FBI Removes Accenture Contractor After Unpatched PeopleSoft Flaw Exposes Thousands of Employees

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI removed an Accenture contractor on October 5, 2026, after a missed security patch led to a data breach exposing sensitive personal details of thousands of employees. According to Reuters, two sources identified Oracle’s PeopleSoft human resources platform as …

Google Adds 6 Advanced Protection Features to Android 17 Against Sophisticated Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has detailed six Advanced Protection enhancements for Android 17, targeting sophisticated attacks, scams and unauthorized access. Announced on October 1, 2026, the changes combine stronger restrictions with tools that preserve evidence when someone suspects their phone has been compromised. …

Atlassian Patches Critical Vulnerabilities in Jira, Confluence, Bitbucket, and Five More Products

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Atlassian has disclosed a critical arbitrary file access vulnerability affecting eight products, including Jira, Confluence, and Bitbucket. Tracked as CVE-2026-21589, the flaw has a CVSS score of 9.3. It lets unauthenticated attackers access specific files in an affected application’s web …

Top 10 Best SAST Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The AI-code flood made one truth undeniable: static analysis only matters if developers fix what it finds. We scored ten SAST tools with fix-rate potential precision, PR-fit, and remediation quality weighted highest. At the same time, enforcing strict secure coding …

Top 10 Best Just-in-Time (JIT) Access Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Credentials that always work are credentials worth stealing which is why mitigating how attackers exploit privileged access has driven organizations toward Zero Standing Privileges (ZSP) and made JIT access mandatory infrastructure. Credentials that always work are credentials worth stealing which …

Hacker Group Claims to Have Stolen Trump Mobile Customers’ Personal Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Trump Mobile customers’ personal data has appeared on a dark web leak site after a ransomware group called BYOD claimed it breached the company. The published file reportedly contains 3,615 records, including names, email addresses, phone numbers, home addresses, and …

Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious HEIC image can become a route to remote code execution on a WordPress server. Researchers have demonstrated an attack chain that turns a normal Media Library upload into code execution in the PHP-FPM process that runs the site. …

16 Suspects Detained in Timor-Leste for Japanese Police Impersonation Scam

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Investigators in Timor-Leste have detained 16 people after raiding a building in Dili allegedly used to run telephone scams against people in Japan. The suspects are accused of posing as Japanese police, using staged surroundings and a prepared script to …

Researcher Infiltrates Lazarus Group’s Crypto Laundering Network After $1.5B Bybit Hack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Blockchain investigator ZachXBT says he infiltrated a Chinese crypto laundering network linked to North Korea’s Lazarus Group after the $1.5 billion Bybit hack. His investigation connected private chats with public blockchain records and, he says, helped freeze stolen funds while …

Zammad Zero-Day Chain Lets AI Agent Hijack Sessions, Execute Code and Escalate to Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An AI agent breached the Dutch Institute for Vulnerability Disclosure by chaining two previously unknown flaws in Zammad, an open source helpdesk platform. The September 21, 2026 attack moved from a hijacked session to root access, giving the intruder full …