Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have quietly planted malware in 42 real GitHub repositories. The traps fire when a developer opens a project with Claude, Gemini, Cursor, or VS Code. The repositories belong to 11 legitimate owners, including individual developers, students, and one company. …

Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New York, NY, October 27th, 2026, CyberNewswire The root-cause fix will take weeks; protection can’t wait Sweet Security today announced Sweet Safety Net, extending its runtime Virtual Patching protection to every organization affected by HTTP2Shell (CVE-2026-111497). The capability will enable …

Japan’s GMO Internet Urges Customers to Shut Down PCs After Hackers Threaten Ransomware Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Japan’s GMO Internet urged customers of its Onamae.com Desktop Cloud service to disconnect their PCs, shut them down, and unplug connected cables after suspected attackers threatened a ransomware attack. The warning followed a breach involving malicious programs on customer servers …

Microsoft Whistleblower Alleges Foreign Engineer Was Approved to Access U.S. Government Cloud Logs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A claimed Microsoft whistleblower has raised concerns about government cloud security after screenshots appeared to show approval for an engineer, allegedly based in India, to receive logs from a U.S. government cloud environment through Microsoft’s escort process. The documents raise …

Critical UEFI Firmware Flaw Could Expose Millions of Servers to Pre-Boot Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical bug in open-source EDK II firmware lets a remote attacker run code on a machine before the operating system starts. The flaw is tracked as CVE-2026-97631. It sits in the network boot (PXE) driver and received a CVSS …

Discord to Make Discoverable Public Server Messages Searchable on Google

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Discord will make selected messages from Discoverable Servers searchable through Google and other search engines, opening some community discussions to the wider web. Announced on October 27, the change begins on November 16, 2026, with Server Web Pages and discussion …

Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Torrance, United States / California, October 27th, 2026, CyberNewswire AI SPERA, the company behind the cyber threat intelligence and attack surface management platform Criminal IP, has signed a cooperation agreement with the International Criminal Police Organization (INTERPOL) under its Gateway …

Before Your SOC Investigates: What 16K+ Security Teams Already Know 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

What if some of the threats reaching your organization’s environment had already been identified elsewhere, before your security team even started investigating them?  Chances are, some were.  According to ANY.RUN’s research, up to 30% of unique malicious indicators of compromise …

Critical GoAhead TLS Flaws Could Expose Hundreds of Millions of Devices to Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Three new security flaws affect GoAhead, a small web server that device makers build into routers, printers, gateways, and industrial controllers. The software runs in hundreds of millions of devices, including those used by Palo Alto Networks, Siemens, Honeywell, and …

Researchers Exploit OpenAI API Flaw to Extract Hidden GPT-5.6 Reasoning Traces

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers at Xint found an OpenAI API flaw that exposed hidden reasoning in GPT-5.6 models by routing prompts through a conversation-compaction feature. The method, called compaction smuggling, bypassed protections introduced in August 2026. According to Xint, OpenAI confirmed the bug, …