IT Security News: Afternoon roundup, 2026-10-14 Summary This period was defined by an unprecedented wave of vulnerability disclosures, led by a record-shattering Microsoft Patch Tuesday and actively exploited critical network flaws. At the same time, global law enforcement agencies achieved…
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
UK Government Announces Sweeping New AI Security Plans
The government is planning tweaks to legislation, new incident response and more to head of AI security threats
Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code
F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers crash worker processes by…
Local AI on NPUs: Building a zero-cloud photo deduplicator with OpenCLIP
Every new laptop today is marketed as an ‘AI PC’ thanks to a built-in Neural Processing Unit (NPU). But beyond chatting with small local LLMs, what…
Anthropic ‘SneakPeek’ Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop’s preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS…
Owner of fashion brands Hobbs and Whistles joins autumn pwned collection
Several IT systems remain offline and orders face delays as TFG London becomes latest retailer to suffer cyberattack
Private Instagram Downloaders Are Parsers, Not Privacy Bypass Tools
Disclosure: This article was produced in partnership with FastDL. Hackread.com reviewed and edited the content before publication. “SaveVid.Net…
IT Security News Hourly Summary 2026-10-14 23h : 8 posts
8 posts published in the last hour 20:31Flock CEO: We haven’t ‘fired’ any police departments as customers 20:31Penetration testing every deployment with AWS Continuum 20:31Microsoft Disrupts Phishing Network Behind 1 Billion Messages: 75,000 Organizations Targeted 20:31Request, Aggregate, Bypass: How Attackers…
Flock CEO: We haven’t ‘fired’ any police departments as customers
Flock CEO Garrett Langley said that the surveillance company has not cancelled contracts of any police department or law enforcement agency, despite…
Penetration testing every deployment with AWS Continuum
Most security tooling that fits into a CI/CD pipeline—static analysis (SAST), software composition analysis (SCA), and dynamic scanners (DAST)—flags…
Microsoft Disrupts Phishing Network Behind 1 Billion Messages: 75,000 Organizations Targeted
Microsoft disrupts a phishing network linked to 1 billion malicious messages targeting 75,000 organizations. Here’s what security teams should know.
Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group’s operations by arresting two suspects, charging 14 individuals, and…
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to…
Scammers know your name, and they’re counting on you to reply
Every reply to a scam text tells cybercriminals your number is active, which makes it worth more on the dark web and a better target for fraud.
IT Security News Hourly Summary 2026-10-14 22h : 14 posts
14 posts published in the last hour 19:31Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages 19:31Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App 19:31Security researchers spent 6 days doing their Chromework, built…
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity,…
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online – Built-in CODE Server, to plant web shells on Nextcloud servers. Three…
Security researchers spent 6 days doing their Chromework, built 1B user exploit
Xbow earned a $250K bug bounty and all the AI model got was a lousy t-shirt
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
Two of 31 newly disclosed flaws in Progress Software’s MarkLogic Server database could let an account given only some management privileges take…
Fifth of CISOs Take Time Off to Avoid Patch Tuesday
Socura report claims CISOs are calling in sick or taking holiday to miss Patch Tuesday
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could…
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating system,…
SAP Patches Critical S/4HANA Flaw: What Security Teams Should Check
SAP’s October update fixes a critical S/4HANA code injection flaw and NetWeaver memory corruption. See affected systems, risks, and patching priorities.