South Korean President Orders Full Security Checks After Financial Sector Hacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

South Korean President Lee Jae Myung ordered a thorough investigation on October 4, 2026, after a series of financial sector data breaches exposed customer and worker information. The order comes as investigators examine whether AI tools helped attackers break into …

Vercel Confirms KVM Zero-Day VM Escape, Awards Researcher $50,000

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Vercel has confirmed a KVM zero-day vulnerability after security researcher Paulos Yibelo reported a full virtual machine escape that, he says, allows code inside a guest to gain root access on the host. Full VM escape zeroday (guest>host root in …

ShinyHunters Member Detained in Jordan, Reportedly Helping FBI Identify Fellow Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A suspected ShinyHunters member has been detained in Jordan and is reportedly helping the FBI identify other hackers linked to the group. Reuters reported on October 3 that three people familiar with the matter confirmed the detention of Saif al-Din …

Microsoft Pushes New Exchange V2 Update After Discovering New Security Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has released September 2026 V2 security updates to fix an Exchange Server flaw that lets authenticated attackers access other users’ mailboxes within the same organization. Tracked as CVE-2026–96940, the vulnerability could expose email messages and attachments, making it a …

Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab has released urgent security updates for a critical AI Gateway vulnerability that could allow authenticated attackers to execute commands remotely. Tracked as CVE-2026-90970, the flaw carries a CVSS score of 9.9 and affects self-hosted deployments used to support GitLab …

Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Dell has released security update DSA-2026-448 to address multiple critical vulnerabilities in its Container Storage Modules, including flaws that could allow unauthenticated remote attackers to take full administrative control of affected storage environments. Organizations using vulnerable Dell CSM deployments should …

Citrix NetScaler Keeps Rebooting Following the 0-Day Patch

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix NetScaler customers are reporting repeated appliance reboots after installing build 14.1-73.37, the emergency update released for two zero-day flaws under active attack. The failures appear linked to crafted SAML authentication traffic that crashes the nsaaad service. Citrix says its …

Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Debian has released a major Linux kernel security update covering 1,313 CVE entries, addressing flaws that could allow privilege escalation, denial of service, and information leaks. The fixes are available for Debian’s stable release, Trixie, in Linux source package version …

Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers turned a Microsoft SQL Server into a channel for running commands and moving collected files in an intrusion linked to a Viva Aerobus environment. Their own publicly accessible server then exposed attack tools and stolen material to unrelated internet …

Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are turning trusted software updates into a route for stealing developer and cloud credentials. Recent supply chain incidents show how a single altered package, build action, or publishing token can place malware inside routine development workflows. The risk is …