IT Security News: Overnight roundup, 2026-10-28 Summary Active exploitation of critical PHP flaws dominated the overnight window, with a suspected North Korean campaign scanning 216 hosts, a further PHP RCE advisory, and Microsoft pushing out-of-band .NET fixes for a Brotli…
UNM Health Cyber Incident Diverts Ambulances, Disrupts Patient Care
A cyber incident forced UNM Health to divert ambulances and pause outpatient care, highlighting why hospital response plans must protect patient services.
Budgets Are Stalling Firewall Deals. Here’s How Partners Can Get Them Moving Again
Every partner knows this conversation. A customer agrees their firewalls need replacing. Their teams are using AI tools, they are connecting more systems,…
PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects
Researchers demonstrated PhantomTac, an attack using hidden magnetic tags to trick robotic touch sensors and make robots drop…
Oracle adds a semantic layer to ground AI agents in the business context
Oracle is expanding its Autonomous AI Lakehouse with a Business Semantic Layer designed to give AI agents a consistent understanding of enterprise data, a…
We shouldn’t be surprised about the PHPocalypse, as the internet is built on sticks and glue
What better way to celebrate Cybersecurity Awareness Month than warning that three-quarters of the web is about to be set on fire?
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram
uCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable…
Microsoft 365 Token-Replay Campaign Hits 79 Orgs
A sophisticated cyberattack campaign has successfully breached Microsoft 365 email accounts across 79 organizations by capturing and replaying…
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine.…
AI Halloween videos: Who’s getting your photos?
Before you turn yourself into a zombie, check who’s getting your photos. Some Halloween AI sites offer little information about who’s behind them.
Ex-Merseyside Police Officer Founds $400m AI Start-Up
Former senior UK police officer wins Silicon Valley backing for start-up valued at nearly $400m to develop AI tools for law enforcement
South Korea Busts AI-Powered Cybercrime Ring
Police in South Korea have dismantled what authorities describe as the country’s first large-scale cybercrime operation powered by generative AI,…
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the…
Kali Linux 2026.3 released with new tools
Offensive Security has released Kali Linux 2026.3, marking the third quarterly update to the popular penetration testing distribution in 2026.
Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept…
Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw
Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release
Rising Borrowing Costs Shouldn’t Delay Your Security: Meet Firewall-as-a-Subscription
Check Point’s Firewall-as-a-Subscription Puts Advanced AI-Era Protection Within Reach of Every Organization Attacks don’t wait for budget approval. But…
Hackers Attempt to Breach U.S. Election Commission Systems, Triggering Major Service Outage
Hackers targeted the U.S. Federal Election Commission’s systems, forcing the agency to shut down online services and disrupting campaign finance filings…
Winners Named at Security Serious Unsung Heroes Awards 2026
The Security Serious Unsung Heroes Awards celebrate the individuals and teams who make the UK a safer, more inclusive place to do business. London, UK –…
Social media addiction affects older adults too
Social media addiction is often discussed as a problem affecting teenagers. Yet older adults can also spend more time on social platforms than they…
PHP2Shell: North Korean campaign targets 216 vulnerable host
Cyfirma researchers have linked a coordinated scanning campaign against 216 vulnerable hosts to a suspected North Korean threat group exploiting two…
Japan’s GMO Internet Urges Customers to Shut Down PCs After Hackers Threaten Ransomware Attack
Japan’s GMO Internet urged customers of its Onamae.com Desktop Cloud service to disconnect their PCs, shut them down, and unplug connected cables after…
UK Biobank back online soon, months after someone tried to sell 500k people’s data on Alibaba
Charity confirms slew of security improvements as it waits for UK.gov’s go-ahead
Hackers Target U.S. Election Commission, Forcing Online System Shutdown Days Before Midterms
Hackers targeting the U.S. Federal Election Commission forced officials to shut down its electronic filing system days before the November 3 midterm…
Infineon Plans €1.1bn Upgrade For Gallium-Nitride Chip Plant
EU Chips Act to partially fund eight-year investment to upgrade Villach, Austria factory that produces energy-efficient power chips