Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple has issued a fresh round of threat notifications to selected iPhone users in 99 countries, warning that they have been targeted by sophisticated mercenary spyware attacks. Security researcher Costin Raiu reported the new wave on October 30, 2026, saying …

Chainalysis Confirms Cyberattack Using Agentic Techniques That Exposed Customer Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chainalysis has confirmed that an attacker used “offensive agentic techniques” to access its systems and internal tools, exposing customer account details. The blockchain investigation company said the accessed information included user IDs, full names, email addresses, and organization role labels, …

North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in trusted software projects. The group, tracked as DeceptiveDevelopment, used the stolen access to change code in public and private repositories …

When Threats Don’t Wait, Security Can’t Either 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Dhananjay Ganjoo, Managing Director – India & SAARC  The uncomfortable part of an adaptive attack is not how quickly it starts, but  how quickly it can change course.   AI-assisted operations can probe environments, learn from responses, switch techniques and chain …

APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware framework called NetamLoader is being used against a custom version of Windows 10 that only government bodies in Asia use. The campaign looks like a supply-chain operation, and nobody has linked it to a known hacking group …

Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ransomware crews are now giving the hardest parts of a network break-in to AI coding tools. A group linked to Aur0ra ransomware used Cursor AI agents to go from stolen passwords to domain admin access, the highest level of control …

Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Criminals are copying the look of Polymarket, one of the biggest prediction market sites. They use the copies to take cryptocurrency from people who think they are placing real bets. Once a victim deposits money, the site decides every win …

Critical Drupal Commerce Vulnerability Could Let Hackers Buy Products for Just $0.01

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Drupal has warned that hackers are actively exploiting a highly critical security flaw in Commerce Core, putting online stores at risk of financial losses. Tracked as CVE-2026-118539, the vulnerability lets attackers bypass access checks in the module used to sell …

Hackers Exploit Passwordless Telnet to Infect Linux Devices With New Kairos DDoS Botnet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new botnet called Kairos is spreading to Linux devices through a very old mistake: a Telnet service that accepts the root user with no password. Once inside, the attackers install a small Go-based program that turns the device into …

Hackers Use Zero-Click Coruna and DarkSword Exploits to Steal Sensitive Data From iPhones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using two powerful iPhone exploit kits, Coruna and DarkSword, to break into phones and steal private data. The victim only has to open a web page. There is no app to install and no prompt to accept. The …