Autonomous AI Agents Hack Retailers for $25 and Steal 600,000 Credit Cards

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A financially motivated operator has been running three open-source AI tools against many online retailers, mostly without supervision. The results are shocking: over 600,000 credit card records have been stolen, scripts to gather card information have been placed on dozens …

A New Tool for Tracking AI Malware Uncovers Malware That Operates Without Human Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco Talos has released CAIRN, an open-source toolkit designed to hunt, classify, and track AI-integrated malware by examining the digital markers developers leave behind. The Cognitive Artifact Intelligence Research Network searches for prompt templates, provider endpoints, API-key prefixes, jailbreak terms, …

Microsoft SharePoint Flaw Lets Attackers Execute Code Remotely With Low Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed a high-severity remote code execution vulnerability in on-premises SharePoint Server that lets an authenticated, low-privileged attacker run arbitrary code over a network without user interaction. Tracked as CVE-2026-65660, the code-injection flaw carries a CVSS score of 8.8 …

New TASK#STOMP Backdoor Uses PowerShell to Steal Documents and Wi-Fi Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TASK#STOMP is a newly analyzed Windows backdoor that turns ordinary built-in tools into a durable spying operation. It uses a Visual Basic Script installer, hidden PowerShell, scheduled tasks, and runtime code compilation to collect business documents, saved Wi-Fi passwords, clipboard …

Linux KVM/arm64 Vulnerability Lets Attackers Escape Virtual Machines and Gain Host Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-89775, could let attackers escape an ARM64 virtual machine and access the underlying host system. The issue affects KVM/arm64 environments where nested virtualization is enabled, creating a serious risk for multi-tenant cloud …

Veeam Agent Flaw Actively Exploited to Gain SYSTEM Privileges on Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical local privilege escalation flaw in Veeam Agent for Microsoft Windows is drawing attention after public proof-of-concept exploit code became available. The vulnerability, tracked as CVE-2026-32996, could let a low-privileged local user run commands with NT AUTHORITYSYSTEM permissions on …

Red Hat OpenShift Flaw Lets Attackers Bypass PGP Checks and Push Malicious Releases

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Red Hat has disclosed an Important security vulnerability in the OpenShift oc-mirror tool that could allow attackers to bypass PGP signature verification and introduce malicious release images into disconnected OpenShift environments. Tracked as CVE-2026-75939, the issue carries a CVSS v3.1 …

BambooToken Linux Backdoor Uses MQTT C2 to Execute Shell Commands and Exfiltrate Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

BambooToken is a Linux backdoor that turns a lightweight messaging protocol into a remote control channel. The newly analysed sample can collect information about a host, run shell commands, and move files between a compromised machine and its operator. Its …

Hackers Clone Legitimate Websites to Silently Trigger Chrome and Windows Zero-Day Exploits

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using convincing copies of trusted websites to turn an ordinary browser visit into a full Windows compromise. The campaign pairs targeted phishing emails with a chained set of previously unknown flaws in Google Chrome and Microsoft Windows, giving …

Aikido Security Unveils Altar-1 Open-Weight AI for Cybersecurity Defense

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Aikido Security has unveiled Altar-1, an open-weight artificial intelligence model designed to run defensive cybersecurity workloads entirely inside an organization’s own infrastructure. The model aims to help security teams use advanced AI for vulnerability discovery and penetration testing without sending …