Cyber Security News

A ransomware operation known as The Gentlemen is using a mix of security tampering, service disruption and file encryption to make recovery harder for affected organizations. Its Windows malware can turn off Microsoft Defender’s real-time protection, add broad exclusions that reduce scanning, stop backup-related services and delete Volume Shadow Copies. These steps weaken defenses and […]

The post Hackers Use Gentlemen Ransomware to Disable Windows Defender and Destroy Backups appeared first on Cyber Security News.

Google has upgraded Chrome’s Enhanced Protection mode with a more powerful Gemini AI model to detect fake antivirus alerts, browser update scams, and other deceptive websites. Announced on October 20, 2026, the changes also introduce suspicious site warnings and protection against ClickFix attacks that trick users into running malicious commands. The update expands Google’s earlier […]

The post Google Upgrades Chrome With Gemini AI to Detect Fake Antivirus and Browser Update Scams appeared first on Cyber Security News.

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files. The malicious release also reached Docker images, putting developer systems, build runners, and AI services at risk. Aikido warned that anyone who installed the affected release should assume credentials […]

The post LiteLLM Compromised – Hackers Injected an Infostealer and RAT in the Latest 1.107.0 PyPI Release appeared first on Cyber Security News.

China-linked hackers are using trusted Windows applications to load hidden backdoors, collect system details, and steal Active Directory credential data. The group, tracked as BRONZE SANDCASTLE, places malicious files beside legitimate software, allowing familiar programs to run attacker-controlled code without changing the original application. The campaign shows how genuine software can become part of an […]

The post China-Linked Hackers Turn Trusted Windows Applications Into Backdoors to Steal Credentials appeared first on Cyber Security News.

PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers. Tracked as CVE-2026-109618 and CVE-2026-109619, and collectively called PHP2Shell, the flaws affect PHP’s handling of memory during web requests. The PHP project rates both vulnerabilities 9.2 out of 10 under CVSS 4.0. Administrators should […]

The post PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers appeared first on Cyber Security News.

Russian cyberespionage group APT28 used the Hookedge backdoor to reach a naval shipbuilder’s network in a NATO member state, steal login material and set up a hidden SSH tunnel. The intrusion lasted at least two months, according to a report by Symantec’s Threat Hunter Team. The report does not name the shipbuilder or the country. […]

The post APT28 Hackers Open Secret SSH Tunnel Into NATO Country’s Naval Shipbuilder Network appeared first on Cyber Security News.

Apache Tomcat has fixed eight security flaws that could let attackers bypass password checks, expose data between users, and disrupt connections under specific conditions. Apache disclosed the vulnerabilities on October 20, 2026, after releasing fixes in Tomcat 11.0.27, 10.1.61, and 9.0.123. The eight issues span different release branches, so not every flaw affects every version. […]

The post Apache Tomcat Fixes 8 Security Flaws That Could Let Hackers Bypass Authentication appeared first on Cyber Security News.

Every breach eventually touches a file a dropped binary, an edited config, a replaced DLL and file integrity monitoring is the control that notices. The 2026 challenge isn’t detection, it’s signal: PCI DSS 4.x demands FIM, but a tool that pages on every patch Tuesday trains the SOC to ignore the one change that matters. […]

The post Top 10 Best File Integrity Monitoring (FIM) Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

The fastest way to leak production data is to copy it somewhere less defended and most organizations do exactly that every sprint, cloning customer records into test, analytics, and now AI-training environments with a fraction of production’s controls. Data masking closes that gap by making the copies worthless to steal while keeping them useful to […]

The post Top 10 Best Data Masking Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Privacy stopped being a policy problem and became a data-engineering problem: you cannot fulfill a deletion request against data you cannot find, and in 2026 more US states, deeper AI-governance rules, and shrinking DSAR deadlines punish teams still running privacy on spreadsheets. We scored ten platforms across discovery depth, DSAR automation, consent orchestration, and mid-market […]

The post Top 10 Best Data Privacy Management Software in 2026 [Ranked & Scored] appeared first on Cyber Security News.

