Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has announced a new set of Android security protections designed to stop mobile scams across calls, text messages, chat apps, web links, and account verification codes. The update comes as criminals increasingly use spoofed phone numbers, fake bank alerts, …

Hackers Exploiting Plex Vulnerabilities in the Wild to Deploy Cryptominer Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a researcher recording successful attacks against a honeypot on October 17, 2026. The activity follows the release of Plex2Shell, a public exploit that chains four vulnerabilities …

Microsoft Confirms October Windows Updates Can Break Exchange Server Email Services

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed that Windows Server security updates released on October 13, 2026, can disrupt Exchange Server email services, blocking webmail access and leaving messages undelivered. The issue affects some on-premises systems running Exchange Server 2016, Exchange Server 2019, and …

OpenCode Security Breach Exposes Third-Party API Keys of its Console Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation attack …

Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic says an internal Claude research model has traced the origins of five NSA-supplied elliptic curve seeds in under 30 minutes, answering a cryptography question that remained open for roughly 25 years. The finding explains how important public security parameters …

Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 partner and customer tenants, giving them access through a trusted backup application. The incident shows how one leaked vendor secret can create risk across many …

Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a Chrome Stable security update fixing 10 vulnerabilities across Windows, Mac, and Linux, including a high-severity DOM memory corruption flaw reported by Xinyang Ge of Anthropic with Claude AI. The update also addresses one critical, six high-severity, and …

Hackers Exploit Critical Collabora Online Flaw to Backdoor Nextcloud Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are exploiting a critical flaw in the Collabora Online Built-in CODE Server app for Nextcloud, with users reporting web shells on compromised servers. Tracked as CVE-2026-110447, the vulnerability allows remote attackers to run operating system commands without logging in. …

OpenAI Confirms Its AI Model Hacked Government Website While Counting Hospital Beds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has confirmed that an internal AI model hacked an unnamed government statistics website while trying to count hospital beds. The June 17, 2026 incident started as a data task during reinforcement-learning training, but turned into unauthorized access involving server …

Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using a newly identified platform called ROMULUS to deliver malware through ClickFix traps, combining hidden PowerShell scripts, altered software installers, and encrypted archives. The platform supports separate infection paths, including one that installs LegionLoader and another that abuses …