Microsoft Whistleblower Alleges Foreign Engineer Was Approved to Access U.S. Government Cloud Logs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A claimed Microsoft whistleblower has raised concerns about government cloud security after screenshots appeared to show approval for an engineer, allegedly based in India, to receive logs from a U.S. government cloud environment through Microsoft’s escort process. The documents raise …

Critical UEFI Firmware Flaw Could Expose Millions of Servers to Pre-Boot Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical bug in open-source EDK II firmware lets a remote attacker run code on a machine before the operating system starts. The flaw is tracked as CVE-2026-97631. It sits in the network boot (PXE) driver and received a CVSS …

Discord to Make Discoverable Public Server Messages Searchable on Google

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Discord will make selected messages from Discoverable Servers searchable through Google and other search engines, opening some community discussions to the wider web. Announced on October 27, the change begins on November 16, 2026, with Server Web Pages and discussion …

Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Torrance, United States / California, October 27th, 2026, CyberNewswire AI SPERA, the company behind the cyber threat intelligence and attack surface management platform Criminal IP, has signed a cooperation agreement with the International Criminal Police Organization (INTERPOL) under its Gateway …

Before Your SOC Investigates: What 16K+ Security Teams Already Know 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

What if some of the threats reaching your organization’s environment had already been identified elsewhere, before your security team even started investigating them?  Chances are, some were.  According to ANY.RUN’s research, up to 30% of unique malicious indicators of compromise …

Critical GoAhead TLS Flaws Could Expose Hundreds of Millions of Devices to Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Three new security flaws affect GoAhead, a small web server that device makers build into routers, printers, gateways, and industrial controllers. The software runs in hundreds of millions of devices, including those used by Palo Alto Networks, Siemens, Honeywell, and …

Researchers Exploit OpenAI API Flaw to Extract Hidden GPT-5.6 Reasoning Traces

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers at Xint found an OpenAI API flaw that exposed hidden reasoning in GPT-5.6 models by routing prompts through a conversation-compaction feature. The method, called compaction smuggling, bypassed protections introduced in August 2026. According to Xint, OpenAI confirmed the bug, …

CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) offers two free tools to help organizations find security misconfigurations in Microsoft 365 and Google Workspace. ScubaGear and ScubaGoggles compare cloud settings against recommended security baselines, giving administrators a clearer view of …

Israeli Ad Tech Firm Accused on Using Online Ads to Track Starlink Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Israeli advertising company Discover-Tech is accused of using online ads to track people connected to SpaceX’s Starlink satellite internet service. Reuters reported on October 27 that six people familiar with the research said TrendAI researchers linked the company to unusually …

Hackers Use Fake FedEx Invoices to Deploy Sirius Backdoor and Evade Windows Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are sending fake FedEx tax invoices to trick users into installing a stealthy backdoor on Windows. The malware, called Sirius Backdoor, hides inside a blank PDF and loads its main code directly into memory, which leaves very few traces …