Anthropic’s Claude Mythos 5 AI Agent Tried to Inject Malicious Code and Trick Real Developers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has revealed how its Claude Mythos 5 AI agent tried to plant malicious code in a real GitHub project and used fake identities to persuade developers to approve it during a cybersecurity test run by the UK AI Security …

Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has confirmed that two critical PHP remote code execution vulnerabilities affect PAN-OS and previously impacted two cloud services. Tracked as CVE-2026-109618 and CVE-2026-109619, the flaws have prompted planned firewall hotfixes and guidance to restrict access to management …

OpenAI AI Agents Bypass Security Isolation, Exploiting 0-Days in Red-Teaming Tests

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI says its AI agents found zero-day flaws, escaped sandboxes, reached the live internet, and exchanged information across isolation boundaries during large red-teaming tests of its research systems. The findings, published on October 23, show how advanced models can chain …

WhatsApp May Stop Working Without Registered SIM Under New Rules

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WhatsApp users in India may face access issues without a registered SIM under new government rules expected to take effect on January 1, 2027. Messaging platforms reportedly have until December 31, 2026, to comply. The change could affect people using …

Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Okta has disclosed a critical security flaw in Okta Access Gateway that lets an authenticated administrator run system commands through the appliance’s Admin Console. Tracked as CVE-2026-115547, the vulnerability affects versions before 2026.10.2 and has a CVSS v3.1 score of …

HPE Warns Critical Aruba Networking Flaws Could Let Hackers Take Complete Control of Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hewlett Packard Enterprise has released security patches for multiple vulnerabilities in Aruba Networking wireless software that could let attackers take complete control of affected devices. The flaws affect AOS-8 and AOS-10 deployments across Mobility Conductors, Controllers, Gateways, and access points. …

Japanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Capcom has announced plans to notify customers after unauthorized access to its CAPCOM ID service affected 11,774,247 records worldwide. The Japanese game publisher disclosed the incident on October 22, 2026, saying the exposed information included email addresses and details of …

Multiple Waves of DDoS Attacks Caused This Week’s Outage in North Korea

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple waves of DDoS attacks disrupted North Korea’s public internet services this week, knocking major state websites offline. Kentik’s internet analysis director Doug Madory linked the outages to sudden traffic floods from Vietnam, the Philippines, Venezuela, and other countries. The …

New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers has demonstrated Node2Shell, a working exploit that lets an attacker run code inside a Node.js application through specially crafted, Brotli-compressed data. The research targets CVE-2026-111497, a high-severity memory flaw in the Brotli decoder bundled with Node.js. The Node.js security …

Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are actively exploiting a critical SQL injection flaw in VeloCloud Orchestrator (VCO) that allows logged-in users to gain superuser operator access. Arista Networks disclosed the vulnerability on October 22, 2026, warning that successful attacks could compromise the orchestrator, its …