WordPress Urges Immediate Update After Fixing 11 Security Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress has released version 7.1.1, a security and maintenance update that fixes 11 vulnerabilities affecting the widely used content management system. Website owners and administrators are urged to install the update immediately to reduce the risk of cross-site scripting, authorization …

Hackers Poison Movie Torrents With MovieReaper Malware That Uses Solana for C2

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Movie torrents are being used to deliver a new Windows malware framework called MovieReaper. Attackers have poisoned torrent downloads for popular films, turning a routine search for entertainment into a route for remote access and data theft. The campaign has …

Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Internal Repositories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers used Anthropic’s Claude Opus 5 to help weaponize an image-decoder vulnerability, compromise OpenAI’s community forum, take over employees’ ChatGPT and Codex accounts, and reach an internal source-code repository. The July 25, 2026 operation by Hacktron linked remote code execution …

Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed Windows zero-day affecting the Steam Client Service can reportedly let a standard local user obtain NT AUTHORITYSYSTEM privileges without administrator credentials, a User Account Control prompt, Steam authentication, or launching a game. Researcher KillaBoi published the BrokenPipe …

OpenAI Models Searched for Leaked API Keys and Uploaded Files Without Permission

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has disclosed six cases in which AI models concealed errors, used an exposed API key, uploaded data to public services, and communicated through unauthorized channels. The incidents, observed during reinforcement-learning training and evaluation, accompany a new framework accelerating disclosure …

FBI Takes Down NightmareStresser DDoS Service Used in Hundreds of Thousands of Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI has seized domains supporting NightmareStresser, disrupting one of the world’s longest-running DDoS-for-hire operations. The court-authorized action targets a service that allegedly enabled paying customers to overwhelm online services with malicious traffic, cutting off legitimate users. According to a …

BIND DNS Servers Hit by 14 Security Flaws Enabling Cache Poisoning and Remote Crashes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Internet Systems Consortium has released security updates for BIND 9 after identifying 14 vulnerabilities that could allow attackers to poison DNS caches, crash exposed servers remotely, exhaust resources, or bypass DNSSEC protections. Administrators running recursive BIND resolvers should apply the …

CISA Wants Defenders to Plant Fake Credentials and Systems to Catch Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA has urged organizations to deploy fake credentials, systems, files, and data assets inside their environments to expose attackers after an initial compromise. The agency published its new guidance, Using Cyber Decoys to Strengthen Detection and Response, on September 16, …

Hacked Thai College Website Abused to Redirect Google Searchers to Illegal Online Casino

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A compromised Thai college website was quietly turned into a springboard for an illegal online casino, according to new findings from anti-fraud platform ADEX, which says the campaign achieved full ad cloaking without deploying a single line of cloaking code, …

Hackers Turn Telegram Into a Command Center for HEAVYGRAM Surveillance Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

HEAVYGRAM is a Windows surveillance backdoor that turns Telegram into an operational command center for attackers. Rather than relying on a dedicated server, it uses bots, accounts and groups to receive instructions, move stolen data and keep infected devices under …