Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Docker has disclosed a critical Docker Hub vulnerability that could let attackers impersonate other users and publish container images under trusted names. Tracked as CVE-2026-105445, the flaw affected personal access tokens transferred during account conversions. Docker resolved the issue on …

CrowdStrike Joins Anthropic Defense Program to Advance AI-powered Defense for Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CrowdStrike has joined Anthropic’s Critical Infrastructure Defense Program to help strengthen AI-powered cybersecurity across energy, water, manufacturing, and transportation systems. Announced on October 8, 2026, the partnership combines CrowdStrike’s experience protecting business and industrial networks with Anthropic’s advanced Claude models, …

Zoom Clients for Certificate Validation Flaw Exposes Sensitive Information via Network Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two high-severity certificate validation flaws in Zoom clients could allow attackers without login credentials to access sensitive information over a network, according to advisory text dated October 13, 2026. The issues affect Windows clients and the My Notes feature across …

Ivanti Connect Secure 0-Day Flaw Actively Exploited in the Wild to Execute Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ivanti has disclosed an actively exploited zero-day vulnerability in Ivanti Connect Secure (ICS) that allows remote attackers to execute arbitrary commands without logging in. Tracked as CVE-2026-104935, the flaw carries a high-severity CVSS score of 8.6. Ivanti confirmed that exploitation …

Danfoss Refrigeration Hack Update – 4,980 Hosts Found Exposed to Internet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

France accounts for more than half of the internet-facing hosts found in a Shodan search for Danfoss web pages, following a cyberattack that disrupted supermarket refrigeration systems. An update from International Cyber Digest on October 13 reports a total of …

CISA Warns of Hackers Exploiting Two Citrix NetScaler 0-Days to Execute Code Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are actively exploiting two critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances, allowing them to execute code remotely on exposed systems. The flaws, tracked as CVE-2026-88771 and CVE-2026-88772, received a CVSS v4 severity score of …

Threat Intelligence Guide for US SOC Teams and CISOs: How to Choose the Right Solution 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Choosing an enterprise threat intelligence solution is about more than just data volume or integrations. The right provider should deliver relevant intelligence, fit existing workflows, and help security teams investigate threats faster.  While SOCs may prioritize rapid investigation and enrichment …

Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Torrance, California, October 13th, 2026, CyberNewswire Criminal IP, developed by AI SPERA, will participate in Security Days Fall 2026 Tokyo, taking place October 21–23, 2026, at the TAKANAWA GATEWAY Convention Center. At booth B20, Criminal IP will showcase Criminal IP …

G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Amsterdam, Netherlands, October 13th, 2026, CyberNewswire Antivirus and security software orders grow more than twice as fast as VPN orders, accounting for 43% of cybersecurity purchases on the marketplace  G2A.COM, a digital marketplace that serves more than 35 million users …

ICMacOS Malware Evolves to Steal Credentials and Provide Persistent Remote Mac Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ICMacOS malware has grown from a tool that steals passwords and cryptocurrency wallet data into a remote access trojan that can keep attackers connected to infected Macs. Its newer version adds a live command channel and a startup mechanism, giving …