Xpykerz

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys #News Posted On 📆 : Mon, 19 Oct 2026 11:37:08 +0530 An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key to call the provider so team members can use the models without 😍Share And Support😍 ➖@Xpykerz➖

Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers #News Posted On 📆 : Mon, 19 Oct 2026 11:59:44 +0530 A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working against home gateways supplied by three Belgian internet providers, in one case reading the Wi-Fi password off the device 😍Share And Support😍 ➖@Xpykerz➖

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic #News Posted On 📆 : Mon, 19 Oct 2026 15:36:40 +0530 A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. "The tools delivered information-stealing malware and backdoors for macOS and Windows machines," Elastic 😍Share And Support😍 ➖@Xpykerz➖

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software #News Posted On 📆 : Mon, 19 Oct 2026 17:20:00 +0530 In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the agent's prompt. Separately, Email-to-Case and Web-to-Case turn inbound customer messages into case records; it is how airlines and hotels run support intake. Both are standard, documented, as-designed features. Chained together, 😍Share And Support😍 ➖@Xpykerz➖

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories #News Posted On 📆 : Mon, 19 Oct 2026 18:35:45 +0530 The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps 😍Share And Support😍 ➖@Xpykerz➖

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More #News Posted On 📆 : Mon, 19 Oct 2026 19:44:07 +0530 The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done. This week had plenty of that. Trusted connections became a problem. Hardware wasn't as safe as it looked. Old bugs found new victims, and some systems were 😍Share And Support😍 ➖@Xpykerz➖

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor #News Posted On 📆 : Mon, 19 Oct 2026 21:58:47 +0530 Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and activated one of those copies should be treated as compromised, and the 😍Share And Support😍 ➖@Xpykerz➖

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor #News Posted On 📆 : Mon, 19 Oct 2026 23:02:13 +0530 Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell. The vulnerabilities 😍Share And Support😍 ➖@Xpykerz➖

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants #News Posted On 📆 : Sun, 18 Oct 2026 13:53:02 +0530 ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise 😍Share And Support😍 ➖@Xpykerz➖

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants #News Posted On 📆 : Sat, 17 Oct 2026 11:46:46 +0530 Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs 😍Share And Support😍 ➖@Xpykerz➖

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon #News Posted On 📆 : Sat, 17 Oct 2026 16:41:56 +0530 Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of 😍Share And Support😍 ➖@Xpykerz➖

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More #News Posted On 📆 : Fri, 16 Oct 2026 00:19:33 +0530 Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and 😍Share And Support😍 ➖@Xpykerz➖

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory #News Posted On 📆 : Fri, 16 Oct 2026 01:54:36 +0530 A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared 😍Share And Support😍 ➖@Xpykerz➖

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions #News Posted On 📆 : Fri, 16 Oct 2026 10:29:36 +0530 A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a 😍Share And Support😍 ➖@Xpykerz➖

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing #News Posted On 📆 : Fri, 16 Oct 2026 12:23:09 +0530 AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detected the unauthorized access. After internal reviews, the AI companies whose models were being tested 😍Share And Support😍 ➖@Xpykerz➖

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers #News Posted On 📆 : Fri, 16 Oct 2026 12:25:55 +0530 The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a 😍Share And Support😍 ➖@Xpykerz➖

AI Decision Models and Their Impact on AI SOC Platforms #News Posted On 📆 : Fri, 16 Oct 2026 17:00:00 +0530 In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl published cribl-decision, an open LoRA adapter you can run locally. Others, like Laya, are 😍Share And Support😍 ➖@Xpykerz➖

OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract #News Posted On 📆 : Fri, 16 Oct 2026 19:33:04 +0530 OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent test cryptocurrency from a third-party's wallet without authorization to complete a coding task. The incident, the AI company said, involved an internal research model part 😍Share And Support😍 ➖@Xpykerz➖

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing #News Posted On 📆 : Fri, 16 Oct 2026 21:46:44 +0530 Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes. The activity is being tracked by 😍Share And Support😍 ➖@Xpykerz➖

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor #News Posted On 📆 : Fri, 16 Oct 2026 22:13:39 +0530 Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor. Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis 😍Share And Support😍 ➖@Xpykerz➖