G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Amsterdam, Netherlands, October 13th, 2026, CyberNewswire Antivirus and security software orders grow more than twice as fast as VPN orders, accounting for 43% of cybersecurity purchases on the marketplace  G2A.COM, a digital marketplace that serves more than 35 million users …

ICMacOS Malware Evolves to Steal Credentials and Provide Persistent Remote Mac Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ICMacOS malware has grown from a tool that steals passwords and cryptocurrency wallet data into a remote access trojan that can keep attackers connected to infected Macs. Its newer version adds a live command channel and a startup mechanism, giving …

XWorm Malware Can Spy Through Your Microphone and Hijack Logged-In Browser Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

XWorm malware is moving beyond password theft, giving attackers tools to listen through infected computers, track their location, and control browsers where users are already logged in. Its growing plugin collection turns a compromised Windows device into both a spying …

Critical Ghostscript Flaw Lets Attackers Use Malicious PDFs to Execute Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Ghostscript could allow attackers to use specially made PDF files to run code on vulnerable servers. The flaw, tracked as CVE-2026-39919, affects Ghostscript versions before 10.08.0 and has a CVSS severity score of 9.8 out of …

SAP Security Update Patches Critical Code Injection and Memory Corruption Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SAP has released its October 2026 security updates, fixing critical code injection, access control, and cloud security flaws alongside a high-severity memory corruption issue. The October 13 release includes 16 new security notes, four GitHub security advisories and two updates …

Kimsuky Hackers Use Malicious Resume Documents to Deploy Funhouse Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kimsuky hackers have used a malicious résumé document to deploy Funhouse ransomware through a chain of scripts and remote access tools. The attack begins with a Hangul Word Processor document disguised as a job application, turning a routine work file …

Fake Web3 Accelerator Uses Malicious npm Packages to Target Crypto Founders

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fake Web3 accelerator called Apex has been using malicious npm packages to target cryptocurrency start-ups and founders with what appeared to be free AI credits, coding tools, smart-contract audits, investment access, and invitations to in-person events. Behind the polished …

Anthropic Warns AI Models Could Soon Self-Replicate on Smart TVs and IoT Devices Without a Data Center

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic warns that small AI models may be months away from self-replicating across poorly secured smart TVs and other internet-connected devices. Its research suggests future AI worms could run on consumer hardware rather than depend on a datacenter, making them …

npm Trusted Publishing Flaw With 10 Million Downloads Exposes 1,500+ Packages to Malicious Takeover

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security flaw in npm’s Trusted Publishing feature exposed more than 1,500 packages to possible takeover through reclaimed GitHub repository names. The affected packages accounted for more than 10 million total downloads and over one million downloads per month, creating …

Hackers Exploit Citrix NetScaler 0-Days to Deploy Platypus Remote Access Tool

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are exploiting two critical Citrix NetScaler zero-day vulnerabilities to deploy a modified Platypus remote access tool on exposed ADC and Gateway appliances. The activity shows how quickly attackers are moving from initial access to persistent control of edge …