Critical BeyondTrust Vulnerability Faces Fresh Exploitation Probes as Hackers Prepare for Mass Scanning

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fresh probes targeting CVE-2026-102764 have raised concerns that attacks against BeyondTrust Remote Support could spread beyond targeted espionage. Previdian reported two probes against decoy appliances in the United States and Europe, both from one source IP address geolocated to Hong …

VOLTA Malware Steals Gmail and Discord Sessions, Then Uses AI to Build Detailed Victim Profiles

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Windows infostealer called VOLTA does more than steal passwords. After it grabs Gmail, Discord and other logins, it asks an AI model to study the loot and write a report on how much the victim is worth. The …

TightVNC Pre-Auth RCE Vulnerability Lets Hackers Execute Code on Windows PCs, PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A TightVNC Viewer vulnerability can let attackers execute code on Windows PCs before a password prompt appears. Research credited to SeongJoon Cho of SSD Labs Korea includes proof-of-concept exploit code targeting TightVNC 2.8.88 x64. The attack uses a malicious VNC …

Hackers Target 61 GitHub Repositories With Command Injection Attacks to Steal CI/CD Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers targeted 61 public GitHub repositories in a coordinated command injection campaign designed to steal data from automated development systems. Radware researchers identified 83 malicious issues, pull requests, and comments posted on September 1, 2026, with evidence that injected commands …

Hackers Drain Bitcoin Hot Wallets on BTCPay Servers, Users Urged to Shut Down Immediately

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

BTCPay Server has issued an urgent warning after receiving reports that attackers were draining Bitcoin hot wallets on its servers. The open-source payment processor told operators to shut down their installations immediately and keep them offline while its team investigates …

Critical Certificate Validation Flaw in LXD and Incus Could Give Hackers Control of Linux Hosts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical certificate validation flaw in LXD and Incus could let remote attackers bypass login checks and take control of clusters and managed virtual machines. The weakness affects the HTTPS management listener, placing exposed Linux systems at risk without requiring …

FBI Confirms North Korean Hackers Responsible for $6 Billion+ Binance Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Federal Bureau of Investigation has confirmed that North Korean hackers stole more than $6 billion in virtual assets from Binance on or about October 29, 2026. The agency tracks the activity as TraderTraitor, linking the cryptocurrency theft to an …

Hacktober – Cyberattack Wave Hits PHP, Node.js, Binance, LiteLLM, Pentagon, and a Few More

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software packages, government records, and grocery chains. Binance investigated billions of dollars in unauthorized transactions, PHP issued emergency fixes, and a malicious LiteLLM release put …

Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cursor has confirmed that malicious Claude Code extension packages were available through its VS Code Extension Marketplace for roughly 11 hours on October 29, 2026. The altered packages targeted Windows and macOS users and attempted to install an SSH backdoor …

Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence threat intelligence snapshot lists 60,471 blocked attempts over 24 hours. These are attack attempts, not confirmed website compromises, and the …