Hackers Impersonate IT Help Desk on Microsoft Teams to Steal Windows Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are abusing Microsoft Teams chats to impersonate IT help desk staff, trick employees into installing malware or granting remote access, and steal Windows passwords through a fake lock screen. The attacks don’t require a software vulnerability they rely on …

Meta’s Muse AI Agent 0-Day Vulnerability Allows Attackers to Hijack the Tool and Inject Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A zero-day vulnerability in Meta’s Muse AI agent for macOS could allow malware already running under a user account to hijack the assistant, intercept dictated prompts, inject malicious instructions, and steal authentication material. The flaw is especially concerning because a …

Google Fined €403 Million for GDPR Violations Over Users’ Location Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ireland’s Data Protection Commission (DPC) has fined Google Ireland Limited €403 million after concluding that the technology giant violated the General Data Protection Regulation (GDPR) while processing users’ location data. Announced on September 21, 2026, the decision also orders Google …

AWS Automatically Quarantines Exposed IAM Keys Within 10 Seconds of GitHub Leak

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Amazon Web Services can move from detection to containment in seconds when an Identity and Access Management access key appears in a public GitHub repository. In a controlled Unit 42 exposure test, AWS attached its AWSCompromisedKeyQuarantineV3 managed policy to the …

Claude Code Agent Allegedly Deletes 48,000 Files in 103 Seconds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Claude Code user has reported a severe data-loss incident in which an autonomous coding agent allegedly deleted 48,218 live files from a Windows project tree and destroyed the repository’s Git object store. The deletion reportedly occurred in just 103 …

Microsoft Entra ID to Block SMS First-Factor Sign-Ins Worldwide in February 2027

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is retiring SMS first-factor sign-in for Microsoft Entra ID workforce tenants worldwide and requires organizations to migrate affected users before February 1, 2027. The security-focused change will prevent employees from using a registered telephone number and SMS one-time passcode …

Microsoft Investigating Teams Calling Issue Blocking Some Users From Making or Receiving Calls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is investigating a service incident that is preventing some users from placing or receiving calls through Microsoft Teams. The company disclosed the issue through its verified Microsoft 365 Status account on September 21, directing administrators to incident reference TM1475580 …

PAYLOAD Ransomware Hijacks Active Directory GPO to Disrupt Entire Windows Domain Without Encryption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A PAYLOAD ransomware attack used Active Directory Group Policy Objects to disrupt an entire Windows domain without encrypting files or deploying ransomware binaries. The operation targeted a manufacturing organization in the Middle East. It relied on domain-level control, stolen credentials, …

Malicious npm Package With 2 Million Downloads Hides Malware in Runtime Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious npm package that appeared to be an ordinary data-indexing tool has exposed a weakness in software supply-chain defenses. The package, indexed-btree, copied the identity of the legitimate sorted-btree library and recorded almost two million weekly downloads. The campaign …

Microsoft Confirms September 2026 Windows Updates Break File History Backups

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed that its September 2026 Windows security updates can prevent File History from creating or updating backups on some systems. The regression places users who rely on the built-in feature at risk of assuming their files are protected …