IT Security News: Overnight roundup, 2026-10-27 Summary The overnight window was dominated by the PHP2Shell fallout: two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, drew explainers and were added to CISA's Known Exploited Vulnerabilities catalog, which signals active exploitation and urgent…
OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
OpenAI’s compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model’s hidden reasoning out in plain…
Some Early iPhone Duo Buyers Report Screen Defects
Some early users of Apple’s first foldable iPhone report defect that causes cracks in inner screen, amid strong initial demand
Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
Running at system boot, it periodically polled the update domain to execute any code served, with full privileges.
Node2Shell RCE in Node.js: Which Apps Are at Risk and What to Patch
Researchers demonstrated Node2Shell RCE in Node.js. See which applications are exposed, affected versions, and the security patches organizations need.
Energy giant ENGIE discloses data breach affecting customers
French energy giant ENGIE, one of the world’s largest power and natural gas providers, confirmed that attackers stole customer data after breaching a…
From industry concern to practical action: the value of working with regulators
How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrity
From federal SOCs to Talos: Ryan Fetterman on practical security research
What does it mean to be “blue collar” for the blue team? Ryan Fetterman discusses the realities of detection engineering, and shares his philosophy on…
What Happens When Old Factory Equipment Meets Modern Cybersecurity
Manufacturing presents a cybersecurity challenge that looks very different from the typical office network. A… What Happens When Old Factory Equipment…
Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers
A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the…
How to Choose the Best Managed IT Service Provider for Businesses
Knowing how to choose the best managed IT service provider for a business can influence… How to Choose the Best Managed IT Service Provider for Businesses…
IT Security News Hourly Summary 2026-10-27 11h : 7 posts
7 posts published in the last hour 09:45Digital sovereignty as a design requirement 09:45Robot eyeballs make open source more valuable 09:44Lincolnshire Plans Self-Driving Bus Trials 09:44When GraphQL earns its place in an enterprise application, and when it doesn’t 09:03CISA confirms…
Digital sovereignty as a design requirement
Digital sovereignty has moved from a policy discussion to a practical enterprise cloud computing problem. For years, most organizations treated public…
Robot eyeballs make open source more valuable
“Bug-free, secure code is now attainable” is a nice idea . It just happens to be wrong. That ambitious statement was one of more than 80 replies to Eric…
Lincolnshire Plans Self-Driving Bus Trials
Driverless buses planned for county, mayor confirms, as Ohmio demonstrates AI-powered route at Lincolnshire Exhibition
When GraphQL earns its place in an enterprise application, and when it doesn’t
The value of GraphQL emerges for a specific type of enterprise screen, one that brings together highly interdependent data across multiple sources. In all…
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security…
Plans Approved For Methane-Powered Data Centre In Kent
Canterbury City Council approves plans for AI data centre to be powered by methane from landfill, in spite of water-usage concerns
IT Security News Hourly Summary 2026-10-27 10h : 10 posts
10 posts published in the last hour 08:4712 File Integrity Monitoring (FIM) Tools: The 2026 Buyer’s Verdict Guide 08:4712 Digital Rights Management (DRM/IRM) Solutions: The 2026 Buyer’s Verdict Guide 08:4612 Secure File Sharing Solutions: The 2026 Buyer’s Verdict Guide 08:46Starlink…
12 File Integrity Monitoring (FIM) Tools: The 2026 Buyer’s Verdict Guide
File integrity monitoring succeeds by what it ignores: PCI DSS mandates the control, but a tool that pages on every patch Tuesday trains the SOC to delete…
12 Digital Rights Management (DRM/IRM) Solutions: The 2026 Buyer’s Verdict Guide
Rights management is three different purchases sharing an acronym enterprise IRM keeping policy attached to internal documents, hard-shell DRM protecting…
12 Secure File Sharing Solutions: The 2026 Buyer’s Verdict Guide
Users share files the easiest way available, so secure file sharing succeeds only when the governed path is the easy path. This verdict guide spans the…
Starlink Services Return To Normal For Ukraine
Operating speeds for Starlink and military Starshield systems resume after SpaceX-imposed restrictions that disrupted drone operations
9 Managed File Transfer (MFT) Solutions: The 2026 Buyer’s Verdict Guide
MFT buying is posture-first now the category’s mass-exploitation years made exposure architecture and patch velocity selection criteria ahead of any…
University of Copenhagen Confirms Data Breach Affecting 525,000 People
The University of Copenhagen has confirmed a data breach affecting about 525,000 individuals after hackers accessed a test environment that contained…