Drupal Commerce Core Vulnerability Exploited Against Online Stores
Drupal is urging online store owners to patch a highly critical access bypass vulnerability in the Commerce Core module, warning that it is being exploited…
Latest Cybersecurity News — Page 20
View all →
Beyond deterministic worms: Preparing the SOC for reasoning adversaries
In May 2017, the WannaCry cryptoworm spread across the internet, compromising more than 200,000 computers in at least 100 countries. The National Audit Office called…
Enhancing Kubernetes security with user namespaces
Kubernetes v1.25 introduced alpha support for Linux user namespaces (userns). This feature is touted as an additional isolation layer that improves host security and prevents…
New Android SMS of Death exploit can remotely crash unpatched phones
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed “SMS of Death” and tracked as CVE-2026-58882, that lets attackers…
Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities
Google has announced Gemini 4 Carbon, its latest AI model built to find software flaws, test whether attackers could exploit them, and produce fixes. Unveiled…
Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
Welcome to Kernel Panic, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To…
Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor
Microsoft has warned that malicious Claude Code extensions distributed through Cursor’s marketplace attempted to install a persistent SSH backdoor on developer workstations. The trojanized packages,…
Polymarket Users Lose $2.7 Million in Third-Party Script Hack
Prediction market platform Polymarket briefly halted trading on its international exchange on Thursday, October 29, after users reported unauthorized withdrawals from their wallets. Blockchain analytics…
Fake IT help desk callers got by on little more than names and email addresses
Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into…
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Ravie LakshmananOct 31, 2026Data Security / Cyber Attack American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an…
Austrian doctors to swap emails and phone calls for encrypted messages
Hospitals and clinics in Austria are gearing up to replace emails and phone calls with an end-to-end encrypted instant messaging service that promises to speed…
Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
A Syrian man tied to the Syrian Electronic Army (SEA) has received a 42-month prison sentence in the US, more than 12 years after he…