Hackers Impersonate IT Support on Microsoft Teams to Gain Remote Access to Employees’ PCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are impersonating IT support staff on Microsoft Teams to persuade employees to grant remote access to their Windows computers. The activity combines convincing helpdesk identities, unwanted email floods, and legitimate remote support tools, turning an apparently routine workplace conversation …

Hackers Hijack Microsoft 365 Accounts at 79 Organizations Using Stolen Login Tokens

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers compromised Microsoft 365 accounts at 79 organizations by reusing stolen login tokens, recording at least 497 successful sign-ins between July 14 and September 22, 2026. The ten-week campaign also generated more than 200,000 failed login attempts across monitored customer …

Hackers Use AI Agents to Target Over 2,250 Microsoft 365 Tenants Through ConnectWise

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers used AI agents and stolen ConnectWise application credentials to attempt access to more than 2,250 Microsoft 365 tenants, according to Microsoft’s technical investigation report. Microsoft attributed the campaign to Storm-0940, a China-state-aligned group, and said its ARTEX framework accelerated …

OpenAI Codex Breaks USB Encryption in Minutes, Exposing Hardcoded Keys and Security Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI Codex helped researcher Xusheng Li uncover flaws in four USB protection products, including hardcoded encryption keys and hidden accounts that allowed files to be decrypted without the owner’s password. In one test, Codex identified the main weakness in seven …

Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybersecurity researcher says he gained root access to a 2025 Samsung Smart TV and found software built to track far more than the picture on the screen. Known online as log4j, he started after the set kept showing ads …

Hackers Abuse Claude’s Official Website and Google Ads to Spread Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals found a simple way to make a fake download page look trustworthy. Instead of registering a lookalike domain, they placed their lure on claude.ai, the official website of Anthropic, the company behind the Claude AI assistant. The fake page …

Hackers Use Malicious Instagram Ads to Infect iPhones With Spyware Without a Click

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using malicious Instagram advertisements to infect vulnerable iPhones with spyware while users scroll through their feeds. A documented attack used a World Cup advertisement to deliver the P7 variant of DarkSword, exposing sensitive information without requiring the victim …

Palo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has confirmed that a critical Brotli vulnerability affects some PAN-OS firewall deployments and its Prisma Cloud Application Security Transporter Client. Tracked as CVE-2026-111497, the flaw could let an attacker corrupt memory, expose sensitive data, crash a service, …

New Aokigahara Malware Targets ChatGPT, Claude, Codex, and Cursor Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly observed Windows infostealer called Aokigahara is targeting login credentials and session data associated with ChatGPT Desktop, Claude, Codex, and Cursor. The malware searches infected computers for authentication files and application storage, extending familiar password theft into the AI …

Hackers Sell ICMacOS Remote Access Trojan for $699 a Week to Target Mac Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are selling a Mac malware kit that can do far more than steal passwords. The tool, called ICMacOS or Icarus macOS, is offered for $699 a week on Russian-speaking dark web forums. It began as a basic data stealer, …