Palo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has confirmed that a critical Brotli vulnerability affects some PAN-OS firewall deployments and its Prisma Cloud Application Security Transporter Client. Tracked as CVE-2026-111497, the flaw could let an attacker corrupt memory, expose sensitive data, crash a service, …

New Aokigahara Malware Targets ChatGPT, Claude, Codex, and Cursor Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly observed Windows infostealer called Aokigahara is targeting login credentials and session data associated with ChatGPT Desktop, Claude, Codex, and Cursor. The malware searches infected computers for authentication files and application storage, extending familiar password theft into the AI …

Hackers Sell ICMacOS Remote Access Trojan for $699 a Week to Target Mac Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are selling a Mac malware kit that can do far more than steal passwords. The tool, called ICMacOS or Icarus macOS, is offered for $699 a week on Russian-speaking dark web forums. It began as a basic data stealer, …

Claude Code Reportedly Finds 214,856 Deleted Photos and Videos Hidden on Android Phone

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic’s Claude Code reportedly found 214,856 files linked to deleted photos and videos on a Google Pixel, raising privacy concerns about Android photos. The user, known as Cooler (@coolerwave), said files remained in a hidden thumbnail folder even after the …

Apache Camel Fixes Multiple Vulnerabilities Including High-Severity XXE One’s

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache Camel has released fixes for multiple security flaws, including high-severity XML External Entity vulnerabilities that could expose local files or reach internal systems. The issues affect several components, with risks ranging from unsafe XML processing to remote code execution, …

New DarkCore RAT Targets Gmail and WhatsApp Sessions While Hiding Behind Victims’ IP Addresses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly uncovered remote access trojan called DarkCore is being marketed with a browser designed to reuse stolen Gmail, WhatsApp, and other account sessions while routing traffic through victims’ IP addresses. The approach could make unauthorized account access look like …

Hackers Can Abuse Logged-In WordPress Admin Sessions to Secretly Install PHP Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress administrators often keep their dashboard open in the same browser they use for everyday browsing. A new attack chain shows why that habit is risky. Researchers have documented a JavaScript loader that waits for a signed-in administrator to visit …

Hackers Revive BlackLotus Techniques to Bypass Windows Secure Boot and Deploy Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have revived techniques associated with the BlackLotus bootkit to bypass Windows Secure Boot and deploy espionage malware against diplomatic organizations in Central Asia. The new bootkit, named BlackX, appeared in attacks targeting agencies in Tajikistan, Uzbekistan, and Turkmenistan in …

Hackers Use VLC Media Player and VMware Tools to Load Malware Through DLL Side-Loading

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using legitimate VLC Media Player and VMware components to load malware onto Windows systems, hiding harmful code behind familiar software. The activity forms part of three malware campaigns targeting users in Brazil and Portugal through fake legal notices, …

Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are now using public exploit code to break into websites that run PHP, and universities and business sites are among the main targets. The bugs behind this wave are two critical flaws in the PHP engine, tracked as CVE-2026-109618 …