Critical Linux Kernel Flaw Lets Attackers Escape Virtual Machines and Take Control of Hosts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical flaw in the Linux kernel may allow an attacker-controlled virtual machine (VM) to breach its isolation boundary and impact the host system. This vulnerability, identified as CVE-2026-99999 and referred to as PwnEscape by researcher Paulos Yibelo, originates from …

Burger King Japan Confirms Data Breach Exposing 11.18M User Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Burger King Japan has confirmed a data breach that exposed about 11.18 million records linked to members of its official app. BK Japan, which operates the chain in Japan, said an outside party gained unauthorized access to the system used …

Critical ChatGPT GitHub Connector Flaw Could Allow Attackers to Steal Private Repository Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical flaw in ChatGPT’s GitHub integration has the potential to turn a routine repository review into a secret-theft attack. A report published on October 15, 2026, describes a scenario in which manipulated repository instructions allegedly lead an AI agent …

Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix has disclosed four XenServer vulnerabilities, including three that could let a malicious user with elevated rights inside a virtual machine compromise or crash the underlying host. Citrix published the high-severity bulletin CTX697170 on October 13, 2026, covering XenServer 8.4 …

Hackers Use ClickFix and Python Tunnels to Prepare Systems for Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using ClickFix tricks to install malware loaders and Python tunnels on Windows systems, creating access that could support ransomware attacks. A late September incident shows how a user running a command can start an infection chain built around …

Chinese Phishing Network Linked to 1 Billion Messages Targeting 75,000 Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Chinese-run phishing network has been linked to one billion phishing emails targeting 75,000 organizations, according to a report published on October 14, 2026. The operation centers on Iron Man System, a paid phishing platform that lets criminals deploy fake …

Just Viewing an Online Ad Can Infect Your Device With Spyware, Researchers Reveal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Simply viewing an online advertisement can be enough to infect a device with powerful spyware, without the user clicking, downloading a file, or seeing any warning. Citizen Lab researchers documented what they call the first public technical proof of zero-click …

AI Agents Create an Unseen Credential Surface That Exposes API Keys and Cloud Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AI agents can expose API keys and cloud secrets during ordinary work, even when no malware is present. When an agent runs a command, reads a configuration file or fetches a secret to complete a task. Even sensitive data can …

UK Legal Aid Agency Data Breach Exposes Personal Records Dating Back to 1978

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The UK Legal Aid Agency (LAA) has confirmed that its 2025 cyberattack stole personal records dating back to 1978. An updated investigation found approximately 250,000 records from before 2007, widening the known scope of a breach that affected legal aid …

KGB RAT Malware Bypasses Windows Defender to Steal Credentials and Control PCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Windows remote access trojan called KGB RAT gives attackers a way to spy on infected computers, collect credentials and control a victim’s desktop. The malware is sold as a service and advertised with a “fully undetectable” crypter that its …