IT Security News: Afternoon roundup, 2026-10-13 Summary This period highlights the dual nature of artificial intelligence in cybersecurity, showcasing both cutting-edge defensive tools and emerging risks like self-replicating AI models targeting IoT infrastructure. At the same time, security teams face…
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker…
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity…
U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S.…
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand…
UK Housing Ombudsman Service investigates ‘security incident’
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. […]
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory…
IT Security News Hourly Summary 2026-10-13 21h : 4 posts
4 posts published in the last hour 18:31GitLab Warns of CVSS 10.0 Flaw That Could Allow Server Takeover 18:01Windows 11 KB5127648 & KB5126653 cumulative updates released 18:01LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys 18:00IT Security…
GitLab Warns of CVSS 10.0 Flaw That Could Allow Server Takeover
GitLab has released urgent security updates for a maximum-severity vulnerability that could allow attackers to execute malicious code on affected servers.…
Windows 11 KB5127648 & KB5126653 cumulative updates released
Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs…
LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys
Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI…
IT Security News Hourly Summary 2026-10-13 20h : 11 posts
11 posts published in the last hour 17:31Claude submitted fake murder tip to Philly police during summertime testing 17:31Best NinjaOne Alternatives for Endpoint, Patch, and Vulnerability Management 17:31Adobe Patches 140 Vulnerabilities Across 10 Products 17:31Pluto Security raises $42M as AI…
Claude submitted fake murder tip to Philly police during summertime testing
Anthropic took more than two months to alert cops
Best NinjaOne Alternatives for Endpoint, Patch, and Vulnerability Management
Compare the best NinjaOne Alternatives for endpoint management, patch management, remote monitoring, IT automation and MSP security workflows.
Adobe Patches 140 Vulnerabilities Across 10 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
Pluto Security raises $42M as AI gives enterprise security teams a new headache
Pluto Security has raised $42 million Jump Capital, TLV Partners, Ansa Capital and angel investors.
Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935 , a high-severity authentication bypass by spoofing ( CWE-290 )…
Google Partially Reverses Chrome Bug Bounty Cuts
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.
ICMacOS Malware Evolves to Steal Credentials and Provide Persistent Remote Mac Access
ICMacOS malware has grown from a tool that steals passwords and cryptocurrency wallet data into a remote access trojan that can keep attackers connected…
Anthropic conjures another threat that doesn’t exist yet to stoke fears of AI apocalypse
Self-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get smarter
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was…
TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. […]
IT Security News Hourly Summary 2026-10-13 19h : 29 posts
29 posts published in the last hour 16:32Almost 50 arrested as police target Western Balkan network linked to killings 16:32Threat Intelligence Guide for US SOC Teams and CISOs: How to Choose the Right Solution 16:32West African scammers targeted in joint…
Almost 50 arrested as police target Western Balkan network linked to killings
Nearly 50 suspects have been arrested in an international operation targeting a drug trafficking network with Western Balkan members, linked to killings,…