Hackers Built an AI-Powered Attack Machine and Accidentally Left the Control Panel Open

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A criminal crew linked to Blackhatsect0r and DXQRTXX built an automated system designed to find weaknesses across the internet. Its exposed server revealed a credential vault, source code, chat logs, fraud notes, and a target list, offering a rare look …

OpenCode AI Coding Agent Flaw Lets Malicious Websites Execute Code on Developer Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical attack path in OpenCode, an open-source AI coding agent, could let a malicious website execute commands on a developer’s computer. Tracked as GHSA-632h-h47v-g4x4, the remote code execution vulnerability combines content-type confusion in OpenCode’s /global/upgrade API with unsafe handling of an …

Bitget Backend Breach Drains $387.5 Million as DPRK-Linked Launderers Expose Themselves

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cryptocurrency exchange Bitget has begun restoring withdrawals after attackers exploited its backend wallet infrastructure on September 24, stealing approximately $387.5 million from hot and warm wallets. The incident did not involve stolen private keys, and Bitget said its offline cold …

ShinyHunters Bypasses WAF Protections to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ShinyHunters has renewed attacks against Oracle PeopleSoft systems by slipping past web application firewall protections and planting web shells. The campaign shows how a small change in an attack request can reopen exposure that administrators believed had been contained. The …

CISA Warns of Microsoft SharePoint Code Injection Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft SharePoint code injection vulnerability, tracked as CVE-2026-65660, to its KEV Catalog after evidence showed the flaw was being exploited in attacks. The vulnerability affects Microsoft SharePoint and could …

Attackers Create Fake Jev AI Stores to Intercept Prompts Through Third-Party Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fake storefronts appeared days after the launch of Jev, an artificial intelligence model that returns decisions rather than written answers. The sites offer access to the service, but they put an unrelated operator between users and the official API. That …

NVIDIA Launches Open Agent Safety Platform With 100 Industry Partners to Secure Autonomous AI Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

NVIDIA has launched the Open Agent Safety Platform, an open framework designed to secure autonomous AI agents as they gain access to models, tools, code execution environments, data, networks, and enterprise systems. More than 100 organizations across the AI ecosystem …

TrustSink Attack Uses Rogue MFA Provider to Steal Microsoft Entra Passwords During Legitimate Logins

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TrustSink is a newly disclosed identity attack that turns a trusted MFA step into a password-stealing trap. Rather than sending victims to a clearly fake website, it places a convincing password prompt inside a normal Microsoft Entra sign-in. In the …

OpenAI Agent Swarm Bypassed Sandbox Limits and Left 80,000 Attack Payloads Behind

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

About 700 OpenAI agents allegedly escaped evaluation sandboxes, compromised parts of Hugging Face infrastructure, and generated over 80,000 attack payloads via public URL chains. The report says the agents initially had limited internet access and could only make GET requests, …

PHP Fixed a Bug That Could Send Your Login Credentials to the Wrong Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

PHP has fixed a security flaw that could expose login credentials, cookies, and proxy authentication data to an unintended server during HTTP redirects. The vulnerability, tracked as CVE-2026-91766 and GHSA-fpwc-w8rq-cr92, affects PHP’s HTTP stream wrapper and has been rated as …