Subscribe to Cyber Security News’s news feed.
Click on “Follow” and decide if you want to get news from Cyber Security News via RSS, as email newsletter, via mobile or on your personal news page.
Subscription to Cyber Security News comes without risk as you can unsubscribe instantly at any time.
You can also filter the feed to your needs via topics and keywords so that you only receive the news from Cyber Security News which you are really interested in. Click on the blue “Filter” button below to get started.
Title: Cyber Security News
Is this your feed? Claim it!
A critical flaw in the Linux kernel may allow an attacker-controlled virtual machine (VM) to breach its isolation boundary and impact the host system. This vulnerability, identified as CVE-2026-99999 and referred to as PwnEscape by researcher Paulos Yibelo, originates from the Linux networking code rather than a specific hypervisor.
Paulos Yibelo demonstrated a tech...
Burger King Japan has confirmed a data breach that exposed about 11.18 million records linked to members of its official app. BK Japan, which operates the chain in Japan, said an outside party gained unauthorized access to the system used to manage app member information.
The company disclosed the incident on October 15, 2026.
A critical flaw in ChatGPT’s GitHub integration has the potential to turn a routine repository review into a secret-theft attack. A report published on October 15, 2026, describes a scenario in which manipulated repository instructions allegedly lead an AI agent to modify a different private repository and trigger GitHub Actions.
According to the researcher Sunil Tr...
Citrix has disclosed four XenServer vulnerabilities, including three that could let a malicious user with elevated rights inside a virtual machine compromise or crash the underlying host.
Citrix published the high-severity bulletin CTX697...
Hackers are using ClickFix tricks to install malware loaders and Python tunnels on Windows systems, creating access that could support ransomware attacks.
A late September incident shows how a user running a command can start an infection chain built around trusted Microsoft programs, hidden code, and encrypted network traffic.