Coruna and DarkSword Exploit Kits Can Fully Compromise iPhones From a Single Web Visit

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two powerful iPhone exploit kits, Coruna and DarkSword, show how a visit to a malicious or compromised website can put an outdated device at risk. The kits can link several software flaws together to break out of the browser and …

Hackers Breach Meta GitHub Repositories, Steal Source Code and Data of 1,500 People

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers used an employee’s stolen credentials to access some of Meta’s GitHub repositories, taking product source code and personal information linked to roughly 1,500 people. Most affected individuals are Meta employees in the United States, according to the company’s disclosure …

Attackers Breach European Bank Through Third-Party Gateway and Target WSUS Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A European bank was breached through a poorly secured, third-party gateway before an attacker tried to exploit its Windows Server Update Services (WSUS) infrastructure. The case shows how stolen login details and weak access controls can put a bank’s central …

Gears of War: E-Day Hit by DDoS Attack, Causing Login Failures and Disconnects

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Gear of War: E-Day players faced login failures, sudden disconnects, and other online service problems after distributed denial-of-service attacks targeted the game’s online services. The official Gears Community account confirmed the cause on X, linking the disruption to DDoS activity …

Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a Chrome security update that addresses 37 vulnerabilities, including seven critical flaws that raise concerns about memory corruption and possible code execution. Published on October 13, 2026, the update covers Windows, Mac, and Linux, with fixes spanning graphics, …

Ivanti Connect Secure 0-Days Exploited to Steal Active Directory Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers chained three zero-day flaws in Ivanti Connect Secure VPN appliances to gain root-level access without logging in, then searched for credentials and sensitive Active Directory data. The activity, which began on October 3, 2026, targeted a fully patched appliance …

Windows BitLocker Vulnerabilities Security Feature Bypass and Privilege Elevation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft fixed three Windows BitLocker vulnerabilities CVE-2026-85920, CVE-2026-88070, and CVE-2026-83500 that could enable privilege escalation or bypass security protections in its October 2026 updates. BitLocker is a core Windows disk-encryption feature designed to protect data if a laptop, desktop, or …

Hackers Abuse Google Search to Attacks ITadmins with Weaponized PuTTY Installer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IT administrators searching Google for PuTTY may see a convincing fake download result mixed with legitimate links. Researchers documented a campaign that uses a lookalike website to deliver a malicious Windows installer disguised as the popular SSH client. The installer …

Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has patched an actively exploited Windows Shell zero-day vulnerability that allows attackers to bypass Mark of the Web protections. Tracked as CVE-2026-96951, the flaw was addressed in the October 2026 Patch Tuesday updates. It carries a CVSS score of …

OpenAI Engineer Arrested for Planting Spyware Device in an Executive Conference Room

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An OpenAI engineer has been arrested for allegedly hiding an audio recording device in an executive conference room at the company’s San Francisco offices. Abdulrahman Alfozan, 35, a Saudi national, was arrested on October 9, 2026, and appeared in federal …