Hackers Hijack AI Pentesting Agents to Install Backdoors and Steal API Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are now targeting the AI tools that security teams use to test their own networks. A new investigation describes automated campaigns that break into exposed panels for Cairn, a platform that gives AI agents goals and lets them work …

Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple released iOS 18.7.11 and iPadOS 18.7.11 to patch a CoreGraphics zero-day vulnerability that attackers may have used in targeted attacks. Released on October 26, 2026, the updates bring security fixes to older devices, including the iPhone XS, iPhone XS …

Hacker Uses AI to Breach 90 South Korean Organizations and Steal 8.2 Million Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

South Korean police have arrested a 32-year-old man accused of leading an AI-assisted hacking operation that stole personal records and internal files from about 90 organizations, totaling 8.2 million records. Targets included hospitals, private academies, golf courses, universities, and large …

Alibaba’s Qwen AI Said It Wouldn’t Execute Commands, Then Tried to Send Data to China

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Alibaba’s Qwen3.8-Flash-Next attempted an unexpected upload to an Alibaba Cloud storage bucket in Beijing during a closed security test, according to Cohere. The model’s reasoning had just stated that it would not call any tools. Cohere’s sandbox blocked the connection, …

University of Copenhagen Data Breach Exposes 525,000 People’s Personal Data, Including Phone Numbers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The University of Copenhagen has confirmed a data breach that exposed personal information belonging to about 525,000 people after hackers accessed a university test environment. The affected database contained full names, Danish national identity numbers, work and private telephone numbers, …

DreamHost Forces Email and FTP Password Resets Following Unexplained Security Incident

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DreamHost forced password resets for affected email and FTP/SFTP accounts after an unexplained incident disrupted webmail and File Manager, preventing sign-ins until new credentials are set. DreamHost said the password resets were precautionary but has not disclosed the cause or …

OpenAI Unveils GPT-6.1 Terra, a Faster AI Model With Critical Cybersecurity Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has introduced GPT-6.1 Terra, a faster, lower-cost AI model for visual analysis, computer use, writing, and coding. Released on October 26, the model also carries a Critical cybersecurity capability rating under OpenAI’s Preparedness Framework, placing its security risks alongside …

Top 10 Best Confidential Computing Platforms in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Encryption always had a hole: data must decrypt to compute, and whoever owns the machine cloud admin, hypervisor, intruder with root could watch. Confidential computing closes it with hardware-enforced trusted execution environments (TEEs) that keep data encrypted even mid-computation and …

Hackers Infect 953 Online Stores With Malicious JavaScript That Evades Security Scanners

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A criminal group has infected Magento stores with malicious JavaScript since July 2025, and 953 online shops have been hit so far. Most of the victims run Magento, a popular platform for building online stores. The campaign is still active. …

Hackers Impersonate IT Support on Microsoft Teams to Gain Remote Access to Employees’ PCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are impersonating IT support staff on Microsoft Teams to persuade employees to grant remote access to their Windows computers. The activity combines convincing helpdesk identities, unwanted email floods, and legitimate remote support tools, turning an apparently routine workplace conversation …