Cybersecurity · TheHackerNews.com · Oct 9, 2026
The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI's jobs portal and stolen se…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its r…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our experience using Claude to find vulnerabilit…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-1…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vu…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a c…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cybe…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws t…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. "CVE-2026-107406 is a memory o…
Read story →
Cybersecurity · TheHackerNews.com · Oct 9, 2026
The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon. To that end, the agencies seized…
Read story →
Cybersecurity · TheHackerNews.com · Oct 8, 2026
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agencies in 6 other countries said on Octobe…
Read story →