Debian APT Flaw Lets Hackers Hijack Software Updates and Execute Code as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed bug in APT, the package manager behind Debian and Ubuntu, can let a network spy swap a trusted software package for a bad one. The flaw is tracked as CVE-2026-109518 and can end in code running with …

Gorbag Hackers Exploit WinRAR Vulnerability to Steal Credentials From Ukrainian Government Agencies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Russia-aligned hackers tracked as Gorbag are exploiting a WinRAR vulnerability to steal browser credentials, VPN configurations, and sensitive documents from Ukrainian organizations. Active since at least February 2025, the group targets government agencies, law enforcement bodies, justice institutions, local administrations …

The Sandbox Fights Back: Joe Security Launches Adaptive Detonation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Reinach, Switzerland, November 4th, 2026, CyberNewswire AI agents help Joe Sandbox uncover malicious behavior concealed by evasion techniques and unmet execution conditions. Joe Security‘s Adaptive Detonation brings active intervention to malware analysis, helping security teams investigate threats that may conceal …

Scammers Use Microsoft Azure to Host Fake Windows Security Alerts Seen at 80 Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Scammers are abusing Microsoft Azure to host fake Windows security alerts that pressure users into calling fraudulent support numbers. Between March and October 2026, the same fake Microsoft support kit reached users at 80 organizations. New landing pages were still …

Critical SolarWinds Dameware Flaw Could Allow Attackers to Compromise Remote Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SolarWinds has warned about a critical command injection flaw in its Dameware remote support software. It is tracked as CVE-2026-28336 and carries a severity score of 9.9 out of 10. The bug could let an attacker take over a computer …

French Bank Crédit Mutuel Arkéa Confirms Cyberattack Amid Reports of $133 Million Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

French banking group Crédit Mutuel Arkéa has confirmed a cyberattack that enabled fraudulent transactions, following reports linking the institution to cryptocurrency theft exceeding $133 million. The bank says the incident is contained, operations are gradually resuming, and customer assets remain …

Critical Barracuda Security Flaws Could Let Hackers Bypass Authentication and Gain Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Barracuda has disclosed two security vulnerabilities that could allow attackers to bypass authorization controls and gain root access to affected appliances when exploited together. The flaws affect several Barracuda security products, but exploitation requires access to a device’s administrative interface, …

Node.js Schedules High-Severity Security Fixes for 22.x, 24.x, and 26.x Release Lines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Node.js project has scheduled security updates for its 22.x, 24.x, and 26.x release lines on or shortly after Wednesday, November 11, 2026. The announcement gives developers and system administrators time to prepare for patches addressing HIGH-rated vulnerabilities across all …

Hackers Exploit Zyxel GS1900 Zero-Day in the Wild to Hijack Network Switches

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A flaw in Zyxel GS1900 switches was already being used by hackers, and the patch meant to fix it did not work. Researchers at Binarly found that a public exploit hit a different bug than the one Zyxel had patched. …

Microsoft Edge Now Automatically Blocks Malicious Websites Sending Fake Virus Alert Notifications

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Edge now automatically disables notifications from websites that send users to detected scam pages, cutting off a route used to deliver fake virus warnings. The protection connects Microsoft Defender SmartScreen and Scareware blocker detections with notification permissions, helping prevent …