Hackers Hide Vasilek Backdoor Inside VMware Tools to Target Medical Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers concealed the Vasilek backdoor inside an existing VMware Tools installation during a prolonged intrusion at a medical organization. The attackers maintained access for approximately two years, exposing sensitive medical information while leaving systems operational rather than launching a destructive …

EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ernst & Young (EY) has warned that a cyber breach exposed personal and financial information belonging to individuals linked to Goldman Sachs and Man Group. The incident affected a platform used to support EY’s tax services, rather than the financial …

Anthropic Opens Claude Access to Red Teams and Verified Cyber Defenders With Reduced Restrictions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has expanded its Cyber Verification Program, giving verified security professionals access to advanced Claude models with fewer cybersecurity restrictions. Announced on October 6, 2026, the update introduces three access tiers covering defensive research, authorized penetration testing, and testing of …

Critical Apache Struts Vulnerabilities Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Four security flaws described in the supplied Apache Struts advisories could expose affected applications to remote code execution, denial-of- service, and unintended data disclosure. Recommended fixes include Struts 7.4.0 or later, or Struts 6.12.0 or later for organizations using the …

Former Infrastructure Engineer Sentenced for Sabotaging Employer’s Windows Network

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A former infrastructure engineer has been sentenced to 32 months in federal prison for sabotaging his employer’s Windows network and demanding a cryptocurrency ransom. Daniel Rhyne, 59, of Kansas City, Missouri, received the sentence on September 28, 2026, in federal …

GitHub Copilot CLI Vulnerability Lets Attackers Steal Developer Secrets Using Encrypted Prompt Injection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new GitHub Copilot CLI finding that could allow an attacker-controlled web page to guide the coding agent into reading local developer files and sending their contents to a remote server. The technique, called Cryptographic Context Injection (CCI), hides malicious …

From Telemetry to Defense: How SOC and MSSP Leaders Can Build Intelligence-Led Threat Monitoring 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Every function in a security operations center, from alert triage to incident response, depends on how well threats are monitored. Yet many SOCs and managed security providers still treat monitoring as log collection: ingest everything, match against static indicator lists, …

ASOS Hacked – App Users Receive Notifications Sent by Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ASOS is investigating a cyber incident after customers received an unauthorized app notification claiming hackers had accessed its Snowflake data environment. The retailer confirmed suspicious activity involving third-party communication platforms, but the claim that its Snowflake instance was compromised remains …

Aembit Extends Access Controls to Personal AI Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Silver Springs, United States / Maryland, October 6th, 2026, CyberNewswire Aembit, the identity control plane for AI agents, today announced support for securing personal agents’ access to enterprise environments, available immediately to existing customers at no additional cost.  As personal …

Iranian Hackers Use Fake Dubai Airports Coding Test to Target Iraqi Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Iranian state-aligned hackers have used a fake Dubai Airports recruitment process to target Iraqi critical infrastructure with a booby-trapped coding test. The campaign, called Blinder Tunnel, turned a routine developer task into a quiet, potentially long-term route for remote access, …