Hackers Leak Records of 41,000 DHS Personnel, Exposing Undercover ICE Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A leak of records covering more than 41,000 Department of Homeland Security employees and contractors has exposed contact details, work assignments, and links to sensitive operations, including undercover ICE work. Published on October 28, the archive reveals far more than …

WatchGuard Discloses 7 Critical Firewall Flaws Allowing Remote Code Execution and Root-Level Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WatchGuard disclosed seven critical Fireware OS vulnerabilities in an October 27, 2026 advisory, affecting Firebox firewalls and potentially enabling remote code execution, root-level action injection, and memory corruption. They are part of a wider release that covers 18 security issues …

Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet’s FortiAIGate is bringing AI security controls to enterprise workloads on Oracle Cloud Infrastructure (OCI), helping businesses inspect prompts, block sensitive data leaks, and control agent actions. An Oracle announcement published October 27 outlines how customers can combine the self-hosted …

WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress released version 7.1.4 on October 28, 2026, fixing 22 security flaws, including an unauthenticated remote code execution vulnerability in its update process. The security release also addresses stored cross-site scripting, data exposure, and access control issues. WordPress urges website …

OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec today announced the release of a free, interactive hands-on lab in Proving Grounds Play (PG …

Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers. He also says he chained them to run code on iOS. The work was due to be presented on October 28 at OffensiveCon in Tokyo, according to …

Beyond the Sandbox Verdict: 3 Questions for Faster SOC Decisions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Whether you’re investigating a suspicious URL or a file, you need more than a verdict to make a confident, evidence-based decision. You need to understand what the threat does, whether others have encountered it before, and what the findings mean …

TeamViewer Vulnerabilities Could Let Hackers Execute Malicious Code Through Remote Desktop Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TeamViewer has released security updates for three high-severity vulnerabilities that could let attackers run malicious code, crash remote desktop clients, or gain root access on macOS. The flaws affect client components used with TeamViewer Remote, TeamViewer Tensor, and TeamViewer ONE, …

Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers at Searchlight Cyber chained several small weaknesses in Cloudflare’s image feature. The chain let them run JavaScript on a site that was meant to block it. Kevin Gervot and Adam Kues published the work on October 28, 2026, …

PropellerAds: Why Modern Malware Delivery Starts Before the Payload

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

By Farukh Rakhimov, Head of Compliance, Data Protection, and Information Security at AdTech Holding In March 2026, Google Threat Intelligence Group (GTIG) disclosed Coruna, an iOS exploit kit with five exploit chains and 23 exploits covering iOS 13.0 through 17.2.1. …