Skip to content

ADMIN.FOUNDATION

  • Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware

    ·

    cyber security, Cyber Security News, Malware

    A threat actor published a malicious version of the tensorlake npm package on October 8, 2026, embedding a new variant of the self-replicating Shai-Hulud supply-chain worm. The compromised release, tensorlake version 0.5.144, can steal developer secrets, target browser-stored cryptocurrency credentials, and use stolen publishing credentials to spread through connected software supply chains. The incident highlights […]

    The post Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution

    ·

    CVE/vulnerability, cyber security, Cyber Security News, PoC, vulnerability

    A proof-of-concept (PoC) exploit has been released for CVE-2026-102489, a critical vulnerability in Zammad that can expose active users’ session cookies and enable remote code execution (RCE) as the Zammad operating system user. This flaw was reportedly exploited during the September breach of the Dutch Institute for Vulnerability Disclosure (DIVD), alongside a separate local privilege […]

    The post PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Sophos Launches CISO Advantage Across North America and Europe

    ·

    Blogs
    This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Oct. 8, 2026

    – Read the Full Story in GlobalNewswire

    According to the 2026 CISO Report from Cybercrime Magazine in partnership with Sophos, an estimated 35,000 chief information security officers (CISOs) serve 359 million businesses worldwide, a ratio of roughly 10,000 to one. Hiring alone cannot close the gap.

    Sophos’ 2026 MSP Perspectives Report found that on average, 46 percent of customers look to their MSP (managed services provider) to act as their CISO now; with 84 percent of MSPs expecting the demand for CISO services to increase over the next year.

    Organizations without a CISO lack the skillset and resources to assess risk and build a strategy. Organizations with a CISO are increasingly asked to prove control effectiveness and demonstrate progress to boards, regulators, and insurers, even as the role strains under pressure, as average tenure of a CISO runs 18 to 26 months and 75 percent are considering a job change.

    Against this backdrop, Sophos CISO Advantage, an agentic AI-enabled solution that connects security operations to security strategy, was announced this month. “Good security strategy has always required expertise that’s too scarce to scale, so it’s stayed a luxury only the largest enterprises could afford.” said Rob Harrison, senior vice president, product management, Sophos.

    Read the Full Story



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Sophos Launches CISO Advantage Across North America and Europe appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    A critical vulnerability in LMCache allows unauthenticated attackers to execute arbitrary code against reachable multi-process deployments by exploiting unsafe Python pickle deserialization. This flaw is tracked as CVE-2026-105192 and has a CVSS score of 9.8. JFrog published an advisory and a public proof-of-concept exploit on October 7, 2026, stating that no fixed release was available […]

    The post Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • 16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys

    ·

    cyber security, Cyber Security News, Firefox

    16 malicious Firefox extensions that impersonate cryptocurrency wallets to intercept recovery phrases and private keys during wallet imports. Disguised as wallet portals, desktop utilities, and browser tools, the packages attempt to transmit secrets to attacker-controlled Cloudflare Workers. Mozilla had unpublished the extensions by October 5, 2026, according to Socket’s October 7 report. Fifteen packages contain […]

    The post 16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code

    ·

    Press Release, Product Launch
    Toronto, Canada, 8th October 2026, CyberNewswire

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Exposed DarkSword iOS Servers Reveal Crypto Wallet Theft From Compromised iPhones

    ·

    cyber security, Cyber Security News, iOS

    Exposed directories on five servers have revealed an operational DarkSword/Coruna exploitation platform built to compromise iPhones and harvest cryptocurrency wallet secrets. Censys researchers uncovered delivery infrastructure, implants, wallet injection modules, and reseller controls. At the same time, a separate production-server capture contained 11 victim recovery phrases, 179 device loot directories, and 75 control-plane accounts. The […]

    The post Exposed DarkSword iOS Servers Reveal Crypto Wallet Theft From Compromised iPhones appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • wolfSSH Patches 5 Security Vulnerabilities, Including Critical SSH Authentication Bypass

    ·

    CVE/vulnerability, cyber security, Cyber Security News

    wolfSSL has released wolfSSH version 1.6.0, which addresses five security vulnerabilities, including a critical flaw that could allow a man-in-the-middle attacker to bypass SSH host-key authentication under certain deployment conditions. The release, dated October 6, 2026, fixes CVE-2026-16516, a critical ECDSA host-key validation issue affecting wolfSSH up to version 1.5.0. Additionally, it resolves a high-severity […]

    The post wolfSSH Patches 5 Security Vulnerabilities, Including Critical SSH Authentication Bypass appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Gitea Vulnerabilities Allow Attackers to Bypass Authentication and Execute Code

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

    Gitea has released version 28.0.0, addressing 20 vulnerabilities related to authentication bypass, unauthorized workflow execution, server-side request forgery, stored cross-site scripting, and denial of service. Announced on September 30, 2026, this release removes the historical “1.” version prefix. Maintainers have urged administrators to upgrade promptly to mitigate vulnerabilities affecting repository access, automation, and outbound connections. […]

    The post Critical Gitea Vulnerabilities Allow Attackers to Bypass Authentication and Execute Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • FBI, French Police Seize CSAM Site Domains, Suspected Admin Arrested

    ·

    CSAM, Cyber Crime, cybersecurity, FBI, France, Operation Inevitable, USA
    US and French authorities seized two domains and arrested a suspected administrator in a CSAM and non-consensual intimate image abuse case.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 33 34 35 36 37 … 1,217
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence