ClickFix Fake CAPTCHA Attack Executes Malware Hidden Inside Browser Cache

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new ClickFix campaign is turning a web safety check into a route for malware. Visitors to compromised websites see a fake CAPTCHA or repair message and are told to open the Windows Run dialog, paste copied text, and press …

RemoveMacAI Free Up 12GB of Data by Removing Apple Intelligence Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

RemoveMacAI, an open-source tool on GitHub, lets Mac users disable Apple Intelligence, remove its downloaded models, and block future downloads. The utility can recover roughly 10GB to 12GB of storage, depending on which models are present. Its changes are reversible, …

GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GlassWorm is turning developer tools into malware delivery channels, this time through extensions advertised as attractive VS Code themes. The investigated cluster spans Visual Studio Marketplace and Open VSX, showing how appearance changes can provide cover for code that runs …

Apple Tightens macOS Full Disk Access as AI Agents Become More Powerful

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple plans to add stronger controls to Full Disk Access in macOS, warning that the powerful permission can expose a user’s most private data as AI agents become more capable. The company said the change will require users to take …

Google Pauses Open-Source Bug Bounty Program After Flood of Invalid AI-Generated Reports

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has temporarily stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program(OSS VRP) following a major increase in automated submissions that were mostly invalid. The change took effect on October 1, 2026, and Google said …

Hackers Abuse Legitimate ScreenConnect Tool to Gain Remote Access Through Phishing

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using a legitimate ScreenConnect client to turn a payment notification into a route for remote access. Instead of delivering custom malware, the phishing attempt directs recipients to software already designed to let someone else connect to their computer. …

Windows 11 KB5124010 Update Crashes Productivity Apps, Games and Media Players

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed a Windows 11 audio decoding bug that can cause some productivity apps, games, and media players to close without warning. The issue follows installation of KB5124010, released on September 22, 2026, or later Windows updates, and affects …

Denmark Data Breach Exposes Personal Records of 8.8 Million People

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Denmark has confirmed a major data breach involving its Central Population Register, known as CPR, after unauthorized parties accessed personal records belonging to about 8.8 million people. The exposed information includes names, addresses, and CPR numbers, according to an official …

Google’s AI Hacker Finds 500+ XSS Flaws and Builds Working Exploit Chains

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has revealed an internal AI security agent that found more than 500 verified cross-site scripting, or XSS, flaws across its own web applications. The system, called PageBreak, searches for weaknesses that could let an attacker run unwanted code in …

CISA Adds Fortinet FortiMail 0-day Vulnerability to KEV Following Active Exploitation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Fortinet FortiMail vulnerability (CVE-2026-104286) , to its Known Exploited Vulnerabilities catalog after evidence of active exploitation. The flaw affects Fortinet FortiMail, an email-security product commonly deployed at the network …