Russia-Aligned Hackers Use GuardBreaker Prompt Injection to Disrupt AI Malware Analysis

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Russia-aligned operators are testing a new way to make artificial intelligence overlook malicious code. The technique, called GuardBreaker, hides a safety-sensitive request inside an otherwise ordinary script comment, hoping that an AI code scanner refuses to continue its work. The …

New KATARU IoT Malware Packs Linux Privilege Escalation Exploits and Mirai-Style DDoS Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

KATARU is a newly observed IoT malware strain that can turn poorly secured devices into DDoS attack nodes. The sample was captured after an attacker used repeated Telnet password guesses against a honeypot, then downloaded an ARM payload. It shows …

Hackers Impersonate CEOs in 1 Million Emails to Trick Employees Into $50,000 Payments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A large email fraud campaign used fake CEO messages and invoices to push employees toward payments of nearly $50,000. The operation did not rely on a malicious attachment or software flaw. Instead, it used ordinary email to deliver a scam. …

Windows 11 Security Update KB5124008 Breaks Always-On VPN Connections

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft’s September 2026 security update KB5124008 is knocking some Windows 11 enterprise clients off Always On VPN after the Patch Tuesday package landed on September 8. Administrators who can reproduce the failure say certificate-based tunnels that worked immediately before the …

Conti Ransomware Hacker Sentenced After Group Attacked Over 1,000 Victims Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Ukrainian national has been sentenced to four years in U.S. prison for his role in the Conti ransomware operation, which compromised more than 1,000 victims worldwide and generated at least $150 million in ransom payments. Oleksii Oleksiyovych Lytvynenko, 44, …

New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly uncovered Android threat combines ransomware with spying, creating a trap for people who install apps from untrusted links. Called Mantax Otax, the malware can lock files, watch the screen, intercept verification codes and secretly use a phone’s cameras, …

Ubuntu 24.04.5 LTS Released With Linux 7.0 Kernel and Latest Security Updates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Canonical has officially rolled out Ubuntu 24.04.5 LTS, the fifth maintenance update to the “Noble Numbat” long-term support release, delivering a fresh installation image packed with the latest security patches, bug fixes, and an upgraded hardware enablement stack built around …

cPanel ConfigServer Security & Firewall Vulnerability Allows Remote Attacker to Execute Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in ConfigServer Security & Firewall (CSF), used on cPanel and WHM servers, could allow an unauthenticated remote attacker to execute arbitrary commands through the software’s MESSENGER service. The issue is tracked as CVE-2026-65638 and affects CSF versions …

IDScan Confirms Data Breach Following 153 Million Driver’s Licenses Leaked on the Dark Web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IDScan.net, a Louisiana-based identity verification firm whose technology underpins age and identity checks for retailers, bars, and other Fortune 500 clients, has confirmed a data breach after a criminal marketplace began advertising more than 153 million driver’s licenses from the …

Hackers Deploy New SloppyRAT via ClickFix to Enable Ransomware Lateral Movement

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SloppyRAT is a remote access tool that appears designed to help ransomware operators move deeper into compromised networks. The malware arrives through ClickFix, a social-engineering method that tricks people into running commands presented as a routine check. Rather than immediately …