Microsoft Teams Adds Synthetic Audio and Video Detection to Fight Deepfake Meeting Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Teams is preparing to support synthetic audio and video detection to help organizations spot deepfake attacks. The feature will connect Teams with certified third-party providers that check meeting media for signs of manipulation. Microsoft lists the update as in …

DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DarkSword operators are using Coruna malware to steal cryptocurrency wallet recovery phrases from iPhones, turning browser exploits into a ready-to-use theft service. Exposed server directories revealed wallet modules, command systems, and records of stolen data, giving researchers a closer look …

Critical Sungrow Inverter Vulnerability Lets Attackers Access Solar Plants Without Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical Sungrow inverter vulnerability could have allowed attackers to log in to the company’s iSolarCloud management platform without a valid password. The flaw affected the cloud service used to manage solar plants, inverters, and battery storage systems, creating a …

Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Toronto, Canada, October 8th, 2026, CyberNewswire Insignary Launches Clarity AIR: Closing the Blind Spot Between What Your Developers Declare and What’s Actually in Your Code New snippet-level scanning shows security and compliance leaders which open-source code and which AI-written code …

Hackers Use Negative Hotel Reviews to Spread Malware That Hides C2 on Blockchain

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are targeting hotels with fake guest complaints and negative reviews that lead staff to malware disguised as photographic evidence. The campaign delivers EtherRAT or TONResolver, two malware families that use public blockchains to find their command and control servers …

PoC Released for Critical LMCache Flaw Enabling Unauthenticated Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in LMCache that can allow unauthenticated remote code execution on exposed distributed deployments. Tracked as CVE-2026-105192, the flaw has a CVSS score of 9.8 and affects LMCache versions beginning …

PoC Released for Zammad Session Leak Flaw Enabling Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A public PoC targets a critical Zammad flaw, CVE-2026-102489, allowing unauthenticated remote users to steal active session cookies and potentially execute code on vulnerable servers. The issue was associated with a breach reported in September at the Dutch Institute for Vulnerability …

Hackers Allegedly Selling VirusTotal API Keys on the Dark Web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A seller allegedly offered a VirusTotal Enterprise API key for $350 in an October 7 Dark Web Informer post, but the claim remains unverified, with no evidence confirming whether the key is genuine, stolen, or active. According to the post, …

Hackers Use Web3 and Blockchain C2 to Hide Supply Chain Attacks Targeting Cloud Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are increasingly turning public blockchain networks into a command-and-control (C2) layer for software supply chain malware, helping them rotate infrastructure without changing the malicious code already running on developer systems. The method gives criminals a resilient way to …

FBI Dismantles Scam Center in Ghana and Seizes 300+ Devices in Operation Blackout

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Authorities have dismantled a scam center in Ghana as part of the FBI’s Operation Blackout, identifying 89 victims and seizing more than 300 devices. FBI Director Kash Patel said the action uncovered nearly $10 million in losses and that authorities …