IT Security News: Evening roundup, 2026-10-21 Summary The cybersecurity landscape over this period is heavily defined by the rapid emergence and weaponization of agentic AI alongside widespread foundational software vulnerabilities. Organizations are struggling to govern autonomous AI workflows while threat…
Whitehall shuts the front door on digital ID but leaves the back open
Ministers may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very much alive
INC/Gentlemen Ransomware AI Infrastructure Exposed
SOCRadar researchers uncovered a sophisticated ransomware operation in late September 2026 after discovering an exposed command-and-control server that…
White House Begins 120-Day AI Safety Review Amid Growing Security Concerns
The White House AI task force has begun a 120-day review of cybersecurity, biosecurity and oversight, with potential implications for businesses and…
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,”…
CVE-2026-109618 and CVE-2026-109619: PHP Vulnerable to Unauthenticated RCE Attacks
IntroductionOn October 21, 2026, two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively referred to…
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
Microsoft Adds Dynamic Permissions for AI Agent Security
Microsoft has announced new security controls designed to manage AI agents as internal users, introducing dynamic permissions that adjust based on task…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
Ahold Delhaize Cyberattack Disrupts Online Grocery Services in US, Europe
Ahold Delhaize took IT systems offline after a cyberattack disrupted grocery services in the US and Europe, highlighting business continuity challenges.
TiDB Breach Exposes Flawed Cloud Security Assumptions
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
Japan’s Onamae Desktop Cloud hacked, up to 27,000 servers affected
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739…
From Future Warning to Current Reality: The Acceleration of Exploits Following Claude Mythos
From Future Warning to Current Reality: The Acceleration of Exploits Following Claude Mythos andrew.gertz@t… Tue, 10/20/2026 – 12:25 When we published our…
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine
A Russian satellite made a close approach to a commercial radar satellite linked to Ukraine, raising concerns about surveillance and security in space. A…
Hackers Exploit Open Banking to Test Stolen Bank Logins for Free
Hackers used open-banking services to test stolen bank logins for free. Group-IB uncovered related phishing activity and verification costs for platforms.
Meta Muse exposes users’ personal and business secrets when they share conversations
Meta is suspending the sharing feature while it investigates its privacy.
Oracle Patches 1,209 Security Flaws, Including Six CVSS 10.0 Bugs
Oracle’s October 2026 update fixes 1,209 vulnerabilities, including six CVSS 10.0 flaws. See the affected products and what security teams should patch…
IT Security News Hourly Summary 2026-10-22 00h : 13 posts
13 posts published in the last hour 21:55IT Security News Daily Summary 2026-10-21 21:31Bullhorn sees red after cyberattack knocks recruitment platform offline 21:31Threats Making WAVs – Incident Response to a Cryptomining Attack 21:04Compromised eMudhra intermediate certificates 21:03Scammers Abuse Frame.io Notifications…
IT Security News Daily Summary 2026-10-21
200 posts published today 21:31Bullhorn sees red after cyberattack knocks recruitment platform offline 21:31Threats Making WAVs – Incident Response to a Cryptomining Attack 21:04Compromised eMudhra intermediate certificates 21:03Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials 21:03PHP Vulnerability Fallout After…
Bullhorn sees red after cyberattack knocks recruitment platform offline
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
Threats Making WAVs – Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report…
Compromised eMudhra intermediate certificates
Cisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra.
Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials
Ocean Security found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF links…
PHP Vulnerability Fallout After European Government Websites Go Offline
Critical PHP flaws forced European government websites offline. Here’s what happened, why services were suspended, and what comes next.
Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.