IT Security News: Morning roundup, 2026-10-28 Summary Morning coverage was dominated by the fallout from a critical flaw in Google's Brotli decompression library (CVE-2026-111497). It is now on CISA's exploited-vulnerabilities list, and Node.js, PHP for Windows and .NET all shipped…
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According…
Can You Be Tracked With a VPN? What It Hides and What It Doesn’t
Yes. A VPN hides your IP address and encrypts your traffic, but you can still be tracked through the accounts you sign in to, cookies,…
LiteLLM supply chain attack started with an exposed master key
A ‘strong illustration of the risks associated with failing to rotate a potentially exposed key’
Silent Agents Are Already on Your Site
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Silent Agents Are Already on Your Site
Beyond the Endpoint: How Agent Cards Enable Discovery, Interoperability, and Trust
Imagine an employee asks an AI assistant: Can I claim this hotel expense? The assistant cannot answer the question itself, but somewhere in the enterprise…
Between Two Nerds: Why frontier lab security will always suck
In this edition of Between Two Nerds Tom Uren and The Grugq talk about security culture. The PHP foundation seems to have had a change of heart about…
Magento Campaign Infects 953 Online Stores Across Five Domains
Sansec tracks a Magento skimmer campaign that infected 953 stores, using five domains, bot filtering and malicious code hidden in CMS blocks. A criminal…
Oracle adds native Snowflake service to OCI to ease data integration
Oracle on Tuesday said it has partnered with Snowflake to make the latter’s AI Data Cloud available as a native service on Oracle Cloud Infrastructure…
12,976 Refrigeration Controls Found Exposed Online in 99 Countries
Forescout found 12,976 exposed refrigeration services in 99 countries, warning that attackers could alter temperatures and spoil food, medicines and…
Japan Cyberattacks Trigger Customer Payouts at GMO and Park24
GMO Internet and Park24 are compensating customers after cyberattacks in Japan. GMO faces unauthorized trading losses and data extortion, while Park24…
Long-Hidden Flaws Patched in EPICS Research Facility Control Software
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability…
Inside Node2Shell: A Closer Look at CVE-2026-111497
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Inside Node2Shell: A Closer Look at CVE-2026-111497
SSRF Prevention in C#: Securing File Imports From User-Supplied URLs
A document portal that accepts a URL saves users the trouble of downloading a file and uploading it again. That’s particularly useful when large, complex,…
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust…
IT Security News Hourly Summary 2026-10-28 12h : 44 posts
44 posts published in the last hour 10:46CVE-2026-115418 – SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) 10:45Why Organizations Secure AI Agents with Falcon Guardian 10:45Data breach at Sony-owned internet provider compromises 2.6 million customer…
CVE-2026-115418 – SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)
Bulletin ID: 2026-151-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/26/2026 09:30 AM PDT Description: The AWS Cloud…
Why Organizations Secure AI Agents with Falcon Guardian
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Why Organizations Secure AI Agents with Falcon Guardian
Data breach at Sony-owned internet provider compromises 2.6 million customer records
Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers,…
Microsoft releases emergency .NET security fixes for Google Brotli bug
Redmond joins growing list of software maintainers scrambling to patch compression flaw
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages…
Senators, rights groups say Trump administration breaking law by withholding surveillance court opinion
Section 702 of the Foreign Intelligence Surveillance Act has lapsed, but another decision on its future nears, and the classified opinion could be…
US Election Funding Disclosures Halted Amid ‘Hack Attempt’
US Federal Election Commission reportedly tells campaign compliance groups it disabled disclosure service amid ‘bad actor’ breach efforts
CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder
Overview On October 21, 2026, the Node.js Project published a security advisory for CVE-2026-111497 , an out-of-bounds write in the Brotli decoder bundled…