IT Security News: Morning roundup, 2026-10-22 Summary This roundup highlights a growing trend of threat actors weaponizing artificial intelligence, as seen in AI-assisted attacks across Latin America and Asia alongside malicious AI agent skills designed to subvert code reviews. Alongside…
GitLab warns of new max severity code execution vulnerability
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on…
New Android Malware Replaces Legitimate Banking Apps With Malicious Copies to Bypass Security Checks
A newly identified Android banking Trojan called Hirudo takes an unusual route to financial fraud: it tries to remove a victim’s genuine banking app and…
Woman faces years in prison over a Cash App account she says she never opened
A woman faces up to six years in prison over a Cash App account she says someone opened using her stolen identity.
Keeping AI Agents on Task: Check Point Advances AI Agent Safety with NVIDIA OpenShell Reference Architecture
How Check Point and NVIDIA collaborate an agent governance, control over how they run, and in-silicon security built into the AI infrastructure Agents can…
AI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackers
Consider this the wake-up call
Malicious AI Tools Explained: What Security Teams Should Watch For
Learn how attackers misuse AI for phishing, malicious code, and intrusions, plus practical steps security teams can take to limit access and contain…
Fingerprint uses AI coding tools to automate fraud detection setup
Fingerprint has announced Agentic Installation, the AI-powered onboarding path for companies to deploy device intelligence to their websites or apps in…
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
US Government Orders DeepSeek Out of Federal Civilian Systems
PHP prepares emergency patches for two critical RCE flaws, while older, unsupported versions could remain exposed without vendor fixes. The U.S.…
CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage
Chrome Adds Suspicious Site Warnings and ClickFix Protection
Google Chrome introduces suspicious-site warnings and AI-powered ClickFix detection, with both new defenses tied to Enhanced Protection mode.
SentinelOne brings runtime threat detection and response to AI agents
SentinelOne has unveiled Singularity Agentic Detection and Response (ADR), a new offering that discovers AI agents, enforces what agents are allowed to…
Signal bug could let someone keep listening after you hang up
A flaw in Signal’s calling library could let another participant keep hearing you after you hang up. Update your app to get the latest fixes.
XTIUM expands XTAI with centralized AI governance and cost management
XTIUM has released the latest version of XTAI (XTIUM Trusted AI), expanding its AI Service Platform with XTAI Orchestrator. The new governance platform…
IT Security News Hourly Summary 2026-10-22 14h : 30 posts
30 posts published in the last hour 11:35Samsung and Vizio Smart TVs Continue Sending Viewing Data Even After Users Opt Out 11:34Researchers Identify Spyware Attacks Targeting Two Serbian Opposition Figures 11:34Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants…
Samsung and Vizio Smart TVs Continue Sending Viewing Data Even After Users Opt Out
Samsung and Vizio smart TVs continued sending traffic consistent with automatic content recognition (ACR) even after researchers disabled the feature.…
Researchers Identify Spyware Attacks Targeting Two Serbian Opposition Figures
There have been allegations of spyware targeting two prominent Serbian figures, raising new concerns about digital surveillance in advance of the…
Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants
Microsoft said it has observed threat actor activity in multiple ConnectWise customer environments, with the attackers leveraging the ARTEX agentic AI…
Attackers abuse legitimate platforms to deliver phishing emails that pass authentication checks
A Dell order confirmation lands in your inbox and it looks pretty legitimate: it comes from Dell’s order domain, passes DKIM and DMARC checks, uses Dell’s…
Nvidia picks OpenShell to tame AI gents
Give your agents freedom to do useful work by locking them down
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer’s Windows or WSL machine when the developer…
Spain, Denmark and the Netherlands win Europol 2026 Excellence Awards in Innovation
At the European Police Chiefs Convention on 29 September 2026, Europol announced the winners of its 2026 Excellence Awards in Innovation. Law enforcement…
Fortinet Releases Critical Security Updates for FortiOS, FortiManager, and FortiAnalyzer
Fortinet has announced coordinated security hardening updates for FortiOS, FortiManager, and FortiAnalyzer, scheduled for October 22, 2026. These updates…
Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy
Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks – and both are evolving their tactics in an attempt to outdo one another