Chinese-speaking Hacking Group Attacking Users With Fake DeepSeek Page to Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Chinese-speaking cybercriminals are using fake software pages that imitate popular artificial intelligence tools to infect Windows users with remote access malware. The campaign turns interest in DeepSeek into a trap, offering what looks like a normal download …

DeadLock Ransomware Stores C2 Configuration on Polygon Blockchain to Resist Takedowns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 DeadLock ransomware has emerged as a financially motivated threat that locks files while threatening to publish stolen information. First observed in July 2025, it had listed more than 80 alleged victims on its leak site by July …

LiteLLM Supply Chain Attack Potentially Exposes 2,500 Companies and 434,000 CI/CD Pipelines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 A LiteLLM compromise has raised concern over how a trusted AI software component can become an entry point into a network. The supply chain incident placed build systems, cloud accounts and source code at risk, although the …

CISA Warns of SonicWall SMA1000 Vulnerabilities Exploited in Attacks to Deploy Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency warned that two SonicWall SMA1000 vulnerabilities, CVE-2026-15409 and CVE-2026-15410, are being exploited in ransomware attacks and have been added to its KEV catalog. CISA has also marked both vulnerabilities as known to be …

Hackers Actively Scanning to Exploit VMware VCenter Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Attackers are scanning VMware vCenter after critical vulnerabilities were disclosed, with DefusedCyber’s honeypots recording increased vCenter fingerprinting activity. The activity includes requests to the /sdk/ endpoint using RetrieveServiceContent and exploration of the /websso single sign-on path. The …

Abyssos RAT Includes RDPWrap-Related Module for Expanded Remote Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 A new remote access trojan called Abyssos lets attackers control infected Windows systems. The malware can steal credentials, collect files, and open remote viewing sessions, while its modular design allows operators to add functions after an infection. …

Multiple ClamAV Vulnerabilities Allow Remote Attacker to Trigger DoS Condition

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Cisco has disclosed multiple high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning operations and cause denial-of-service conditions. The flaws affect the ClamAV parsers used by Cisco Secure Endpoint Connector on Windows, …

Anthropic to Add Invisible Watermarks to All Claude AI Outputs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Anthropic has announced plans to add invisible watermarks and signed metadata to content created by Claude AI. The move follows the company’s decision to sign the European Union AI Act’s Article 50(2) Code of Practice on Transparency …

New Phishing Attack Leverage SSL/TLS Certificates to Target High-value Brands Customers Via Whatsapp

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 A phishing operation is using web certificates and chosen web addresses to target customers of high-value brands through WhatsApp. The activity is designed to make fraudulent pages look normal at a glance, turning a familiar security signal …

OpenAI Expands Daybreak Cyber with GPT-5.6 for Exploit Validation, Pentesting, and Red Teaming

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 OpenAI has expanded its Daybreak program to give vetted security defenders deeper access to frontier AI models, introducing two access tiers—Daybreak Blue and Daybreak Red—alongside a new specialized model, GPT-5.6-Cyber, purpose-built for exploit validation, vulnerability research, and …