Midnight Blizzard-Linked Hackers Use Claude AI to Rebuild Malware and Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers linked to Midnight Blizzard used Anthropic’s Claude AI to rebuild malware after security tools detected it, helping them keep espionage operations running against Ukrainian and European targets. New research shows that changing a file’s code and hash did not …

Chinese Hackers Exploit BeyondTrust Zero-Day to Gain Root Access and Deploy Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A suspected China-linked espionage group exploited a zero-day vulnerability in BeyondTrust Remote Support appliances to gain access, reach root privileges and install tools for continued access. Google Threat Intelligence Group (GTIG) says the activity took place in late August 2026, …

Proofpoint to Acquire Varonis in Massive $6.3 Billion AI Cybersecurity Deal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Proofpoint to acquire Varonis Systems in a $6.3 billion all-cash deal announced October 15, 2026, combining email, data, and AI security to protect sensitive business information. Under the agreement, Varonis shareholders will receive $49.75 per share in cash. That represents …

CISA Warns of Palo Alto Networks PAN-OS Code Injection Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency has added a high-severity Palo Alto Networks PAN-OS vulnerability to its Known Exploited Vulnerabilities catalog after confirming it is being used in real-world attacks. The flaw, tracked as CVE-2026-0322, affects the PAN-OS management …

Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new version of GhostBat Android malware is targeting users of 60 banking, UPI, wallet, fintech and payment apps in India. The malware can abuse Android’s Accessibility Service to watch activity in selected apps and capture PIN-like input. Its operators …

Linus Torvalds Reveals Claude Code Wrote Linux Kernel Patches and Test Programs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Linus Torvalds has disclosed that Claude Code helped write Linux kernel patches, test programs, review material, and the first draft of a technical write-up under his direction. The work targets page-cache read performance, showing how AI coding tools are used …

Critical Adobe Acrobat Flaw Lets Malicious PDFs Trigger One-Click Memory Corruption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Adobe has fixed a flaw in Acrobat and Acrobat Reader that lets a malicious PDF corrupt memory when a user opens it. Tracked as CVE-2026-81983, the out-of-bounds write carries a CVSS score of 7.8 and could lead to code execution …

PoC Exploit Released for Critical GitLab RCE Vulnerability (CVE-2026-97229)

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A public proof-of-concept (PoC) for CVE-2026-97229 published by researcher Jonah Burgess shows how a flaw in GitLab’s CI/CD regular-expression compiler could be used to run commands on a vulnerable server. GitLab rates the issue Critical with a CVSS score of …

Critical Linux Kernel Flaw Lets Attackers Escape Virtual Machines and Take Control of Hosts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical flaw in the Linux kernel may allow an attacker-controlled virtual machine (VM) to breach its isolation boundary and impact the host system. This vulnerability, identified as CVE-2026-99999 and referred to as PwnEscape by researcher Paulos Yibelo, originates from …

Burger King Japan Confirms Data Breach Exposing 11.18M User Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Burger King Japan has confirmed a data breach that exposed about 11.18 million records linked to members of its official app. BK Japan, which operates the chain in Japan, said an outside party gained unauthorized access to the system used …