OnePlus 15 Flaws Let Zero-Permission Apps Gain Root Access Through OxygenOS Services

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two flaws in the latest OxygenOS build could let malicious Android apps run code with root privileges on OnePlus devices, including the OnePlus 15, by exploiting accessible privileged services. The vulnerabilities are significant because Android permission prompts normally act as …

14-Year-Old Linux Kernel Flaw Lets Local Users Gain Root Access and Escape Containers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A 14-year-old Linux kernel vulnerability can let a local attacker escalate to root privileges and, in a proof-of-concept environment, escape a Docker container to compromise the underlying host. The flaw in Linux’s AF_ALG userspace cryptographic interface stems from unsafe concurrent …

Hackers Used a Samsung Flaw to Build a Cryptominer Inside Victim Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers broke into a Windows system through a known flaw in Samsung’s MagicINFO software, then built a cryptocurrency miner on the compromised machine. Rather than arriving as a finished program, the miner was assembled there, leaving an unusual activity trail. …

Researchers Found a Botnet That Uses an AI Agent to Operate Inside Compromised Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CARBONATO is a botnet that turns Docker servers into footholds for attackers. It places an AI agent inside compromised systems, letting operators send tasks through Telegram and receive results. The campaign begins with Docker services carelessly exposed to the internet …

Sauron Loader Malware Uses DLL Side-Loading and In-Memory Decryption to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Sauron Loader has surfaced in attacks on German organizations, giving intruders a way to deliver more malware. The new tool need not be the first thing a victim encounters. In the cases examined, it arrived at the end of attack …

Salmon Introduces Execution Verification Infrastructure (EVI) for Securing AI Agents and Autonomous Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

San Francisco, USA, September 25th, 2026, CyberNewswire Archipelo today announced Salmon, Execution Verification Infrastructure (EVI) for AI agents and autonomous systems, powered by a cryptographic protocol designed to make execution history verifiable. Salmon establishes verifiable execution history and state lineage …

TWEAKOS Malware Turns Telegram Into a Stealer, C2 Platform and Stolen Account Marketplace

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TWEAKOS steals messaging accounts and turns them into items for sale. The operation pairs a Windows stealer with a Telegram bot for managing victims and selling stolen access. The threat surfaced after its source code appeared on Pastebin. Researchers recovered …

Critical ServiceNow Vulnerabilities Let Attackers Bypass Authorization – Update Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ServiceNow released security updates for five AI Platform flaws, including two critical vulnerabilities that could let unauthenticated attackers access, modify, or extract sensitive instance data, urging self-hosted users to verify versions and patch promptly. ServiceNow advisory covers CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, …

WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress administrators are being urged to patch a high-severity core vulnerability that can turn an anonymous comment into server-side command execution. Tracked as CVE-2026-93485 and demonstrated by the Comment2Shell proof-of-concept, the flaw is an unauthenticated stored cross-site scripting issue in …

Attackers Are Turning Everyday Business Emails Into Malware Delivery Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers are turning routine business complaints into malware traps. A message about a damaged delivery or refund request can look ordinary, yet one click leads employees to a fake download page and a harmful ZIP archive. The campaign targeted organizations …