Anthropic Cyber Mission to Support Defenders with Tools, Research, and Resources

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic launched its Anthropic Cyber Mission on October 8, 2026, to help security teams protect critical infrastructure and open-source software. The effort combines advanced Claude models, engineers, threat research, and funding, with an emphasis on fixing weaknesses rather than simply …

FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI and U.S. Justice Department have seized seven domains tied to Microscan and FishHub, two hacking tools allegedly operated by China-based Integrity Technology Group. Announced on October 8, 2026, the court-authorized action aims to cut access to systems used …

Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix has urged customers to patch a critical security flaw in NetScaler ADC and NetScaler Gateway that could allow remote code execution or cause a denial of service. Tracked as CVE-2026-107406, the memory overflow vulnerability carries a CVSS v4.0 score …

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious release of the Tensorlake npm package has been published with a Shai-Hulud worm variant that can steal developer secrets and attempt to spread through connected software supply chains. The affected version, [email protected], was released on October 8, 2026. …

Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Scanning and remote code execution attempts targeting video surveillance devices in Ukraine rose between September 21 and October 1, 2026. Most activity focused on CVE-2021-36260, a critical command injection flaw in unpatched Hikvision products. The surge occurred alongside Russian missile …

Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have used 16 malicious Firefox extensions to target cryptocurrency users with fake wallet screens that capture recovery phrases and private keys. The add-ons posed as wallet portals, desktop tools, and browser utilities, while hidden code attempted to send the …

Microsoft Teams Adds Synthetic Audio and Video Detection to Fight Deepfake Meeting Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Teams is preparing to support synthetic audio and video detection to help organizations spot deepfake attacks. The feature will connect Teams with certified third-party providers that check meeting media for signs of manipulation. Microsoft lists the update as in …

DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DarkSword operators are using Coruna malware to steal cryptocurrency wallet recovery phrases from iPhones, turning browser exploits into a ready-to-use theft service. Exposed server directories revealed wallet modules, command systems, and records of stolen data, giving researchers a closer look …

Critical Sungrow Inverter Vulnerability Lets Attackers Access Solar Plants Without Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical Sungrow inverter vulnerability could have allowed attackers to log in to the company’s iSolarCloud management platform without a valid password. The flaw affected the cloud service used to manage solar plants, inverters, and battery storage systems, creating a …

Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Toronto, Canada, October 8th, 2026, CyberNewswire Insignary Launches Clarity AIR: Closing the Blind Spot Between What Your Developers Declare and What’s Actually in Your Code New snippet-level scanning shows security and compliance leaders which open-source code and which AI-written code …