Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybersecurity researcher says he gained root access to a 2025 Samsung Smart TV and found software built to track far more than the picture on the screen. Known online as log4j, he started after the set kept showing ads …

Hackers Abuse Claude’s Official Website and Google Ads to Spread Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals found a simple way to make a fake download page look trustworthy. Instead of registering a lookalike domain, they placed their lure on claude.ai, the official website of Anthropic, the company behind the Claude AI assistant. The fake page …

Hackers Use Malicious Instagram Ads to Infect iPhones With Spyware Without a Click

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using malicious Instagram advertisements to infect vulnerable iPhones with spyware while users scroll through their feeds. A documented attack used a World Cup advertisement to deliver the P7 variant of DarkSword, exposing sensitive information without requiring the victim …

Palo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has confirmed that a critical Brotli vulnerability affects some PAN-OS firewall deployments and its Prisma Cloud Application Security Transporter Client. Tracked as CVE-2026-111497, the flaw could let an attacker corrupt memory, expose sensitive data, crash a service, …

New Aokigahara Malware Targets ChatGPT, Claude, Codex, and Cursor Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly observed Windows infostealer called Aokigahara is targeting login credentials and session data associated with ChatGPT Desktop, Claude, Codex, and Cursor. The malware searches infected computers for authentication files and application storage, extending familiar password theft into the AI …

Hackers Sell ICMacOS Remote Access Trojan for $699 a Week to Target Mac Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are selling a Mac malware kit that can do far more than steal passwords. The tool, called ICMacOS or Icarus macOS, is offered for $699 a week on Russian-speaking dark web forums. It began as a basic data stealer, …

Claude Code Reportedly Finds 214,856 Deleted Photos and Videos Hidden on Android Phone

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic’s Claude Code reportedly found 214,856 files linked to deleted photos and videos on a Google Pixel, raising privacy concerns about Android photos. The user, known as Cooler (@coolerwave), said files remained in a hidden thumbnail folder even after the …

Apache Camel Fixes Multiple Vulnerabilities Including High-Severity XXE One’s

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache Camel has released fixes for multiple security flaws, including high-severity XML External Entity vulnerabilities that could expose local files or reach internal systems. The issues affect several components, with risks ranging from unsafe XML processing to remote code execution, …

New DarkCore RAT Targets Gmail and WhatsApp Sessions While Hiding Behind Victims’ IP Addresses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly uncovered remote access trojan called DarkCore is being marketed with a browser designed to reuse stolen Gmail, WhatsApp, and other account sessions while routing traffic through victims’ IP addresses. The approach could make unauthorized account access look like …

Hackers Can Abuse Logged-In WordPress Admin Sessions to Secretly Install PHP Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress administrators often keep their dashboard open in the same browser they use for everyday browsing. A new attack chain shows why that habit is risky. Researchers have documented a JavaScript loader that waits for a signed-in administrator to visit …