StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The seller behind StealC has returned with Stadia, a Windows remote access trojan that combines password theft with hidden desktop control. Advertised on October 16, 2026, the malware expands beyond stealing data, allowing criminals to run commands, browse files, manage …

Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Public proof-of-concept code for two critical PHP vulnerabilities is now available, and attackers have tried to use the flaws to deploy botnet malware. Known together as PHP2Shell, CVE-2026-109618 and CVE-2026-109619 both carry a CVSS severity score of 9.2 and can …

Hackers Use New BlackX Bootkit to Bypass Windows Secure Boot on Fully Patched Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new UEFI bootkit called BlackX has been used in cyberespionage attacks against diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan. The malware targets Secure Boot, a feature designed to help stop untrusted software from running before Windows starts. Researchers say …

SBI Notifies Customers Impacted by the Recent Cyber Incident

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

State Bank of India (SBI) has individually notified customers whose information was identified in a recent cyber incident, sending alerts through email and WhatsApp. In its latest advisory on October 23, the bank said customer account balances and funds remain …

Top 10 Best Email Encryption Services in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Email encryption has a usability paradox: the strongest cryptography loses to the recipient who gives up at the portal login and asks for the file “some other way.” The 2026 winners solve for both ends sender-side automation (policies, DLP triggers, …

Top 9 Best Managed File Transfer (MFT) Solutions in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

No category has been breached more publicly this decade than managed file transfer mass-exploitation campaigns against MFT products turned quiet integration plumbing into board-level risk, and the 2023–2024 waves rewrote the buying criteria. In 2026 you evaluate an MFT vendor’s …

Hackers Exploit Critical Citrix NetScaler RCE Flaw to Deploy Web Shells and Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical flaw in Citrix NetScaler ADC and NetScaler Gateway is being used to run commands on exposed appliances, install web shells and deliver malware. Tracked as CVE-2026-88771, the vulnerability stems from improper input validation and can allow an unauthenticated …

Hacker With Limited Skills Used DeepSeek AI to Breach Indian University and Steal Over 5,200 Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybercriminal using the online handle BUGSTER used artificial intelligence tools to support attacks on Indian organizations, including two universities. In one confirmed intrusion, the attacker stole a MongoDB database containing more than 5,200 records, including personal information about students …

Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates. Published on October 21, 2026, the alert assigns the flaw a CVSS 3.1 score of 9.1 and covers Oracle …

PwC Data Breach Claim – Everest Ransomware Group Claims to Have Stolen 590 GB of Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Everest ransomware group claims to have stolen 590.69 GB of data linked to PwC, the global professional services firm. The alleged haul includes human resources records, training files, and internal documents. The claim remains unverified, with no PwC response …