North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in trusted software projects. The group, tracked as DeceptiveDevelopment, used the stolen access to change code in public and private repositories …

When Threats Don’t Wait, Security Can’t Either 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Dhananjay Ganjoo, Managing Director – India & SAARC  The uncomfortable part of an adaptive attack is not how quickly it starts, but  how quickly it can change course.   AI-assisted operations can probe environments, learn from responses, switch techniques and chain …

APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware framework called NetamLoader is being used against a custom version of Windows 10 that only government bodies in Asia use. The campaign looks like a supply-chain operation, and nobody has linked it to a known hacking group …

Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ransomware crews are now giving the hardest parts of a network break-in to AI coding tools. A group linked to Aur0ra ransomware used Cursor AI agents to go from stolen passwords to domain admin access, the highest level of control …

Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Criminals are copying the look of Polymarket, one of the biggest prediction market sites. They use the copies to take cryptocurrency from people who think they are placing real bets. Once a victim deposits money, the site decides every win …

Critical Drupal Commerce Vulnerability Could Let Hackers Buy Products for Just $0.01

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Drupal has warned that hackers are actively exploiting a highly critical security flaw in Commerce Core, putting online stores at risk of financial losses. Tracked as CVE-2026-118539, the vulnerability lets attackers bypass access checks in the module used to sell …

Hackers Exploit Passwordless Telnet to Infect Linux Devices With New Kairos DDoS Botnet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new botnet called Kairos is spreading to Linux devices through a very old mistake: a Telnet service that accepts the root user with no password. Once inside, the attackers install a small Go-based program that turns the device into …

Hackers Use Zero-Click Coruna and DarkSword Exploits to Steal Sensitive Data From iPhones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using two powerful iPhone exploit kits, Coruna and DarkSword, to break into phones and steal private data. The victim only has to open a web page. There is no app to install and no prompt to accept. The …

Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft and Remote System Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware framework called NIK C2 is turning the OpenAI API into a tool for cybercriminals. Its Windows implant can dump passwords, record every keystroke, take hidden control of a desktop, and send the stolen data to an AI …

Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security flaws in the embedded browsers of Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop could enable code execution, file theft, and address-bar spoofing on developer machines. The findings published on October 29 show how browser features built into …