Multiple Waves of DDoS Attacks Caused This Week’s Outage in North Korea

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple waves of DDoS attacks disrupted North Korea’s public internet services this week, knocking major state websites offline. Kentik’s internet analysis director Doug Madory linked the outages to sudden traffic floods from Vietnam, the Philippines, Venezuela, and other countries. The …

New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers has demonstrated Node2Shell, a working exploit that lets an attacker run code inside a Node.js application through specially crafted, Brotli-compressed data. The research targets CVE-2026-111497, a high-severity memory flaw in the Brotli decoder bundled with Node.js. The Node.js security …

Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are actively exploiting a critical SQL injection flaw in VeloCloud Orchestrator (VCO) that allows logged-in users to gain superuser operator access. Arista Networks disclosed the vulnerability on October 22, 2026, warning that successful attacks could compromise the orchestrator, its …

StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The seller behind StealC has returned with Stadia, a Windows remote access trojan that combines password theft with hidden desktop control. Advertised on October 16, 2026, the malware expands beyond stealing data, allowing criminals to run commands, browse files, manage …

Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Public proof-of-concept code for two critical PHP vulnerabilities is now available, and attackers have tried to use the flaws to deploy botnet malware. Known together as PHP2Shell, CVE-2026-109618 and CVE-2026-109619 both carry a CVSS severity score of 9.2 and can …

Hackers Use New BlackX Bootkit to Bypass Windows Secure Boot on Fully Patched Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new UEFI bootkit called BlackX has been used in cyberespionage attacks against diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan. The malware targets Secure Boot, a feature designed to help stop untrusted software from running before Windows starts. Researchers say …

SBI Notifies Customers Impacted by the Recent Cyber Incident

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

State Bank of India (SBI) has individually notified customers whose information was identified in a recent cyber incident, sending alerts through email and WhatsApp. In its latest advisory on October 23, the bank said customer account balances and funds remain …

Top 10 Best Email Encryption Services in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Email encryption has a usability paradox: the strongest cryptography loses to the recipient who gives up at the portal login and asks for the file “some other way.” The 2026 winners solve for both ends sender-side automation (policies, DLP triggers, …

Top 9 Best Managed File Transfer (MFT) Solutions in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

No category has been breached more publicly this decade than managed file transfer mass-exploitation campaigns against MFT products turned quiet integration plumbing into board-level risk, and the 2023–2024 waves rewrote the buying criteria. In 2026 you evaluate an MFT vendor’s …

Hackers Exploit Critical Citrix NetScaler RCE Flaw to Deploy Web Shells and Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical flaw in Citrix NetScaler ADC and NetScaler Gateway is being used to run commands on exposed appliances, install web shells and deliver malware. Tracked as CVE-2026-88771, the vulnerability stems from improper input validation and can allow an unauthenticated …