Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Rockstar Games has faced separate intrusions involving proprietary source code, 78.6 million business records, and what researchers describe as a playable GTA VI development build. The incidents span several years, rather than one attack that stole everything together. The reported …

Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic’s Mythos AI has identified a critical vulnerability in Rejetto HTTP File Server that could allow remote attackers to forge administrator sessions and execute arbitrary code. The issue, tracked as CVE-2026-61500, stems from predictable session-signing keys generated through JavaScript’s non-cryptographic …

Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Progress disclosed critical command injection flaw CVE-2026-91140 in DataDirect Autonomous REST Connector AI Model Generator agents, allowing malicious OpenAPI or Swagger documents to execute arbitrary OS commands. The security bulletin, published on October 6, 2026, covers Early Access agent definitions …

OpenAI Sandbox Escape Flaw Allowed Free Access to Paid AI Models Without an API Key

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Oliver Fish says he found an OpenAI sandbox escape that let him request paid AI models without an API key or an account. A screenshot shared online shows OpenAI awarding $300 for a report titled “Unauthenticated Sandbox Escape …

Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity Awareness Month 2026 arrives as online attacks become easier to launch, harder to spot, and more focused on people. Observed every October, the campaign helps individuals and businesses build safer digital habits. This year there are two themes. The …

Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are impersonating ChatGPT, Claude and Gemini with fake advertising products that steal passwords and multifactor authentication codes. Instead of delivering a conventional malware download, the campaign uses convincing websites and live human operators to guide victims through fraudulent sign-in …

Critical WordPress Vulnerabilities Enable XSS, SQL Injection and Data Disclosure Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress released version 7.1.3 on October 6, 2026, addressing vulnerabilities involving cross-site scripting, SQL injection, information disclosure, and other security weaknesses. The project recommends immediate updates, with fixes also available for older affected branches. Only the latest WordPress version remains …

Multiple OpenSSH Vulnerabilities Could Enable Plaintext Recovery, File Write and Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenSSH 10.6, released on October 6, 2026, fixes security flaws that could expose secrets, write files outside intended folders, or enable shell injection under specific conditions. The update covers both client and server tools, making it relevant to administrators and …

32 Unique 0-Days Exploited in Samsung S26, Pixel 10, OpenAI Codex and Other Devices in Pwn2Own 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers reportedly exploited 32 unique zero-day vulnerabilities and earned $388,500 on the opening day of Pwn2Own Ireland 2026. Samsung Galaxy S26, OpenAI Codex, smart home devices and AI services fell to working exploits, but the Google Pixel 10 attempt …

Google Chrome Update Fixes Massive 247 Vulnerabilities, Including 4 Code Execution Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a major Chrome security update on October 6, 2026, fixing 247 vulnerabilities, including four critical memory-safety flaws, across Windows, Mac, and Linux. The patched versions are 155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 for Linux. Although the critical …