Renault Car’s 15-Year-Old Linux Navigation Software Hacked to Execute Arbitrary Root Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security researcher has found a way to run any command with root rights on the navigation unit in a 2014 Renault Latitude. The unit is a TomTom Carminat LIVE head unit that runs a custom system built on Linux …

Microsoft Reveals 78% of Exploited Vulnerabilities Enable System Takeover and Privilege Escalation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft’s new research shows that attackers pick flaws that give them control of a system. About 78% of vulnerabilities exploited in real attacks let an attacker take over a system or raise their privileges. The finding comes from a data …

Hackers Abuse Signed ChatGPT and Claude Applications to Deploy Yoba Malware and Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are distributing Yoba malware through fake ChatGPT and Claude downloads, pairing legitimate, digitally signed applications with malicious libraries. The campaign uses trusted software and GitHub hosting to make dangerous installers appear credible, ultimately deploying a cryptocurrency miner on compromised …

NCSC Warns AI Could Accelerate Ransomware Attacks on Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The UK’s National Cyber Security Center handled 80 nationally significant cyber incidents during its latest reporting year, warning that artificial intelligence is making attacks faster, cheaper and easier to carry out. Its 2026 Annual Review records 1,831 attack reports, with …

ARES AI Red Team Platform Automates 66 Attack Modules for Active Directory and Cloud Security Testing

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new open-core project called ARES is giving red teams a way to run planned, controlled attack tests against Active Directory and cloud systems. A developer who goes by Mafifrizi released the tool on GitHub. It ships with 66 active …

Hackers Exploit Adobe Commerce Zero-Day to Deploy PSK Agent RAT and Remotely Control Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers are abusing a serious flaw in Adobe Commerce and Magento to install a hidden remote access tool called PSK Agent on online store servers. Once it is running, they can run commands, route traffic through the server, and keep …

Cogent Security Makes the Fortune Cyber 60 for a Second Year, With a Plan to Run Cyber Defense Like a Factory

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

San Francisco, CA, November 3rd, 2026, CyberNewswire Cogent Security, an applied AI cybersecurity company, reported that the PHP2Shell vulnerability exposed significant gaps in enterprise vulnerability response. Disclosed on October 21, PHP2Shell involved two critical flaws that had remained in PHP …

Hackers Hijacked Linux Hosting Server Security Tool cPGuard and Used it as a Backdoor

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An unidentified attacker compromised the update channel for cPGuard, a security tool used on Linux hosting servers, to distribute a malicious script that installed a backdoor and collected sensitive files. OPSSHIELD confirmed that the attacker retrieved some stolen data and …

CrowdStrike and Deloitte Expand AI Security Partnership to Transform How Enterprises Detect Cyber Threats

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CrowdStrike and Deloitte have expanded their cybersecurity partnership to connect business risk decisions with threat detection and response. Announced on November 2, 2026, at Fal.Con Europe in Barcelona, the agreement brings Falcon IQ into Deloitte Spain’s advisory services, linking security …

Attackers Started Scanning in the Wild for Linux Kernel RCE Flaw, Ubuntu Releases Fixes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ubuntu has put early kernel fixes for CVE-2026-98432 in its -proposed pocket for 22.04 LTS and newer releases. The bug is a serious Linux kernel flaw that can let a remote user run commands as root without a login or …