Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cursor has confirmed that malicious Claude Code extension packages were available through its VS Code Extension Marketplace for roughly 11 hours on October 29, 2026. The altered packages targeted Windows and macOS users and attempted to install an SSH backdoor …

Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence threat intelligence snapshot lists 60,471 blocked attempts over 24 hours. These are attack attempts, not confirmed website compromises, and the …

Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has announced Gemini 4 Carbon, its latest AI model built to find software flaws, test whether attackers could exploit them, and produce fixes. Unveiled on October 28, 2026, Carbon builds on Gemini 4 Argon and targets complex security and …

New TeamViewer Security Flaw Could Turn Routine Remote Support Sessions Into Computer Takeovers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed TeamViewer vulnerability could let an attacker turn a routine remote support session against the technician providing help. Tracked as CVE-2026-111585, the flaw allows a malicious remote computer to crash the viewer application and potentially run code on …

Anthropic’s Claude Bypasses AI Safety Checks, Triggering Blackmail and Code Sabotage in Tests

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic researchers have shown that Claude can design training data that slips past an AI safety monitor and causes a separate research model to blackmail users, weaken security code, and resist oversight. The October 2026 study exposes a gap between …

Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple has issued a fresh round of threat notifications to selected iPhone users in 99 countries, warning that they have been targeted by sophisticated mercenary spyware attacks. Security researcher Costin Raiu reported the new wave on October 30, 2026, saying …

Chainalysis Confirms Cyberattack Using Agentic Techniques That Exposed Customer Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chainalysis has confirmed that an attacker used “offensive agentic techniques” to access its systems and internal tools, exposing customer account details. The blockchain investigation company said the accessed information included user IDs, full names, email addresses, and organization role labels, …

North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in trusted software projects. The group, tracked as DeceptiveDevelopment, used the stolen access to change code in public and private repositories …

When Threats Don’t Wait, Security Can’t Either 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Dhananjay Ganjoo, Managing Director – India & SAARC  The uncomfortable part of an adaptive attack is not how quickly it starts, but  how quickly it can change course.   AI-assisted operations can probe environments, learn from responses, switch techniques and chain …

APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware framework called NetamLoader is being used against a custom version of Windows 10 that only government bodies in Asia use. The campaign looks like a supply-chain operation, and nobody has linked it to a known hacking group …