IT Security News: Evening roundup, 2026-10-14 Summary This news cycle highlights a dual surge in severe infrastructure breaches and aggressive security enforcement, ranging from physical operational attacks on supermarket cooling systems to major multi-vendor patching campaigns. Critical zero-day and maximum-severity…
Physicists discover “astonishing” property of light that defies expectations
Scientists have uncovered a surprising hidden ability of light that allows it to develop spinning, twisting behavior as it travels through empty space,…
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks…
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any…
IT Security News Hourly Summary 2026-10-15 01h : 15 posts
15 posts published in the last hour 22:31Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant 22:31UK Regains Early Access to AI Models After Reported White House Reversal 22:31U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog 22:06IT…
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.
UK Regains Early Access to AI Models After Reported White House Reversal
UK researchers regain access to advanced AI models for safety testing as ministers consider stronger incident reporting and expand government cyber…
U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog. The U.S.…
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Officials disrupted the cybercrime marketplace in April and arrested the alleged 20-year-old operator at that time. Illicit sales reportedly exceeded…
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
Data Governance Is a Security Control, Not a Compliance Checkbox
I’ve spent years fixing broken Glue jobs and Lake Formation permissions as an AWS support engineer, then moved to pre-sales architecture for banking data…
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for…
What Your IP Address Reveals Every Time You Visit a Website
Your IP address can reveal your location, ISP, connection type, and VPN use to websites, ad networks, and trackers before a page even loads.
The best place to run AI agents
Every few weeks, another enterprise leader asks me the same question: Should our AI agents run in the cloud or in our own data center? It sounds like a…
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Both Switchzilla and CISA sound the alarm
AI distrust is GitHub’s opportunity
Developers have never been more inclined to use AI, yet never less inclined to trust its output. In Stack Overflow’s surveys, the proportion of…
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Langley’s comments come amid mounting scrutiny of Flock from privacy advocates, including the ACLU, and members of the public who are concerned about the…
Screencasting in the AI era
During my tenure as InfoWorld’s blogger-in-chief I became fascinated with narrated videos of software in action. Tools existed to do that kind of…
IT Security News Hourly Summary 2026-10-15 00h : 9 posts
9 posts published in the last hour 21:55IT Security News Daily Summary 2026-10-14 21:31Yam Store: The Phishing Network Behind a Billion Messages 21:31UK Government Announces Sweeping New AI Security Plans 21:31Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute…
IT Security News Daily Summary 2026-10-14
200 posts published today 21:31Yam Store: The Phishing Network Behind a Billion Messages 21:31UK Government Announces Sweeping New AI Security Plans 21:31Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code 21:31Local AI on NPUs: Building a zero-cloud…
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
UK Government Announces Sweeping New AI Security Plans
The government is planning tweaks to legislation, new incident response and more to head of AI security threats
Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code
F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers crash worker processes by…
Local AI on NPUs: Building a zero-cloud photo deduplicator with OpenCLIP
Every new laptop today is marketed as an ‘AI PC’ thanks to a built-in Neural Processing Unit (NPU). But beyond chatting with small local LLMs, what…
Anthropic ‘SneakPeek’ Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop’s preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS…