IT Security News: Afternoon roundup, 2026-10-26 Summary The afternoon was dominated by the fallout from the "PHP2Shell" family of remote code execution bugs and a related Brotli flaw, which pushed Microsoft to ship emergency .NET patches and Cloudflare to add…
Former pentester used ARTEX AI to steal 8.2 million data records
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI…
Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites
Hackers are now using public exploit code to break into websites that run PHP, and universities and business sites are among the main targets. The bugs…
Risks & Rewards: How AI Is Redefining the CISO’s Role
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI’s pros and cons, and ensure those deploying it own the risks.
IT Security News Hourly Summary 2026-10-26 23h : 7 posts
7 posts published in the last hour 21:32Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines 21:32Alibaba’s Qwen AI caught trying to contact server in China 21:32In-the-Wild Attack Abuses AI Agents’ Trust in Markdown 21:31Magento Campaign…
Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines
In an unusual move, the suit — brought under the state’s deceptive trade practices laws — seeks to hold founder and CEO Sam Altman personally liable for…
Alibaba’s Qwen AI caught trying to contact server in China
But there’s not much evidence this is anything more than echoes of unsanitized training data
In-the-Wild Attack Abuses AI Agents’ Trust in Markdown
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and…
Magento Campaign Infects 953 Online Stores Across Five Domains
Sansec tracks a Magento skimmer campaign that infected 953 stores, using five domains, bot filtering and malicious code hidden in CMS blocks. A criminal…
OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing
OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than…
LiteLLM supply chain attack started with an exposed master key
A ‘strong illustration of the risks associated with failing to rotate a potentially exposed key’
IT Security News Hourly Summary 2026-10-26 22h : 7 posts
7 posts published in the last hour 20:32Beyond the Endpoint: How Agent Cards Enable Discovery, Interoperability, and Trust 20:32Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI 20:31SSRF Prevention in C#: Securing…
Beyond the Endpoint: How Agent Cards Enable Discovery, Interoperability, and Trust
Imagine an employee asks an AI assistant: Can I claim this hotel expense? The assistant cannot answer the question itself, but somewhere in the enterprise…
Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful,…
SSRF Prevention in C#: Securing File Imports From User-Supplied URLs
A document portal that accepts a URL saves users the trouble of downloading a file and uploading it again. That’s particularly useful when large, complex,…
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According…
Between Two Nerds: Why frontier lab security will always suck
In this edition of Between Two Nerds Tom Uren and The Grugq talk about security culture. The PHP foundation seems to have had a change of heart about…
DreamHost forces password resets in ongoing “incident”
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. […]
IT Security News Hourly Summary 2026-10-26 21h : 8 posts
8 posts published in the last hour 19:3112,976 Refrigeration Controls Found Exposed Online in 99 Countries 19:04Inside Node2Shell: A Closer Look at CVE-2026-111497 19:04302.ai Data Leak: Private AI Chats Among 17.6 Million Exposed Files 19:04Can You Be Tracked With a…
12,976 Refrigeration Controls Found Exposed Online in 99 Countries
Forescout found 12,976 exposed refrigeration services in 99 countries, warning that attackers could alter temperatures and spoil food, medicines and…
Inside Node2Shell: A Closer Look at CVE-2026-111497
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Inside Node2Shell: A Closer Look at CVE-2026-111497
302.ai Data Leak: Private AI Chats Among 17.6 Million Exposed Files
A 302.ai data leak exposed 17.6 million files, including private AI chats and business documents. Learn what security teams should check and review.
Can You Be Tracked With a VPN? What It Hides and What It Doesn’t
Yes. A VPN hides your IP address and encrypts your traffic, but you can still be tracked through the accounts you sign in to, cookies,…
Hackers Exploit Critical Arista VeloCloud Orchestrator Flaw
Hackers exploit critical Arista VeloCloud flaw CVE-2026-114625. See CISA’s Oct. 26 deadline, affected versions, and what security teams should check.
Silent Agents Are Already on Your Site
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Silent Agents Are Already on Your Site