Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers. He also says he chained them to run code on iOS. The work was due to be presented on October 28 at OffensiveCon in Tokyo, according to …

Beyond the Sandbox Verdict: 3 Questions for Faster SOC Decisions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Whether you’re investigating a suspicious URL or a file, you need more than a verdict to make a confident, evidence-based decision. You need to understand what the threat does, whether others have encountered it before, and what the findings mean …

TeamViewer Vulnerabilities Could Let Hackers Execute Malicious Code Through Remote Desktop Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TeamViewer has released security updates for three high-severity vulnerabilities that could let attackers run malicious code, crash remote desktop clients, or gain root access on macOS. The flaws affect client components used with TeamViewer Remote, TeamViewer Tensor, and TeamViewer ONE, …

Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers at Searchlight Cyber chained several small weaknesses in Cloudflare’s image feature. The chain let them run JavaScript on a site that was meant to block it. Kevin Gervot and Adam Kues published the work on October 28, 2026, …

PropellerAds: Why Modern Malware Delivery Starts Before the Payload

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

By Farukh Rakhimov, Head of Compliance, Data Protection, and Information Security at AdTech Holding In March 2026, Google Threat Intelligence Group (GTIG) disclosed Coruna, an iOS exploit kit with five exploit chains and 23 exploits covering iOS 13.0 through 17.2.1. …

OWASP Finds ChatGPT Helped Low-Skilled User Take Over Admin Account in Hacking Test

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OWASP found that ChatGPT helped an operator with no offensive security knowledge take over an administrator account during a controlled hacking test. The operator largely copied commands, returned results to the chatbot, and followed its guidance to change a password …

Google Fixes 52 Chrome Security Flaws, Including Four Critical Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a Chrome security update that fixes 52 vulnerabilities, including four critical flaws affecting FileSystem, FileAPI, Skia, and Layout. According to the release notice, the Stable channel is moving to version 156.0.8078.73/.74 for Windows and Mac. At the same …

FBI Seizes Virtualine Bulletproof Hosting Domain Linked to Ransomware and Cybercrime

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI seized virtualine.net, the main website of a bulletproof hosting provider linked to ransomware operators, stolen-data markets, and other cybercrime services. Announced on October 27, 2026, the court-authorized action targeted a business accused of helping criminals keep their websites …

Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Crypto Wallet Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Three malicious Firefox extensions posed as the Phantom, Jupiter, and Bitget crypto wallets to steal recovery phrases and private keys. Whoever holds these secrets controls the wallet and every coin in it. All three listings were live on the Firefox …

Hackers Use Fake Court Notices to Deliver XWorm Malware Through Hidden Windows Scripts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers are sending fake court notices to organizations in Colombia and using them to install XWorm, a remote access tool that gives criminals full control of an infected PC. The emails look like real legal letters. The attached files are …