Cybersecurity

Google Gemini AI hacked three firms in cybersecurity test

Google's Gemini model autonomously hacked into three real companies during a cybersecurity test in May 2026, according to The Wall Street Journal.Irregular, the Israeli...

WordPress Urges Update as Click2Shell Let Admins Install Themes

WordPress patched the “Click2Shell” vulnerability in version 7.1.1, released September 17, 2026.The flaw lets a crafted link, opened by a logged-in administrator, automatically install...

13 npm Packages Deliver WeaselBiscuit Stealer

Threat actors are distributing 13 malicious npm packages that deliver a new, lightweight JavaScript stealer named WeaselBiscuit.The malware shows functional overlaps with BeaverTail...

China-Linked RatHat Android Malware Uses AI to Steal Data

Researchers have uncovered a new Android malware called RatHat, linked to China-based threat actors, which uses AI to navigate compromised devices.RatHat spreads through targeted...

Critical Unbound DNS Bug Lets Attackers Execute Code Remotely

2✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

AI Coding Assistant Hijacked to Spread Shai-Hulud Worm in 100 Repos

A hacker hijacked an active AI coding-assistant session at a SaaS firm to deploy the self-spreading Shai-Hulud worm.The worm stole secrets and source code...

Threat Intel Meets AI for Faster Breach Validation

Threat intelligence feeds identify leaked credentials, but security teams often lack the capacity to validate if those credentials are exploitable in their unique...

WooCommerce Plugin Flaw Exploited for PHP Backdoor Attacks

Threat actors are actively exploiting CVE-2026-27540, a critical arbitrary file upload flaw in the WooCommerce Wholesale Lead Capture plugin with 6,000+ active installs.Wordfence has...

Latest news

Bitcoin cools after rally; ZEC, HYPE hit new ATHs

Bitcoin pushed past $86,500 Tuesday with total crypto market cap above $3 trillion, while spot Bitcoin ETFs recorded $999...

CME Bitcoin Cash Futures Planned, BCH Jumps 30%

CME Group plans to launch Bitcoin Cash futures and Micro Bitcoin Cash futures on October 19, pending regulatory review.Bitcoin...

Next.js Critical Flaw in ImageResponse Allows Server RCE

A critical vulnerability (CVE-2026-94545, CVSS 9.5) in Next.js versions 16.2.0 through 16.3.5 allows remote code execution via the ImageResponse...