Ahold Delhaize Takes Systems Offline Following Cybersecurity Incident

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ahold Delhaize has taken some systems offline after identifying a security issue within its network, the food retail group said on October 12, 2026. The company, based in Zaandam, the Netherlands, said its teams were assessing the issue and taking …

Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Google’s shared DevSite platform could have allowed an unauthenticated attacker to forge Flask session cookies and trigger remote code execution across several Google-owned developer websites, according to researcher Simon Koeck. The issue affected the OAuth flow …

Critical GitLab Vulnerability Enables Arbitrary Code Execution Attacks on Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers to execute arbitrary code on affected servers without logging in. Tracked as CVE-2026-97229, the flaw carries the maximum CVSS score of 10.0 and affects both …

WhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious WhatsApp attachment is being used to deploy a Windows remote access trojan that can reach SYSTEM-level access, giving its operators deep control over infected machines. The campaign begins with a ZIP archive carrying a financial-document lure and an …

Google AitM Phishing Kit Uses WebSockets to Bypass MFA in Real Time

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Google account phishing kit uses live WebSocket connections to guide victims through fake sign-in screens, relay authentication requests, and steal authenticated sessions. The campaign shows how attackers can get past MFA by forwarding login steps in real time rather …

Ledger Confirms Unauthorized Hardware Implant in Crypto Wallet Sold by CryptoBilis

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ledger has confirmed that a cryptocurrency hardware wallet linked to reported fund losses contained an unauthorized hardware implant, bringing physical tampering into its investigation of devices sold through Southeast Asian reseller CryptoBilis. The finding raises supply chain security concerns, but …

Attackers Reportedly Hack Supermarket Fridges and Raise Temperatures to 50°C

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

French supermarket chains are dealing with a major cybersecurity incident after attackers reportedly changed refrigeration settings remotely, causing some chilled cabinets and freezers to heat up instead of cool down. The incident began overnight between October 11 and October 12 …

IBM Patches 22 Verify Access Flaws, Including Critical Remote Code Execution Bugs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IBM patched 22 vulnerabilities in Verify Identity Access and Security Verify Access, including two critical flaws allowing unauthenticated remote code execution across appliance and container deployments. The most severe bugs, CVE-2026-78401 and CVE-2026-78406, each carry a CVSS score of 9.8. …

Hackers Exploit Critical AhsayCBS Flaws to Deploy Webshells and XMRig Miners

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are exploiting two flaws in AhsayCBS backup servers to run commands, plant webshells, and install XMRig cryptocurrency miners disguised as Microsoft Edge. Huntress first observed exploitation on October 7, 2026, at 23:20:15 UTC. By October 8, its researchers had …

FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026, as part of its investigation into the hacking group ShinyHunters. The arrest links a professional involved in ransomware response to an alleged cyber extortion conspiracy. However, …