Hackers Actively Exploiting Magento and Adobe Commerce 0-Day RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered zero-day vulnerability in Magento Open Source and Adobe Commerce is being actively exploited by attackers to seize full control of online stores, and there is still no official patch available. Dutch e-commerce security firm Sansec disclosed the …

Microsoft Teams Desktop Client Fails to Load on Windows System – Microsoft Investigating

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is investigating an ongoing issue causing some Windows users to face significant delays or outright failures when launching the Microsoft Teams desktop client. The company acknowledged the problem, tracked internally as TM1466820, and confirmed it remains unresolved as engineers …

AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A human attacker armed with frontier artificial intelligence models breached an enterprise network and seized root credentials in under 10 hours, a timeline that would normally take human red teams roughly two weeks to complete, according to a new incident …

Microsoft Unveils Project Zenith Windows PCs That Can Run 30B+ AI Models Locally

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has introduced Project Zenith, a new developer-optimized Windows 11 experience built for a class of high-memory PCs capable of running large AI models directly on-device, marking a significant shift away from cloud-dependent AI development workflows. Announced as a follow-up …

Hackers Use Popular Messaging Services to Control New Windows Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A financially motivated threat group known as Toy Ghouls has begun using two custom Windows backdoors that communicate through popular messaging and broker services. The tools give attackers a discreet way to run commands, collect system details, and maintain control …

NodeStealer Can Now Record Everything Victims Type and Steal Their Screenshots

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

NodeStealer has returned with a more invasive toolkit. The Python-based information stealer can now record keystrokes, watch copied text, and capture victims’ screens, turning an account-stealing infection into continuous surveillance. The change raises the stakes for people whose browsers hold …

Hackers Use Invisible Unicode Characters to Evade Phishing Detection in Millions of Emails

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers are using invisible Unicode characters to make phishing emails appear harmless while disrupting the security systems built to spot suspicious language. The campaign pushed finance-themed messages at massive scale, showing how a tiny change inside a word can weaken …

Hackers Turn Claude, Qwen and DeepSeek Into AI Agents for Real-World Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have turned commercial AI models into working parts of a cyberattack operation. The campaign paired AI-directed tasking with familiar methods such as vulnerable public-facing servers, stolen credentials, webshells, and custom remote-access malware. The operation reached Taiwan’s Kuomintang Party History …

Microsoft Confirms New Exchange Online Outage Delaying Emails from External Domains

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed a fresh Exchange Online incident, tracked as EX1467029, causing delays for users sending and receiving email messages from external domains. The company first acknowledged the disruption on September 4, 2026, flagging it as a service degradation issue …

Plex Urges Users to Update Media Server Immediately to Fix Multiple Security Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Plex has issued an urgent security update for Plex Media Server and Plex Desktop, asking users to install the latest releases as soon as possible. The update addresses multiple undisclosed security issues affecting Plex Media Server versions 1.43.2 and earlier, …