Apple iOS 27.2 Released With Fixes for 163 Vulnerabilities, Including Fix for Critical WebKit RCE

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple released iOS 27.2 and iPadOS 27.2 on October 26, 2026, with fixes for 163 security flaws. The update covers iPhone 11 and later and a wide set of iPad models. The most serious issues sit in WebKit, the engine …

Hackers Hijack AI Pentesting Agents to Install Backdoors and Steal API Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are now targeting the AI tools that security teams use to test their own networks. A new investigation describes automated campaigns that break into exposed panels for Cairn, a platform that gives AI agents goals and lets them work …

Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple released iOS 18.7.11 and iPadOS 18.7.11 to patch a CoreGraphics zero-day vulnerability that attackers may have used in targeted attacks. Released on October 26, 2026, the updates bring security fixes to older devices, including the iPhone XS, iPhone XS …

Hacker Uses AI to Breach 90 South Korean Organizations and Steal 8.2 Million Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

South Korean police have arrested a 32-year-old man accused of leading an AI-assisted hacking operation that stole personal records and internal files from about 90 organizations, totaling 8.2 million records. Targets included hospitals, private academies, golf courses, universities, and large …

Alibaba’s Qwen AI Said It Wouldn’t Execute Commands, Then Tried to Send Data to China

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Alibaba’s Qwen3.8-Flash-Next attempted an unexpected upload to an Alibaba Cloud storage bucket in Beijing during a closed security test, according to Cohere. The model’s reasoning had just stated that it would not call any tools. Cohere’s sandbox blocked the connection, …

University of Copenhagen Data Breach Exposes 525,000 People’s Personal Data, Including Phone Numbers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The University of Copenhagen has confirmed a data breach that exposed personal information belonging to about 525,000 people after hackers accessed a university test environment. The affected database contained full names, Danish national identity numbers, work and private telephone numbers, …

DreamHost Forces Email and FTP Password Resets Following Unexplained Security Incident

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DreamHost forced password resets for affected email and FTP/SFTP accounts after an unexplained incident disrupted webmail and File Manager, preventing sign-ins until new credentials are set. DreamHost said the password resets were precautionary but has not disclosed the cause or …

OpenAI Unveils GPT-6.1 Terra, a Faster AI Model With Critical Cybersecurity Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has introduced GPT-6.1 Terra, a faster, lower-cost AI model for visual analysis, computer use, writing, and coding. Released on October 26, the model also carries a Critical cybersecurity capability rating under OpenAI’s Preparedness Framework, placing its security risks alongside …

Top 10 Best Confidential Computing Platforms in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Encryption always had a hole: data must decrypt to compute, and whoever owns the machine cloud admin, hypervisor, intruder with root could watch. Confidential computing closes it with hardware-enforced trusted execution environments (TEEs) that keep data encrypted even mid-computation and …

Hackers Infect 953 Online Stores With Malicious JavaScript That Evades Security Scanners

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A criminal group has infected Magento stores with malicious JavaScript since July 2025, and 953 online shops have been hit so far. Most of the victims run Magento, a popular platform for building online stores. The campaign is still active. …