IT Security News: Overnight roundup, 2026-10-22 Summary This period's security developments were dominated by the rapid escalation of emergency patching for foundational web infrastructure alongside a surge in AI-driven attack vectors and governance challenges. Critical vulnerabilities in widespread technology stacks—including…
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that…
Google Cloud Outage in London Disrupts Revolut Banking Services
Google Cloud’s London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud…
Close Identity Gaps in Software Development Before Unleashing AI
Artificial intelligence is complicating security in the software development life cycle, but a Dark Reading roundtable found collaboration, better…
ConnectWise customers hit by supply-chain attack linked to compromised API secret
Hundreds of customers are confirmed impacted, as attackers use a sensitive credential to break into connected Microsoft 365 applications unimpeded.
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by…
IT Security News Hourly Summary 2026-10-22 06h : 11 posts
11 posts published in the last hour 03:32Ransomware groups expand targeting of Palo Alto Networks vulnerability 03:31U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance 03:31There’s only so much code: the rise in vulnerability numbers 03:31DOJ escalates fight for election…
Ransomware groups expand targeting of Palo Alto Networks vulnerability
Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal.
U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
There’s only so much code: the rise in vulnerability numbers
The September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a…
DOJ escalates fight for election supremacy with California raids
The arrests were paired with comments from DOJ and DHS officials, threatening to investigate, arrest or prosecute tens of thousands of California voters…
Srsly Risky Biz: OpenAI’s Kazoo-Grade Spying Incident
Tom Uren and Amberleigh Jack talk about the weird bugging incident at OpenAI. It doesn’t look at all like it was normal state-backed espionage, but there…
Node.js Releases Security Updates to Fix High-Severity TLS, DNS, and Brotli Vulnerabilities
Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting…
Millions of Routers Running Broadcom Wi-Fi Chips Have an Unpatched Flaw That Hands Attackers Root Access Over the Air
A security researcher has demonstrated working exploits against a class of Wi-Fi gateways running Broadcom chips, showing that an attacker within radio…
GoDaddy Revoking 404,607 TLS Certificates Following Compliance Failures
GoDaddy launched a mass revocation of 404,607 SSL/TLS certificates after finding that issued certificates did not match its published certificate…
The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations
Online platforms rely on digital signals to identify suspicious accounts and activity. Antidetect browsers make those signals harder to trust by allowing…
12-Year-Old GitLab Vulnerability Allows Remote Code Execution on Self-Managed Server
GitLab has released urgent security updates for a critical vulnerability that could let attackers run code on self-managed servers without logging in.…
IT Security News Hourly Summary 2026-10-22 05h : 7 posts
7 posts published in the last hour 02:31Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched 02:31Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites 02:31AI security hiring focuses on red-teaming, SOC orchestration and governance…
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the…
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched…
AI security hiring focuses on red-teaming, SOC orchestration and governance
Roles mitigating AI deepfakes and overseeing post-quantum encryption rollouts are on the horizon, according to the SANS Institute.
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine…
Head of AI Security Roles Surge in Large Organizations
A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms remains unsettled
ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: yellow Read the original article: ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146,…
IT Security News Hourly Summary 2026-10-22 04h : 7 posts
7 posts published in the last hour 01:31CYBER BRIEFING | October 20, 2026 01:03DHS Orders DeepSeek Removed from Federal IT Systems Over Security Risks 01:02Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619) 01:02‘Password1’ and a…