PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept exploit has been released for CVE-2026-21589, a critical arbitrary file-read vulnerability affecting multiple self-managed Atlassian products. The flaw can expose sensitive application files and, in environments integrated with Atlassian Crowd, potentially allow attackers to obtain Jira administrator access. …

Hackers Compromise 100+ Websites With Fake Cloudflare Checks to Spread LUNEXSTEALER

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers compromised more than 100 websites and used fake Cloudflare verification pages to spread LUNEXSTEALER, a Windows malware capable of stealing information and accepting remote commands. The campaign turned visits to legitimate websites into opportunities to infect visitors’ computers. The …

FortiBleed Attack Campaign Exploiting Fortinet Firewalls and VPNs – FBI Warns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI and U.S. Secret Service have issued a joint cybersecurity advisory warning that the ongoing FortiBleed campaign is targeting internet-facing Fortinet FortiGate firewalls and SSL VPN gateways worldwide. The credential-compromise operation has reportedly affected more than 86,644 devices across …

Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Earth Sirrush is hiding espionage malware inside PNG images and malicious Notepad++ plugins to compromise Ukrainian organizations. The Russia-aligned group has targeted government agencies, defense organizations, border guards, and logistics operators since at least 2022, repeatedly changing its tools to …

Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Rockstar Games has faced separate intrusions involving proprietary source code, 78.6 million business records, and what researchers describe as a playable GTA VI development build. The incidents span several years, rather than one attack that stole everything together. The reported …

Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic’s Mythos AI has identified a critical vulnerability in Rejetto HTTP File Server that could allow remote attackers to forge administrator sessions and execute arbitrary code. The issue, tracked as CVE-2026-61500, stems from predictable session-signing keys generated through JavaScript’s non-cryptographic …

Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Progress disclosed critical command injection flaw CVE-2026-91140 in DataDirect Autonomous REST Connector AI Model Generator agents, allowing malicious OpenAPI or Swagger documents to execute arbitrary OS commands. The security bulletin, published on October 6, 2026, covers Early Access agent definitions …

OpenAI Sandbox Escape Flaw Allowed Free Access to Paid AI Models Without an API Key

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Oliver Fish says he found an OpenAI sandbox escape that let him request paid AI models without an API key or an account. A screenshot shared online shows OpenAI awarding $300 for a report titled “Unauthenticated Sandbox Escape …

Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity Awareness Month 2026 arrives as online attacks become easier to launch, harder to spot, and more focused on people. Observed every October, the campaign helps individuals and businesses build safer digital habits. This year there are two themes. The …

Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are impersonating ChatGPT, Claude and Gemini with fake advertising products that steal passwords and multifactor authentication codes. Instead of delivering a conventional malware download, the campaign uses convincing websites and live human operators to guide victims through fraudulent sign-in …