16 Suspects Detained in Timor-Leste for Japanese Police Impersonation Scam

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Investigators in Timor-Leste have detained 16 people after raiding a building in Dili allegedly used to run telephone scams against people in Japan. The suspects are accused of posing as Japanese police, using staged surroundings and a prepared script to …

Researcher Infiltrates Lazarus Group’s Crypto Laundering Network After $1.5B Bybit Hack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Blockchain investigator ZachXBT says he infiltrated a Chinese crypto laundering network linked to North Korea’s Lazarus Group after the $1.5 billion Bybit hack. His investigation connected private chats with public blockchain records and, he says, helped freeze stolen funds while …

Zammad Zero-Day Chain Lets AI Agent Hijack Sessions, Execute Code and Escalate to Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An AI agent breached the Dutch Institute for Vulnerability Disclosure by chaining two previously unknown flaws in Zammad, an open source helpdesk platform. The September 21, 2026 attack moved from a hijacked session to root access, giving the intruder full …

ClickFix Fake CAPTCHA Attack Executes Malware Hidden Inside Browser Cache

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new ClickFix campaign is turning a web safety check into a route for malware. Visitors to compromised websites see a fake CAPTCHA or repair message and are told to open the Windows Run dialog, paste copied text, and press …

RemoveMacAI Free Up 12GB of Data by Removing Apple Intelligence Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

RemoveMacAI, an open-source tool on GitHub, lets Mac users disable Apple Intelligence, remove its downloaded models, and block future downloads. The utility can recover roughly 10GB to 12GB of storage, depending on which models are present. Its changes are reversible, …

GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GlassWorm is turning developer tools into malware delivery channels, this time through extensions advertised as attractive VS Code themes. The investigated cluster spans Visual Studio Marketplace and Open VSX, showing how appearance changes can provide cover for code that runs …

Apple Tightens macOS Full Disk Access as AI Agents Become More Powerful

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple plans to add stronger controls to Full Disk Access in macOS, warning that the powerful permission can expose a user’s most private data as AI agents become more capable. The company said the change will require users to take …

Google Pauses Open-Source Bug Bounty Program After Flood of Invalid AI-Generated Reports

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has temporarily stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program(OSS VRP) following a major increase in automated submissions that were mostly invalid. The change took effect on October 1, 2026, and Google said …

Hackers Abuse Legitimate ScreenConnect Tool to Gain Remote Access Through Phishing

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using a legitimate ScreenConnect client to turn a payment notification into a route for remote access. Instead of delivering custom malware, the phishing attempt directs recipients to software already designed to let someone else connect to their computer. …

Windows 11 KB5124010 Update Crashes Productivity Apps, Games and Media Players

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed a Windows 11 audio decoding bug that can cause some productivity apps, games, and media players to close without warning. The issue follows installation of KB5124010, released on September 22, 2026, or later Windows updates, and affects …