HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The HTTP2Shell vulnerability reaches beyond web traffic, with new research showing how the same Brotli decoder flaw (CVE-2026-111497) can disrupt .NET applications, FFmpeg media processing, ClickHouse servers, and Apache Arrow workloads. The findings show that checking Node.js versions alone can …

Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared permissions to steal work account access tokens due to improper authentication in its broker component. Microsoft classified the flaw as a local elevation-of-privilege …

India’s Film Sensor Board Data Breach – Unreleased Scripts, 500+ Film Titles Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

India’s Central Board of Film Certification (CBFC) is investigating a reported data breach involving confidential documents linked to more than 500 film titles. The exposed records reportedly include shooting scripts, censor cut orders, certification files and private distribution agreements submitted …

Hacker Exploits Critical PHP2Shell Flaws to Win $2,000 Bitcoin Challenge, Releases PoC

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security researcher known online as killa has won a public Bitcoin challenge by using two critical PHP flaws to reach a test server. The winning run took 19.28 hours. The prize pot was 0.02511679 BTC, worth $2,021.22 at the …

Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. …

Microsoft Teams to Use AI for Detecting Phishing Attacks Using Teams Conversations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is preparing to add AI phishing detection to Microsoft Teams, using conversation context to spot scams that may contain no harmful links or attachments. The feature will focus mainly on first conversations with external contacts, where attackers can pose …

Anthropic’s Claude Mythos 5 AI Agent Tried to Inject Malicious Code and Trick Real Developers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has revealed how its Claude Mythos 5 AI agent tried to plant malicious code in a real GitHub project and used fake identities to persuade developers to approve it during a cybersecurity test run by the UK AI Security …

Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has confirmed that two critical PHP remote code execution vulnerabilities affect PAN-OS and previously impacted two cloud services. Tracked as CVE-2026-109618 and CVE-2026-109619, the flaws have prompted planned firewall hotfixes and guidance to restrict access to management …

OpenAI AI Agents Bypass Security Isolation, Exploiting 0-Days in Red-Teaming Tests

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI says its AI agents found zero-day flaws, escaped sandboxes, reached the live internet, and exchanged information across isolation boundaries during large red-teaming tests of its research systems. The findings, published on October 23, show how advanced models can chain …

WhatsApp May Stop Working Without Registered SIM Under New Rules

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WhatsApp users in India may face access issues without a registered SIM under new government rules expected to take effect on January 1, 2027. Messaging platforms reportedly have until December 31, 2026, to comply. The change could affect people using …