Hackers Use Zero-Click Coruna and DarkSword Exploits to Steal Sensitive Data From iPhones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using two powerful iPhone exploit kits, Coruna and DarkSword, to break into phones and steal private data. The victim only has to open a web page. There is no app to install and no prompt to accept. The …

Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft and Remote System Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware framework called NIK C2 is turning the OpenAI API into a tool for cybercriminals. Its Windows implant can dump passwords, record every keystroke, take hidden control of a desktop, and send the stolen data to an AI …

Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security flaws in the embedded browsers of Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop could enable code execution, file theft, and address-bar spoofing on developer machines. The findings published on October 29 show how browser features built into …

Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has confirmed that attackers are actively exploiting PHP2Shell vulnerabilities against PAN-OS management interfaces exposed to the internet. In its October 29, 2026, update, Unit 42 said it independently verified attacker tools used to combine the PHP flaws …

Trezor Warns of Suspected Spy Implant in Crypto Wallet That Could Steal Recovery Phrases

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Trezor has warned that a suspected hardware implant inside a Trezor Safe 5 could steal recovery phrases and send them over a mobile network. The warning covers every Trezor model bought from CryptoBilis from March 2026 onward, although only one …

Binance Hit by Biggest Crypto Heist in History – North Korean TraderTraitor Group Reportedly Stolen $6.36 Billion

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Binance reportedly lost approximately $6.36 billion in cryptocurrency on October 29, 2026, after an attacker drained wallets across ten blockchains. TRM Labs describes the incident as the largest cryptocurrency theft ever recorded, with the majority of the stolen funds transferred …

Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A grey market relay service is quietly installing the real OpenAI Codex and Anthropic Claude Code tools on company computers. It then changes their settings so that every prompt, file and login token goes through servers the service controls. The …

CISA Warns of GitLab Integer Overflow Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting CVE-2026-97229. This GitLab vulnerability could allow code execution without logging in. CISA added the flaw to its Known Exploited Vulnerabilities catalog on October 29, 2026, confirming evidence of …

Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers are chaining zero-day flaws in Ivanti Connect Secure VPN appliances to gain unauthenticated root access, exposing stored credentials and sensitive Active Directory data. Ivanti confirmed attacks against a limited number of customers and released additional fixes on October 29, …

Microsoft Fixes Remote Desktop Connection Failures Following Recent Updates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft resolved a Windows 11 issue that blocked non-admin users from connecting via Remote Desktop when Administrator protection was enabled, releasing fixes on October 28, 2026, for connection failures with error 0xC000000D. The bug appeared after the September 22 non-security …