IT Security News: Afternoon roundup, 2026-10-30 25 articles summarized 19 sources Sources in this roundup Blog 4 article(s) CyberScoop 3 article(s) esecurityplanet 2 article(s) BleepingComputer 1 article(s) Cisco Talos Blog 1 article(s) CySecurity News – Latest Information Security and Hacking…
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox,…
New Prompt Injection Techniques Cover Agent-Planning Attacks
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: New Prompt Injection Techniques Cover Agent-Planning Attacks
Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals
Criminals are copying the look of Polymarket, one of the biggest prediction market sites. They use the copies to take cryptocurrency from people who think…
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, 28th October 2026, CyberNewswire OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery on Latest Hacking…
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages
A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in trusted software…
CVE-2026-119086 – Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel
Bulletin ID: 2026-158-AWS Publication Date: 10/30/2026 10:30 AM PDT Description: FreeRTOS-Kernel is a real-time operating system kernel for…
When Threats Don’t Wait, Security Can’t Either
Dhananjay Ganjoo, Managing Director – India & SAARC The uncomfortable part of an adaptive attack is not how quickly it starts, but how quickly it can…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data
Ransomware crews are now giving the hardest parts of a network break-in to AI coding tools. A group linked to Aur0ra ransomware used Cursor AI agents to…
PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
Guardicore Labs uncovers a Ransomware detection campaign targeting MySQL servers. Attackers use Double Extortion and publish data to pressure victims.
APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments
A new malware framework called NetamLoader is being used against a custom version of Windows 10 that only government bodies in Asia use. The campaign…
IT Security News Hourly Summary 2026-10-30 19h : 21 posts
21 posts published in the last hour 17:34Researchers Uncover 319 Chrome Extensions Hijacking Search Traffic 17:33Apple notifications alert victims in 99 countries about mercenary spyware infections 17:33The Good, the Bad and the Ugly in Cybersecurity – Week 44 (2026) 17:33From…
Researchers Uncover 319 Chrome Extensions Hijacking Search Traffic
Researchers found 319 Chrome extensions linked to 13.4 million installs that redirected searches through operator-controlled servers. Here’s how to check.
Apple notifications alert victims in 99 countries about mercenary spyware infections
The notifications come shortly before the Pall Mall Process is nearing final negotiations on guidelines for the use of commercial hacking tools.
The Good, the Bad and the Ugly in Cybersecurity – Week 44 (2026)
PHP2SHELL’s complexity stalls mass exploitation, attackers chain it with Fragnesia to root firewalls, and a silent Brotli fix leaves Node2Shell exposed.
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos.
Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
Cannabis smuggling from North America and Thailand in Europe has seen a sharp rise, driven by oversupply in legal markets and the adaptability of…
Pentagon Investigates Possible Cyberattacks Behind US Military Freezer Failures
The Pentagon is investigating possible cyberattacks behind freezer failures at six US military bases, raising concerns about operational technology…
The CISO’s evolving role: Protecting and defending in the agentic era
As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity and data guardrails, and…
26,400 Active Cloud and AI Keys Exposed in China’s Gitee Repositories
A Gitee scan found 26,400 working cloud and AI keys, including Alibaba Cloud and DeepSeek credentials. See what APAC security teams should investigate.
Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
CVE-2026-119116 and CVE-2026-119148 – Issues in AWS Nitro Enclaves SDK for C
Bulletin ID: 2026-157-AWS Publication Date: 10/30/2026 09:00 AM PDT Description: We identified CVE-2026-119116, a use-after-free in the SetClient command…
Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)
Overview An origin-validation flaw in BeyondTrust Remote Support lets an unauthenticated attacker write files on the appliance and execute code as the…