Microsoft Says PKI, HSMs and Security Appliances Must Prepare for Post-Quantum Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is urging organizations to prepare their certificate systems for post-quantum authentication, warning that public key infrastructure (PKI), hardware security modules (HSMs), and security appliances need testing before deployment. Its October 8 guidance says the shift will affect applications, devices, …

VirusTotal Adds Scanning for Public IPv4 Space to Expose C2 Servers and Malware Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VirusTotal has added daily scanning of the public IPv4 space, giving security teams a new way to find command-and-control (C2) servers and track malware infrastructure. Announced on October 8, 2026, the update records exposed services, port activity, banners, and server …

Leaked Chat Logs Show Silent Ransomware Extorted Over $200,000,000 in 6 Months Without Encrypting Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Alleged internal chats from Silent Ransom Group suggest the criminals collected $206.95 million from 27 firms in roughly six months without encrypting victims’ files. The reported earnings point to the power of data extortion, where attackers steal sensitive records and …

Malicious PDF Reader With 10,000+ Installs on Google Play Delivers Anatsa Banking Trojan

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious Android PDF reader distributed through Google Play has recorded more than 10,000 installs while serving as an installer for the Anatsa banking trojan. The finding shows how a routine document tool can become a route for malware that …

React Server Components Flaw Lets Attackers Freeze Next.js Servers With a Single POST Request

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity denial-of-service flaw (CVE-2026-23870) in React Server Components can allow a remote attacker to freeze vulnerable Next.js servers by sending a specially crafted POST request to a Server Function endpoint. The issue has a CVSS score of 7.5 and …

Anthropic Cyber Mission to Support Defenders with Tools, Research, and Resources

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic launched its Anthropic Cyber Mission on October 8, 2026, to help security teams protect critical infrastructure and open-source software. The effort combines advanced Claude models, engineers, threat research, and funding, with an emphasis on fixing weaknesses rather than simply …

FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI and U.S. Justice Department have seized seven domains tied to Microscan and FishHub, two hacking tools allegedly operated by China-based Integrity Technology Group. Announced on October 8, 2026, the court-authorized action aims to cut access to systems used …

Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix has urged customers to patch a critical security flaw in NetScaler ADC and NetScaler Gateway that could allow remote code execution or cause a denial of service. Tracked as CVE-2026-107406, the memory overflow vulnerability carries a CVSS v4.0 score …

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious release of the Tensorlake npm package has been published with a Shai-Hulud worm variant that can steal developer secrets and attempt to spread through connected software supply chains. The affected version, [email protected], was released on October 8, 2026. …

Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Scanning and remote code execution attempts targeting video surveillance devices in Ukraine rose between September 21 and October 1, 2026. Most activity focused on CVE-2021-36260, a critical command injection flaw in unpatched Hikvision products. The surge occurred alongside Russian missile …