Databases hold what attackers came for, and service accounts hold the widest keys database security decides whether either gets noticed.We scored ten options from enterprise DAM anchors to warehouse-era access layers. Imperva takes 1 for watching-plus-stopping; IBM Guardium and Satori complete the podium. Key Takeaways • 1 overall: Imperva the DAM anchor that blocks policy […]

The post Top 10 Best Database Security & Activity Monitoring Tools in 2026 [Ranked & Scored] appeared first on Cyber Security News.

SafePay ransomware has affected at least 600 separate victims across multiple critical infrastructure sectors, according to a joint government advisory released on October 20, 2026. Active since August 2024, the group has targeted businesses and essential services across North America, South America, Europe, and Australia, becoming one of the most active ransomware threats in 2026. […]

The post SafePay Ransomware Has Affected 600+ Organizations by Exploiting VPNs and Backup Servers appeared first on Cyber Security News.

State Bank of India (SBI) has disclosed a data loss incident after a preliminary review identified 3,897 customer records containing personal information on the dark web. The bank reported the findings in an October 21, 2026, stock exchange filing, while saying investigators still needed to establish the data’s authenticity, completeness, and source. The disclosure confirms […]

The post SBI Confirms Data Breach – 3000+ Customer Records Exposed on Dark Web appeared first on Cyber Security News.

Meta has paused Muse AI’s conversation sharing feature after a privacy flaw exposed confidential business records and personal details through discoverable chat links. The problem affected pages users chose to share, not every private Muse conversation. Anyone who found an affected link could open its contents without signing in. The exposure came from how Muse […]

The post Meta Muse AI Privacy Flaw Exposes Confidential Business Data Through Shared Chat Links appeared first on Cyber Security News.

OpenAI has expanded its ChatGPT Chrome extension so the assistant can read information across open tabs and carry out browser tasks. The update moves ChatGPT beyond answering questions about a single page, adding tools for comparing content, filling forms, sending messages, and organizing tabs. The announcement appeared on October 16 in India. OpenAI says the […]

The post Now ChatGPT Chrome Extension Can See and Analyze the Content in Open Tabs appeared first on Cyber Security News.

TeamUpdraft, the developer behind the UpdraftPlus WordPress backup plugin, has disclosed a website breach that exposed remote management keys. Attackers used those keys to install malicious plugins on connected WordPress sites, turning a trusted management feature into a route for running harmful code. The company identified unauthorized access to teamupdraft.com during October 17–18, 2026. Attackers […]

The post WordPress Backup Plugin Developer Hacked to Inject Malicious Code on Installed Sites appeared first on Cyber Security News.

Federal investigators suspect an executive at a United States consulting firm helped ShinyHunters operate a website used to pressure hacked companies into paying ransom demands. The allegation raises questions about whether trusted ransomware advisers crossed from helping victims into supporting the criminals demanding payment for stolen data. The suspected website operator has not been publicly […]

The post FBI Suspects Cybersecurity Executive Helped ShinyHunters Run Extortion Website appeared first on Cyber Security News.

Criminals have found a way to use open banking as a low-cost checking service for stolen bank and card details. In a campaign described by Group-IB, fraudsters abused a spend-management platform’s account-linking process to check whether credentials worked and whether linked accounts held funds. The platform did not lose money through stolen funds, but it […]

The post Hackers Exploit Open Banking Services to Test Stolen Credentials Without Paying a Cent appeared first on Cyber Security News.

WP2Shell combines two WordPress Core flaws to move from an unauthenticated request to server-side code execution. It can let an attacker create an administrator account and install a plugin-based web shell. Seqrite’s October 16 analysis lists affected releases, but does not establish widespread live exploitation. The report says the flaws were disclosed in July 2026. […]

The post WP2Shell Attack Lets Hackers Create WordPress Admin Accounts and Install Web Shells Without Login appeared first on Cyber Security News.

Hackers are using generative AI to build custom malware, rewrite harmful scripts, and make phishing messages harder to spot. The shift puts pressure on security tools that mainly depend on known file signatures, while helping ransomware operators move faster from their first foothold to data theft and encryption. The danger is not that every AI-generated […]

The post Hackers Use Generative AI to Build Custom Malware and Bypass Traditional Security Detection appeared first on Cyber Security News.