Engine Optimization (GEO) strategy to help cybersecurity companies show up in Google The post Cybersecurity Brands Use YouTube Videos To Show Up […]
Taylor Fox
BreachLock 2026 Penetration Testing Intelligence Report September 30, 2026
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Sep. 30, 2026 – Watch the YouTube Video The fifth annual BreachLock Penetration Testing Intelligence Report analyzes 531,770 security findings from 4,970 penetration tests across more than 60 industries, revealing the vulnerabilities, The post BreachLock 2026 Penetration Testing Intelligence Report appeared first […]
Taylor Fox
From Influence to Evidence: Teaching the SOC Not to Make the Same Mistake Twice September 29, 2026
AI-driven security, Artificial Intelligence, Machine Learning, Security Operations Center (SOC), SOC, SOCless – Christophe Briguet, Sr. Director of Product Management – AI & Security Analytics, Stellar Cyber San Jose, Calif. – Sep. 29, 2026 A year ago I made an argument. This year, we measured The post From Influence to Evidence: Teaching the SOC Not […]
Taylor Fox
Gambling Philanthropist Scammed Out Of $1.25M: How It Happened September 29, 2026
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Sep. 29, 2026 – Listen to the Podcast episode The scam happened in a chat group with Youtube superstars MrBeast and Mark Rober, streamer giant Adin Ross, and billionaires Tobi Lütke and The post Gambling Philanthropist Scammed Out Of $1.25M: How It […]
Taylor Fox

Cyberthreat Real Time Map

For more detailed map and information click here