OpenAI Confirms that Chinese Hackers Used ChatGPT to Launch Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has officially confirmed that a ChatGPT account linked to an individual associated with Chinese law enforcement was used to plan and document large-scale covert cyberattack campaigns. The revelation, published in OpenAI’s February 2026 threat disruption report, marks one of …

Firefox 148 Released With Sanitizer API to Disable XSS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Firefox 148 Released With Sanitizer API Firefox 148 introduces the new standardized Sanitizer API, becoming the first browser to implement it. The update marks a major step forward for web security, giving developers a straightforward and effective way to prevent …

Critical Claude Code Vulnerabilities Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Claude Code Vulnerabilities A critical security flaw in Anthropic’s Claude Code demonstrates how threat actors can exploit repository configuration files to execute malicious code and steal sensitive API keys. The vulnerabilities, tracked as CVE-2025-59536 and CVE-2026-21852, highlight a significant shift …

27 Years old Telnet Vulnerability Enables Attackers to Gain Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

27 Years old Telnet Enables Attackers Gain Root Access A newly confirmed vulnerability in the telnet daemon (telnetd) in GNU Inetutils has revived a 27-year-old security flaw, allowing attackers to gain root access by exploiting improper sanitization of environment variables, …

PoC Released for Windows Vulnerability That Allows Attackers to Cause Unrecoverable BSOD Crashes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been publicly released for CVE-2026-2636, a newly documented vulnerability in Windows’ Common Log File System (CLFS) driver that allows any low-privileged, unprivileged user to instantly crash a target system into an unrecoverable Blue Screen of Death …

Google Disrupts Chinese Hackers Infrastructre which Breached 53 Telecom and Government Entities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A suspected Chinese state-linked hacking group has been caught running one of the most far-reaching cyber espionage operations ever uncovered — silently breaching telecom providers and government bodies across four continents for nearly a decade. Google has now stepped in …

Kali Linux Integrates Claude AI for Penetration Testing via Model Context Protocol

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kali Linux Integrates Claude AI Kali Linux has officially introduced a native AI-assisted penetration testing workflow, enabling security professionals to issue natural-language commands through Anthropic’s Claude AI, which are then translated into live terminal commands on a Kali Linux environment, …

Critical Cisco SD-WAN 0-Day Vulnerability Exploited Since 2023 to Gain Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has disclosed a critical zero-day vulnerability in its Catalyst SD-WAN products that threat actors have exploited since 2023 to bypass authentication and achieve root access. Tracked as CVE-2026-20127, the flaw affects core networking components and prompts urgent patching amid …

Hacker Jailbreaks Claude AI to Write Exploit Code and Steal Government Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Claude AI Exploited A hacker exploited Anthropic’s Claude AI chatbot over a month-long campaign starting in December 2025, using it to identify vulnerabilities, generate exploit code, and exfiltrate sensitive data from Mexican government agencies. Cybersecurity firm Gambit Security uncovered the …

Hackers Can Abuse Cortex XDR Live Terminal Feature for C2 Communications

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed research finding has revealed that Palo Alto Networks’ Cortex XDR Live Terminal feature can be turned into a command-and-control (C2) channel by attackers. Since this feature runs inside a trusted endpoint detection and response (EDR) agent, the …