ChatGPT Sandbox Flaw Lets Attackers Steal Gmail Data Across Accounts via Hidden Channel

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A covert cross-account communication channel inside ChatGPT let an attacker hijack a victim’s session and silently exfiltrate data from connected apps like Gmail, all while the victim saw nothing unusual in their conversation. The vulnerability exploited ChatGPT’s code-execution containers, isolated …

Reflectiz Launches Agentic Pentesting for Websites: Up to 10x Coverage vs Conventional Pentests

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Boston, MA, USA, September 8th, 2026, CyberNewswire Specialized team of AI agents that discover, attack, and validate web vulnerabilities, leveraging pre-existing site context to eliminate noise and speed remediation.  Reflectiz, the continuous web exposure management company, today launched a multi-agent …

Mars Security Launches Real-Time Intel-to-Detection Engine That Turns Live Threat Intelligence Into Backtested Detections in Minutes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New York, NY, United States, September 8th, 2026, CyberNewswire Mars Security, the autonomous threat hunting and detection engineering platform founded by offensive security veterans, today announced Real-Time Intel-Based Detection, a capability that turns newly published threat intelligence into validated, ready-to-deploy …

Claude Mythos AI Autonomously Executes Full Cyber Kill Chain Without Human Guidance

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Claude Mythos is the first model reported to complete a cyber kill chain without step-by-step human direction. The finding does not describe malware or a confirmed victim breach. It is a controlled test, but shows how quickly autonomous attack capability …

Hackers Disable Endpoint Protection and Deploy Sliver Across Compromised Windows Domain

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new intrusion campaign shows how quickly a Windows domain can be turned into a launchpad for deeper compromise. The operators used a Sliver command-and-control beacon, account creation, credential theft and remote administration to establish control after gaining an initial …

WeWorm – First 0-Click Worm Spreading Through WeChat Calls Across iOS and Android

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept zero-click worm dubbed “WeWorm” that it says can spread through WeChat voice calls on both iOS and Android, compromising a target’s WeChat account in seconds without the victim answering the call. Calif says the bug was reported to …

SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended Passport

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SAP has released its September 2026 Security Patch Day updates, delivering 19 new security notes and one update to a previously issued note. The patches address vulnerabilities across SAP NetWeaver, SAP Extended Passport Processing, SAP Cloud Application Programming Model, SAP …

U.S. Offers $10 Million Reward for Iranian IRGC Cyber Chief Linked to Critical Infrastructure Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Department of State’s Rewards for Justice program has announced a reward of up to $10 million for information leading to the identification or whereabouts of Amir Yaryab, a senior figure in Iran’s Islamic Revolutionary Guard Corps Cyber-Electronic Command …

Panzer Ransomware Targets Italian Manufacturers and Telecom Firms With ESXi-Ready RaaS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Panzer ransomware has entered Italy amid a sharp rise in attacks. The ransomware-as-a-service, or RaaS, operation surfaced on August 5 and listed a kitchen manufacturer in Treviso and a telecommunications engineering firm in Catanzaro among its alleged victims. The group …

AI Customer Service Bots Can Be Tricked Into Stealing Security Codes and Acting as Victims

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AI-powered customer service bots are being given more responsibility inside businesses, including access to customer profiles, billing data, support inboxes, account changes, and refund tools. The research showed that attackers may not need traditional vulnerability scanners or direct application exploitation. …