IT Security News: Afternoon roundup, 2026-10-28 Summary The PHP2Shell and Brotli-based Node2Shell/HTTP2Shell flaws dominated this window, with attack write-ups, vendor protections and even insurers' concerns about systemic losses all pointing to the same widely deployed components. A second thread is…
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
New York, NY, 27th October 2026, CyberNewswire
Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
Artem Stryzhak gets 70 months in prison for Hive and Nefilim ransomware attacks, while the FBI offers $11 million for his alleged co-conspirator. A…
Scientists overcome a hidden obstacle to more powerful quantum computers
Scientists have discovered a way to operate multiple silicon qubits simultaneously with remarkable accuracy, overcoming a major challenge in scaling up…
27 arrests and 248 potential victims identified in action week against labour exploitation
Europol, the European Labour Authority (ELA), and 34 participating countries today announced the results of an action week targeting human trafficking for…
Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters
Italy ’s Parliament cyberattack highlights hybrid warfare risks and the need for transparency, stronger defenses and accountability. The cyberattack…
Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal…
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.
Work to protect DNS from quantum decryption attacks is speeding up
PLUS: Regional internet registry reform nears; Trustworthy-sounding domains attract scammers
ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150, (Mon, Oct 26th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150,…
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.
CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
Risky Bulletin: Brotli RCE is wrecking what’s left of the internet
While everyone was distracted by PHP, another RCE has been wrecking the internet, Australia’s ABC wipes some staff devices, a third PHP RCE is incoming…
Court strikes down West Virginia law barring disclosure of public officials’ personal data
A federal appellate court panel said West Virginia’s version of Daniel’s Law — meant to shield the personal data of police and other officials — is…
IT Security News Hourly Summary 2026-10-28 22h : 24 posts
24 posts published in the last hour 20:35Linux Flaws Exposed Before Fixes as Root Exploit Goes Public 20:34Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking 20:34FEC Filing System Shut Down After Reported Hacking Attempt Days Before Midterms…
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
Six Linux flaws were made public, including one with a working root exploit and no merged fix
Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale.…
FEC Filing System Shut Down After Reported Hacking Attempt Days Before Midterms
The FEC’s filing system is offline after a reported hacking attempt, delaying campaign finance disclosures days before the 2026 midterm elections.
php2shell: anatomy of two PHP lifecycle bugs
How out-of-memory corruption and stale worker state became two critical PHP RCEs and why the original exploit theory got it wrong.
First ISC2 AI Security Certification Expected for Early 2027
ISC2 is seeking 3000 volunteers to enrol to a pilot exam phase for its upcoming AI security certification
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs,…
Watchdog Urges Police and Fire Service to Improve Cybersecurity
UK police forces and fire and rescue services have been urged to strengthen cybersecurity as rising cyber threats outpace current defenses
AI ‘hacker’ finds 4 severe bugs in popular industrial control software in under 4 hours
One critical, three high-severity EPICS bugs could disrupt research experiments
Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online.