Hackers Hijack AOMEI Software Updates for Just 5 Minutes to Secretly Install Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A short-lived change to AOMEI’s software update system gave hackers a way to deliver malware through a trusted route. Google Threat Intelligence Group (GTIG) and Mandiant found that attackers repeatedly altered AOMEI’s update settings for only a few minutes at …

Hackers Compromise Rank Math PRO WordPress Plugin to Install Self-Rebuilding Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers planted malware in copies of the Rank Math PRO WordPress plugin, exposing websites to hidden backdoors that can rebuild themselves after removal. Rank Math confirmed that some version 3.0.123 packages distributed during a limited October download window contained malicious …

Hackers Using Fake Google Meet Pages to Steal Google Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two websites are hosting fake Google Meet pages designed to steal Google account credentials and carry out phishing involving two-factor authentication (2FA), according to threat intelligence shared on October 20, 2026. The pages imitate a familiar meeting service to make …

SBI Data Breach Claim – Hackers Allegedly Claim Access to 3.75 Lakh Users’ Database

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An unverified SBI data breach claim alleges that a threat actor named Siriusim posted customer records and banking documents online. The claimed dataset contains 375,000 CSV rows and 2,722 PDF files, but those figures do not establish that 3.75 lakh unique customers …

One Hacker Uses AI Agents to Breach Over 100 Company Websites for Just $5,000

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Chinese-speaking hacker used AI agents to break into more than 100 company websites while spending an estimated $5,000 on AI tokens, according to a Reuters investigation in October. The operation shows how one person can direct software to carry …

Claude AI Detects Hidden Crypto Miner While Building Temperature Monitor App on Mac

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An ordinary coding task led to an unexpected security discovery when Claude Code reportedly found a hidden cryptocurrency miner on a developer’s Mac. The AI assistant was building a temperature monitoring app when unusually high sensor readings prompted it to …

Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Drupal has released security updates for a critical remote code execution vulnerability that could let attackers take over affected websites without logging in. Tracked as CVE-2026-108097, the flaw affects the Field UI module in Drupal core. The Drupal Security Team …

Microsoft Says AI Agents Cannot Be Trusted and Could Become Insider Security Threats

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft warns organizations to treat AI agents as potential insider risks not because they are automatically malicious, but because they can access company data, apps, and tools and act on that access at high speed. The warning, published on October …

Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

San Rafael, United States, October 19th, 2026, CyberNewswire Built on an evolutionary engine first released in 2018, STAR Fuzzer by Bright Security finds crashes, memory exhaustion and memory-safety bugs in security-critical code without a running application. In its first open …

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close …