Hackers Can Abuse Logged-In WordPress Admin Sessions to Secretly Install PHP Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress administrators often keep their dashboard open in the same browser they use for everyday browsing. A new attack chain shows why that habit is risky. Researchers have documented a JavaScript loader that waits for a signed-in administrator to visit …

Hackers Revive BlackLotus Techniques to Bypass Windows Secure Boot and Deploy Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have revived techniques associated with the BlackLotus bootkit to bypass Windows Secure Boot and deploy espionage malware against diplomatic organizations in Central Asia. The new bootkit, named BlackX, appeared in attacks targeting agencies in Tajikistan, Uzbekistan, and Turkmenistan in …

Hackers Use VLC Media Player and VMware Tools to Load Malware Through DLL Side-Loading

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using legitimate VLC Media Player and VMware components to load malware onto Windows systems, hiding harmful code behind familiar software. The activity forms part of three malware campaigns targeting users in Brazil and Portugal through fake legal notices, …

Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are now using public exploit code to break into websites that run PHP, and universities and business sites are among the main targets. The bugs behind this wave are two critical flaws in the PHP engine, tracked as CVE-2026-109618 …

Microsoft Investigation Teams Issue Affecting Users in the United States

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has restored Microsoft Teams service after investigating an issue affecting some users in the United States on October 26, 2026. The company tracked the disruption under incident TM1526111 and said automatic scaling efforts had returned the service to healthy …

Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens. Forever Security discovered the risk after stopping an agent on a real customer’s computer from installing …

OpenBSD 8.0 Released With Major Security Hardening and Post-Quantum SSH Support

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenBSD 8.0 has been released with security fixes across its kernel, network services, firewall, and update tools, alongside experimental post-quantum SSH signature support. Released on October 20, 2026, the project’s 61st release includes OpenSSH 10.6 and LibreSSL 4.4.0, bringing stronger …

Emperador Ransomware Group Claims to Have Stolen 3.9GB of Data from the Maker of Budweiser and Corona

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Emperador ransomware group claims to have stolen 3.9GB of data from AB InBev and demands $1 million in Bitcoin, but the alleged breach remains unverified, with no company confirmation reported. The claim was discovered on October 25, 2026, at …

PHP Releases New Windows Build Security Updates to Fix Critical HTTP2Shell Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1, 8.4.27-1, 8.3.36-1, and 8.2.35-1, and PHP announced them on October 26, 2026. Each build now includes Brotli 1.2.1, …

Researchers Use AI Agents to Breach Anthropic’s Internal Systems in Just 12 Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity startup Cathedral says its AI agents found routes into Anthropic’s internal business systems in less than 12 hours, exposing how fast automated security tools can find and chain flaws across connected services. The work took place through Anthropic’s program …