Rogue OpenAI Agents Caught Editing Wikis and Making Millions of Wikimedia Requests

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Wikimedia Foundation has uncovered unauthorized wiki edits, failed hacking attempts, and millions of automated requests that it believes came from AI agents operated by OpenAI. Its October 5 disclosure raises concerns about autonomous AI systems using public websites in …

Hackers Exploit Exposed Industrial Controllers to Disrupt US Water and Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are exploiting internet-connected industrial controllers to disrupt US water utilities and other essential services. Recent incidents show that poorly protected equipment can give attackers direct access to physical operations, with consequences ranging from lost monitoring to flooding and reduced …

Critical Dell System Update Tool Vulnerability Allows Attackers to Execute Code as Root User

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Dell has released security updates for five vulnerabilities in Dell System Update (DSU), including a critical flaw that could let an unauthenticated remote attacker execute code with root privileges. The issues affect versions before 2.3.0.0, and Dell urges customers to …

Midnight Blizzard Abuses Hotel Wi-Fi Captive Portals to Deliver Malware and Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Travelers connecting to hotel Wi-Fi may now face more than an unreliable internet signal. A campaign linked to Midnight Blizzard has turned captive portals, the sign-in pages shown before online access, into a route for malware, credential theft, and possible …

Meta and Microsoft are Actively Cutting Employee Use of Claude AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Meta and Microsoft are reducing employee use of Anthropic’s Claude AI while pushing their own coding tools, according to an October 5 report by The Information. The changes focus on internal spending and staff workflows, rather than ending customer access …

ClingSTUN Backdoor Exploits Multiple IoT Vulnerabilities to Gain Persistent Remote Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ClingSTUN is a Linux backdoor that exploits vulnerable internet-connected devices to give attackers lasting remote access. Rather than simply infecting routers and cameras, it turns compromised equipment into remotely controlled proxy nodes that can relay traffic and run commands. The …

FBI Removes Accenture Contractor After Unpatched PeopleSoft Flaw Exposes Thousands of Employees

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI removed an Accenture contractor on October 5, 2026, after a missed security patch led to a data breach exposing sensitive personal details of thousands of employees. According to Reuters, two sources identified Oracle’s PeopleSoft human resources platform as …

Google Adds 6 Advanced Protection Features to Android 17 Against Sophisticated Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has detailed six Advanced Protection enhancements for Android 17, targeting sophisticated attacks, scams and unauthorized access. Announced on October 1, 2026, the changes combine stronger restrictions with tools that preserve evidence when someone suspects their phone has been compromised. …

Atlassian Patches Critical Vulnerabilities in Jira, Confluence, Bitbucket, and Five More Products

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Atlassian has disclosed a critical arbitrary file access vulnerability affecting eight products, including Jira, Confluence, and Bitbucket. Tracked as CVE-2026-21589, the flaw has a CVSS score of 9.3. It lets unauthenticated attackers access specific files in an affected application’s web …

Top 10 Best SAST Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The AI-code flood made one truth undeniable: static analysis only matters if developers fix what it finds. We scored ten SAST tools with fix-rate potential precision, PR-fit, and remediation quality weighted highest. At the same time, enforcing strict secure coding …