CISA Warns of WordPress Core Vulnerability Exploited in Attacks to Execute Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting a WordPress Core vulnerability that can allow malicious code to run on website servers. CISA added the flaw to its Known Exploited Vulnerabilities catalog on November 3, …

Top 10 Best Breach & Attack Simulation (BAS) Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Every SOC believes its controls work; BAS is the machine that checks. By safely running real attacker techniques against production defenses continuously, not annually these platforms convert “we should be covered” into pass/fail evidence per technique, per control. The 2026 …

Hackers Use New Infostealer Malware to Steal ChatGPT, Claude, and Codex Tokens That Survive Password Resets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are expanding information theft beyond saved passwords, targeting authentication tokens and session data stored by ChatGPT, Claude, Codex, and other AI tools. Two Windows malware families, WardenStealer and Aoki, collect credentials that may remain usable after a password reset, …

Hackers Use Fake Software Downloads to Secretly Hijack Windows PCs and Monetize Their Resources

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using fake software downloads to quietly turn Windows computers into revenue sources, installing programs that share internet bandwidth, run computing workloads, or deliver unwanted utilities. The campaign targets people searching for cracked commercial software, free games, activation tools, …

Hackers Use Stolen Microsoft Entra ID and Azure DevOps Credentials to Access 27 Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are abusing stolen Microsoft Entra ID application credentials and Azure DevOps identities to access Microsoft 365 and Azure environments, reaching at least 27 organizations. Todyl’s latest investigation update describes an ongoing campaign targeting managed service providers (MSPs) and their …

Hackers Use OpenAI Codex Jailbreak Toolkit That Secretly Injects Ads Into AI Responses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A jailbreak toolkit targeting OpenAI Codex is doing more than trying to bypass AI safety rules. The Chinese-language package, called Haiou, changes the coding agent’s trusted instructions so that ordinary greetings trigger advertisements for a third-party AI gateway. Researchers describe …

Hackers Launch LLMHijacking Attacks, Leaving Companies With $1 Million in Cloud Bills

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are stealing access to corporate large language models and reselling it, leaving victims with cloud bills reaching $1 million. Mandiant investigated multiple incidents during 2026 where unauthorized AI use generated more than $100,000 in charges in a single day, …

Hackers Hijacked French Blood Plasma Freezers, Changing Temperature Settings From −30°C to 110°C

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers reportedly changed temperature settings on refrigeration equipment used by the French Blood Establishment, EFS, from around −30°C to 110°C after targeting its cooling service provider, Coolworld. The incident occurred overnight between November 1 and 2, 2026, raising concerns about …

OpenAI Builds Pando Git Infrastructure Using AI Agents and Deploys Continuous Security Testing

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has built Pando, a new Git backend, with Codex agents in just 10 weeks, replacing the system behind its main shared code repository without stopping engineering work. The company says agents now run around the clock to red-team both …

North Korean Hackers Abuse Internal AI Tool and Fake Job Interviews in $6.34 Billion Binance Heist

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

North Korean hackers used a fake job interview, a poisoned coding task, and a hijacked internal AI tool to reach Binance’s wallet systems. The FBI says the North Korean group it calls “TraderTraitor” stole more than $6 billion in digital …