Critical WordPress Vulnerabilities Enable XSS, SQL Injection and Data Disclosure Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress released version 7.1.3 on October 6, 2026, addressing vulnerabilities involving cross-site scripting, SQL injection, information disclosure, and other security weaknesses. The project recommends immediate updates, with fixes also available for older affected branches. Only the latest WordPress version remains …

Multiple OpenSSH Vulnerabilities Could Enable Plaintext Recovery, File Write and Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenSSH 10.6, released on October 6, 2026, fixes security flaws that could expose secrets, write files outside intended folders, or enable shell injection under specific conditions. The update covers both client and server tools, making it relevant to administrators and …

32 Unique 0-Days Exploited in Samsung S26, Pixel 10, OpenAI Codex and Other Devices in Pwn2Own 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers reportedly exploited 32 unique zero-day vulnerabilities and earned $388,500 on the opening day of Pwn2Own Ireland 2026. Samsung Galaxy S26, OpenAI Codex, smart home devices and AI services fell to working exploits, but the Google Pixel 10 attempt …

Google Chrome Update Fixes Massive 247 Vulnerabilities, Including 4 Code Execution Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a major Chrome security update on October 6, 2026, fixing 247 vulnerabilities, including four critical memory-safety flaws, across Windows, Mac, and Linux. The patched versions are 155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 for Linux. Although the critical …

Top 10 Best IAST Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IAST’s core idea watch the running app from inside and confirm which findings are real won so thoroughly that platforms absorbed it, and the standalone market shrank. Integrating Interactive Application Security Testing (IAST) runtime monitoring has transformed how security teams …

Veeam Backup and Replication Vulnerability Allow Attackers to Execute Malicious Script

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Veeam has released Veeam Backup & Replication 12.3.2 P4, build 12.3.2.4934, to address four security vulnerabilities, including a flaw that lets attackers execute malicious scripts in an authenticated user’s browser. Released on October 6, 2026, the update also fixes a …

Top 10 Best DAST Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A scanner that can’t authenticate, crawl a SPA, or read an API schema is testing your login page and calling it coverage. We scored ten DAST options with modern-stack capability as the qualifying bar. Evaluating the market alongside the Top …

Hackers Hide Vasilek Backdoor Inside VMware Tools to Target Medical Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers concealed the Vasilek backdoor inside an existing VMware Tools installation during a prolonged intrusion at a medical organization. The attackers maintained access for approximately two years, exposing sensitive medical information while leaving systems operational rather than launching a destructive …

EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ernst & Young (EY) has warned that a cyber breach exposed personal and financial information belonging to individuals linked to Goldman Sachs and Man Group. The incident affected a platform used to support EY’s tax services, rather than the financial …

Anthropic Opens Claude Access to Red Teams and Verified Cyber Defenders With Reduced Restrictions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has expanded its Cyber Verification Program, giving verified security professionals access to advanced Claude models with fewer cybersecurity restrictions. Announced on October 6, 2026, the update introduces three access tiers covering defensive research, authorized penetration testing, and testing of …