U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Department of State is offering up to $10 million for information on Zhang Yu, a Chinese national accused of helping hackers target American COVID-19 research. The Rewards for Justice notice seeks details about Zhang, his associates, and their …

Discord Users’ Data Exposed in Security Bot Double Counter Security Breach

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Double Counter, a Discord security bot, has disclosed a breach that exposed user data after an attacker broke into its cloud systems on October 4, 2026. Attackers copied about 12 GB of database records, and the stolen bot token was …

Alert Overload, Tool Sprawl and Evasive Phishing: The 5 Bottlenecks Slowing Down US SOCs 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

US security operations centers are not short on security products. They are short on time, people and context. Current industry research suggests the biggest obstacles to fast detection and containment are operational: too many alerts, too much manual triage, investigations …

Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers compromised the .gh, .sl and .as country-code domain registries and used their access to obtain unauthorized HTTPS certificates for Google and other organizations. Chrome blocked the identified certificates automatically, while Google worked with certificate authorities to revoke those covering …

CrowdStrike, AWS, and NVIDIA Expand Global Cybersecurity Startup Accelerator

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CrowdStrike announced its fourth annual Cybersecurity Startup Accelerator on October 6, 2026, expanding its collaboration with Amazon Web Services and NVIDIA. The global initiative will help early-stage companies develop agentic cybersecurity products through technical mentorship, business development, and broader access …

CyberXero Combines Claude Code, PentAGI and Cobalt Strike in AI-Augmented Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CyberXero has emerged as an initial access broker that combines familiar hacking tools with artificial intelligence to run large-scale intrusions. The Russian-speaking operator targeted WordPress and e-commerce sites worldwide while separately probing Ukrainian energy and utility organizations. The campaign came …

SonicWall Patches 4 SMA1000 Flaws, Including Critical Pre-Auth SSRF Rated CVSS 10

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SonicWall has patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 Series appliances, including a critical server-side request forgery (SSRF) flaw with a maximum CVSS score of 10.0. The bug could let a remote attacker without valid credentials make …

Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers breached two major South Korean churches, exposing more than one million congregant records and extensive financial and administrative data. The investigation reveals how web shells, leaked credentials, and weak access controls opened routes into connected systems. In one case, …

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, …

PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept exploit has been released for CVE-2026-21589, a critical arbitrary file-read vulnerability affecting multiple self-managed Atlassian products. The flaw can expose sensitive application files and, in environments integrated with Atlassian Crowd, potentially allow attackers to obtain Jira administrator access. …