Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ransomware crews are now giving the hardest parts of a network break-in to AI coding tools. A group linked to Aur0ra ransomware used Cursor AI agents to go from stolen passwords to domain admin access, the highest level of control …

Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Criminals are copying the look of Polymarket, one of the biggest prediction market sites. They use the copies to take cryptocurrency from people who think they are placing real bets. Once a victim deposits money, the site decides every win …

Critical Drupal Commerce Vulnerability Could Let Hackers Buy Products for Just $0.01

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Drupal has warned that hackers are actively exploiting a highly critical security flaw in Commerce Core, putting online stores at risk of financial losses. Tracked as CVE-2026-118539, the vulnerability lets attackers bypass access checks in the module used to sell …

Hackers Exploit Passwordless Telnet to Infect Linux Devices With New Kairos DDoS Botnet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new botnet called Kairos is spreading to Linux devices through a very old mistake: a Telnet service that accepts the root user with no password. Once inside, the attackers install a small Go-based program that turns the device into …

Hackers Use Zero-Click Coruna and DarkSword Exploits to Steal Sensitive Data From iPhones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using two powerful iPhone exploit kits, Coruna and DarkSword, to break into phones and steal private data. The victim only has to open a web page. There is no app to install and no prompt to accept. The …

Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft and Remote System Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware framework called NIK C2 is turning the OpenAI API into a tool for cybercriminals. Its Windows implant can dump passwords, record every keystroke, take hidden control of a desktop, and send the stolen data to an AI …

Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security flaws in the embedded browsers of Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop could enable code execution, file theft, and address-bar spoofing on developer machines. The findings published on October 29 show how browser features built into …

Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has confirmed that attackers are actively exploiting PHP2Shell vulnerabilities against PAN-OS management interfaces exposed to the internet. In its October 29, 2026, update, Unit 42 said it independently verified attacker tools used to combine the PHP flaws …

Trezor Warns of Suspected Spy Implant in Crypto Wallet That Could Steal Recovery Phrases

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Trezor has warned that a suspected hardware implant inside a Trezor Safe 5 could steal recovery phrases and send them over a mobile network. The warning covers every Trezor model bought from CryptoBilis from March 2026 onward, although only one …

Binance Hit by Biggest Crypto Heist in History – North Korean TraderTraitor Group Reportedly Stolen $6.36 Billion

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Binance reportedly lost approximately $6.36 billion in cryptocurrency on October 29, 2026, after an attacker drained wallets across ten blockchains. TRM Labs describes the incident as the largest cryptocurrency theft ever recorded, with the majority of the stolen funds transferred …