Thursday, October 8, 2026
Follow on LinkedIn

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets

Tushar Subhra Dutta -
A malicious release of the Tensorlake npm package has been published with a Shai-Hulud worm variant that can steal developer secrets and attempt to...

Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts

Guru Baran -
Scanning and remote code execution attempts targeting video surveillance devices in Ukraine rose between September 21 and October 1, 2026. Most activity focused on CVE-2021-36260,...

Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases

Tushar Subhra Dutta -
Hackers have used 16 malicious Firefox extensions to target cryptocurrency users with fake wallet screens that capture recovery phrases and private keys. The add-ons...

Microsoft Teams Adds Synthetic Audio and Video Detection to Fight Deepfake Meeting Attacks

Guru Baran -
Microsoft Teams is preparing to support synthetic audio and video detection to help organizations spot deepfake attacks. The feature will connect Teams with certified...

DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases

Tushar Subhra Dutta -
DarkSword operators are using Coruna malware to steal cryptocurrency wallet recovery phrases from iPhones, turning browser exploits into a ready-to-use theft service. Exposed server...

Critical Sungrow Inverter Vulnerability Lets Attackers Access Solar Plants Without Passwords

Guru Baran -
A critical Sungrow inverter vulnerability could have allowed attackers to log in to the company’s iSolarCloud management platform without a valid password. The flaw affected...

Hackers Use Negative Hotel Reviews to Spread Malware That Hides C2 on Blockchain

Tushar Subhra Dutta -
Hackers are targeting hotels with fake guest complaints and negative reviews that lead staff to malware disguised as photographic evidence. The campaign delivers EtherRAT...

PoC Released for Critical LMCache Flaw Enabling Unauthenticated Remote Code Execution

Abinaya -
A proof-of-concept (PoC) exploit has been released for a critical vulnerability in LMCache that can allow unauthenticated remote code execution on exposed distributed deployments. Tracked...

PoC Released for Zammad Session Leak Flaw Enabling Remote Code Execution

Abinaya -
A public PoC targets a critical Zammad flaw, CVE-2026-102489, allowing unauthenticated remote users to steal active session cookies and potentially execute code on vulnerable servers. The...
Load more
0-Hour Cyber Security Alerts!
Get the latest Cyber security News sent directly to your inbox.

Cyber Attack news

Expert Talks

Load more

Cyber Security Guide

Load more

Follow us

Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis.

Cybersecurity News

Resources

Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them

Cyber Security
Cybersecurity Awareness Month 2026 arrives as online attacks become...

Top 10 Malware Threats of the Week – AsyncRAT, Remcos, and Xworm Lead the Surge

Cyber Security Guide
Global malware activity climbed sharply over the past week,...

Ransomware Gangs Attack Palo Alto, Fortinet, Citrix, and Check Point VPNs to Target Corporate Networks

Cyber Security Guide
A coordinated wave of exploitation targeting edge VPN and...

Cyber Tools

CAIRN – A New Tool to Track AI Malware That Operates Without Human Control

Cyber Security
Cisco Talos has released CAIRN, an open-source toolkit designed...

Cybermes – AI Red Teaming Agent for Automated Penetration Testing

Cyber Security News
A new open-source project called Cybermes has entered the...

Blacklight Toolkit Finds Codex, Claude Code, and Cursor Artifacts Exposing Tokens and Session Data

AI
SpecterOps has released Blacklight, an open-source toolkit that identifies...

© Copyright 2026 - Cyber Security News