Hackers Abuse 20,000 Cloudflare Pages Domains to Push Fake Microsoft Security Alerts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have abused more than 20,000 Cloudflare Pages domains over six months to spread fake Microsoft security alerts and steer users toward scam call centers. The campaign uses Help Traffic Distribution System, or Help TDS, to route visitors from compromised …

Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybercrime campaign used hundreds of AI agents to target internet-facing PaperCut NG and MF print-management servers, compromising at least 440 instances linked to 395 organizations in 48 countries, according to GreyNoise. The operation paired OpenAI’s Codex coding-agent harness with …

iOS 27.0.1 Untethered Jailbreak Demonstrated on iPhone 18 Pro

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers from the cybersecurity firm Calif demonstrated a working untethered jailbreak for iOS 27.0.1 on Apple’s newest iPhone 18 Pro. The live demo took place at Hexacon 2026, the offensive security conference organized by Synacktiv in Paris on October …

Chinese Phishing Network Uses 17,000 Domains to Target Japanese Banks and Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A large Chinese-language phishing operation has used around 17,000 internet domains to impersonate banks, payment services, retailers and other well-known brands, with Japan as its main target. The operation relies on three related phishing kits—CoGUI, CoAceV and CoFish_Ws—to send deceptive …

New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Aoki, also known as Aokigahara, is a data-stealing malware that has added credentials for AI tools to its growing list of targets. Recent versions seek local files and session data linked to ChatGPT, Claude, OpenAI Codex, Cursor, Codeium and Gemini. …

Google Automatically Adds Your Phone Number to Every Google Account on Your Android Phone

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google automatically verifies phone numbers on Android devices and adds them to every Google account signed in on the Phone. The setting is enabled by default, raising privacy concerns for users who keep personal, work, and secondary accounts separate. Google’s …

CERT-In Warns Hackers Using AI Agents to Launch Cyberattacks in Just Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

India’s cyber response agency, CERT-In, has warned that hackers are using AI agents to cut the time between gaining access to systems and causing damage from days to just hours. Its critical advisory, issued on October 15, 2026, describes attacks …

Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybercrime campaign has compromised at least 143 devices in 34 countries by exploiting flaws in D-Link, Ubiquiti and SAP products. The attackers installed Pawns.app proxy software on victim devices, turning their internet connections into residential proxy nodes. That lets …

MITRE ATT&CK v20 Added 9 New Attack Techniques Covering AI Exploits, MFA Bypass, and CAPTCHA Evasion

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

MITRE released ATT&CK v20 on October 13, adding nine Enterprise techniques that describe how attackers may target AI systems, steal application-specific passwords to bypass multi-factor authentication (MFA), and get around CAPTCHA checks. The update also expands coverage for industrial control …

Top 10 Best Data Classification Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Every downstream control DLP, encryption, retention, access inherits its accuracy from classification, which makes this the quiet foundation of data security. We scored the leading options with enforcement wiring weighted highest, and counted honestly: nine distinct vendors from ten sheet …