Chinese Hackers Use Secret Silent Train Network to Exploit Zero-Days Against U.S. Government and Defense

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

China-linked Volt Typhoon hackers have used a covert network called Silent Train to hide zero-day attacks against U.S. government agencies, defense contractors and critical infrastructure. The network chains together compromised routers, connected devices and enterprise servers, helping operators reach sensitive …

Hackers Claim Wagyu Crypto Platform Breach as Researchers Find Thousands of Monero Transaction Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have claimed a breach of cryptocurrency swap platform Wagyu.xyz, while researchers reviewing the purported leak found thousands of records connecting Monero transactions with public blockchain payments and IP addresses. The dataset contains 38,628 order records and 10,139 distinct IP …

Hackers Attack FreePBX Servers With Malware to Steal SIP Credentials for Phone Fraud

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers targeting FreePBX phone servers have upgraded their malware to steal credentials that can keep phone fraud running even after an infected system is rebuilt. The INJ3CTOR3 operation now collects configuration files containing SIP trunk passwords, database credentials, management secrets, …

GitHub Launches Copilot Fusion for Smarter and Cheaper AI Coding

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitHub has launched Copilot Fusion, a system that automatically selects AI models for coding tasks, helping developers balance code quality, speed, and cost. Instead of choosing a model for every request, users select Fusion and let it decide how to …

Microsoft Urges Entra ID Admins to Migrate from SMS and Voice Authentication to Passkeys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft urged Entra ID administrators to migrate from SMS and voice authentication in Entra ID to passkeys before retirement begins on February 1, 2027, to reduce phishing risks and prevent sign-in disruptions. The reminder, published on October 27 under Message …

319 Chrome Extensions Found Hijacking Searches, Affecting 13.4 Million Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A network of 319 browser extensions has been linked to search hijacking affecting roughly 13.4 million users over a decade. Marketed as PDF converters, manual finders, safe search tools, and AI search helpers, these extensions redirect queries through operator-controlled servers …

Microsoft Edge Zero-Click Exploit Chains Five Flaws to Execute Code and Escape Sandbox

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Orange Tsai has revealed an exploit chain for Microsoft Edge that combines five bugs and two Windows features to run code outside the browser sandbox. Published on October 28, 2026, the research shows how flaws in browser logic …

Hackers Use Fake Cloudflare Verification Pages to Target Windows and Mac Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new ClickFix campaign is using fake Cloudflare verification pages to trick both Windows and Mac users into running harmful commands on their own computers. The pages look like the “Verify you are human” checks that many people click through …

Top 10 Best Threat Intelligence Platforms (TIP) in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Raw intelligence is cheap; operationalized intelligence is rare. A threat intelligence platform earns its keep by fusing feeds, deduplicating indicators, scoring relevance against your estate, and pushing enriched context into the SIEM, SOAR, and firewall before the analyst asks. The …

Top 10 Best SOAR Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SOAR grew up twice: first from scripts to playbooks, then in the current wave from playbooks to AI agents that draft, decide, and act under human guardrails. The 2026 field splits into suite engines living inside SIEM/XDR platforms and independent …