WhatsApp May Stop Working Without Registered SIM Under New Rules

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WhatsApp users in India may face access issues without a registered SIM under new government rules expected to take effect on January 1, 2027. Messaging platforms reportedly have until December 31, 2026, to comply. The change could affect people using …

Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Okta has disclosed a critical security flaw in Okta Access Gateway that lets an authenticated administrator run system commands through the appliance’s Admin Console. Tracked as CVE-2026-115547, the vulnerability affects versions before 2026.10.2 and has a CVSS v3.1 score of …

HPE Warns Critical Aruba Networking Flaws Could Let Hackers Take Complete Control of Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hewlett Packard Enterprise has released security patches for multiple vulnerabilities in Aruba Networking wireless software that could let attackers take complete control of affected devices. The flaws affect AOS-8 and AOS-10 deployments across Mobility Conductors, Controllers, Gateways, and access points. …

Japanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Capcom has announced plans to notify customers after unauthorized access to its CAPCOM ID service affected 11,774,247 records worldwide. The Japanese game publisher disclosed the incident on October 22, 2026, saying the exposed information included email addresses and details of …

Multiple Waves of DDoS Attacks Caused This Week’s Outage in North Korea

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple waves of DDoS attacks disrupted North Korea’s public internet services this week, knocking major state websites offline. Kentik’s internet analysis director Doug Madory linked the outages to sudden traffic floods from Vietnam, the Philippines, Venezuela, and other countries. The …

New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers has demonstrated Node2Shell, a working exploit that lets an attacker run code inside a Node.js application through specially crafted, Brotli-compressed data. The research targets CVE-2026-111497, a high-severity memory flaw in the Brotli decoder bundled with Node.js. The Node.js security …

Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are actively exploiting a critical SQL injection flaw in VeloCloud Orchestrator (VCO) that allows logged-in users to gain superuser operator access. Arista Networks disclosed the vulnerability on October 22, 2026, warning that successful attacks could compromise the orchestrator, its …

StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The seller behind StealC has returned with Stadia, a Windows remote access trojan that combines password theft with hidden desktop control. Advertised on October 16, 2026, the malware expands beyond stealing data, allowing criminals to run commands, browse files, manage …

Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Public proof-of-concept code for two critical PHP vulnerabilities is now available, and attackers have tried to use the flaws to deploy botnet malware. Known together as PHP2Shell, CVE-2026-109618 and CVE-2026-109619 both carry a CVSS severity score of 9.2 and can …

Hackers Use New BlackX Bootkit to Bypass Windows Secure Boot on Fully Patched Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new UEFI bootkit called BlackX has been used in cyberespionage attacks against diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan. The malware targets Secure Boot, a feature designed to help stop untrusted software from running before Windows starts. Researchers say …