Claude AI Builds One-Click Chrome and Zero-Click Linux Exploit Chains, Bypasses Android Lock Screen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic’s Frontier Red Team says an unreleased Claude research model wrote working exploit chains for Chrome, Safari, Android, Windows, and Linux. The company shared the details in on research post on October 27, 2026. These were lab tests and not …

Node2Shell Vulnerability Actively Exploited in the Wild, CISA Warns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are already sending live exploit traffic at Node.js servers, so teams should patch right away. CISA added the bug to its Known Exploited Vulnerabilities …

Veeam Patches Critical Backup & Replication Authorization Bypass Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Veeam released security fixes for a critical authorization bypass vulnerability in Veeam Backup & Replication that lets an attacker without login credentials bypass access checks on the CDP Coordinator Service. Tracked as CVE-2026-108142, the flaw carries a CVSS v4.0 score …

Hackers Compromise Camera Management Software to Deploy Malware on Windows Computers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have compromised camera management software to deploy malware on Windows computers, using a legitimate Microsoft program to run malicious code and maintain access. The activity shows how software used to manage surveillance systems can become an entry point into …

Hackers Actively Exploiting New Oracle EBS RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have begun testing a critical Oracle E-Business Suite vulnerability that can let them run commands without logging in. Threat intelligence firm Defused reported exploratory exploit attempts against its decoy systems on October 27, 2026. However, these observations do not …

FortiBleed 2.0 Reveals Thousands of Fortinet VPN and Active Directory Credentials in Exposed Configurations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

FortiBleed 2.0 investigation, published October 27, revealed 40,573 cleartext secret records in exposed FortiGate configurations, including 37,076 local-user passwords and 1,576 Active Directory LDAP bind records linking firewall access, VPN services, and internal identity systems. The researchers examined 1,703 configuration-report …

Microsoft Releases Emergency Windows Updates to Block Compromised eMudhra Certificates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft released emergency Windows trust updates after discovering eight recoverable eMudhra intermediate CA private keys that could let attackers forge trusted certificates or sign malicious content. Microsoft said the issue affected eMudhra’s certificate hierarchy, not Microsoft systems. The response includes …

Hackers Use CyberStrikeAI Agents to Automate Network Scanning, Exploitation, and Data Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have abused CyberStrikeAI, an open-source penetration-testing platform, to coordinate 44 AI agents across network scanning, exploitation, persistence, and data theft. The activity primarily targeted Japanese organizations, showing how attackers can turn security tools into repeatable intrusion workflows without developing …

Coinbase Customer Data Exposed Via analytics vendor Amplitude Security Incident

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Coinbase has disclosed that a security incident at analytics provider Amplitude exposed contact information belonging to a small subset of its customers. The cryptocurrency exchange said it found no evidence of unauthorized access to Coinbase systems and confirmed that customer …

CISA Warns of PHP2Shell Vulnerabilities Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency has added two critical PHP vulnerabilities, jointly known as PHP2Shell, to its Known Exploited Vulnerabilities catalog after confirming real-world exploitation. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, can let unauthenticated attackers remotely execute …