Google Fixes 52 Chrome Security Flaws, Including Four Critical Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a Chrome security update that fixes 52 vulnerabilities, including four critical flaws affecting FileSystem, FileAPI, Skia, and Layout. According to the release notice, the Stable channel is moving to version 156.0.8078.73/.74 for Windows and Mac. At the same …

FBI Seizes Virtualine Bulletproof Hosting Domain Linked to Ransomware and Cybercrime

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI seized virtualine.net, the main website of a bulletproof hosting provider linked to ransomware operators, stolen-data markets, and other cybercrime services. Announced on October 27, 2026, the court-authorized action targeted a business accused of helping criminals keep their websites …

Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Crypto Wallet Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Three malicious Firefox extensions posed as the Phantom, Jupiter, and Bitget crypto wallets to steal recovery phrases and private keys. Whoever holds these secrets controls the wallet and every coin in it. All three listings were live on the Firefox …

Hackers Use Fake Court Notices to Deliver XWorm Malware Through Hidden Windows Scripts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers are sending fake court notices to organizations in Colombia and using them to install XWorm, a remote access tool that gives criminals full control of an infected PC. The emails look like real legal letters. The attached files are …

Claude AI Builds One-Click Chrome and Zero-Click Linux Exploit Chains, Bypasses Android Lock Screen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic’s Frontier Red Team says an unreleased Claude research model wrote working exploit chains for Chrome, Safari, Android, Windows, and Linux. The company shared the details in on research post on October 27, 2026. These were lab tests and not …

Node2Shell Vulnerability Actively Exploited in the Wild, CISA Warns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are already sending live exploit traffic at Node.js servers, so teams should patch right away. CISA added the bug to its Known Exploited Vulnerabilities …

Veeam Patches Critical Backup & Replication Authorization Bypass Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Veeam released security fixes for a critical authorization bypass vulnerability in Veeam Backup & Replication that lets an attacker without login credentials bypass access checks on the CDP Coordinator Service. Tracked as CVE-2026-108142, the flaw carries a CVSS v4.0 score …

Hackers Compromise Camera Management Software to Deploy Malware on Windows Computers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have compromised camera management software to deploy malware on Windows computers, using a legitimate Microsoft program to run malicious code and maintain access. The activity shows how software used to manage surveillance systems can become an entry point into …

Hackers Actively Exploiting New Oracle EBS RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have begun testing a critical Oracle E-Business Suite vulnerability that can let them run commands without logging in. Threat intelligence firm Defused reported exploratory exploit attempts against its decoy systems on October 27, 2026. However, these observations do not …

FortiBleed 2.0 Reveals Thousands of Fortinet VPN and Active Directory Credentials in Exposed Configurations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

FortiBleed 2.0 investigation, published October 27, revealed 40,573 cleartext secret records in exposed FortiGate configurations, including 37,076 local-user passwords and 1,576 Active Directory LDAP bind records linking firewall access, VPN services, and internal identity systems. The researchers examined 1,703 configuration-report …