IT Security News: Overnight roundup, 2026-10-22 Summary This period's security developments were dominated by the rapid escalation of emergency patching for foundational web infrastructure alongside a surge in AI-driven attack vectors and governance challenges. Critical vulnerabilities in widespread technology stacks—including…
UK Regulator Pushes Apple To Open Up Contactless Tech
Current Apple offering for third-party contactless payments not working, says CMA, as it proposes lower fees, broader technical access
Naval hack, Muse exposes secrets, Army researching offensive AI hacking
Russian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html Muse exposes secrets when sharing…
Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns
Nearly all organizations now run production workloads in the cloud, but a new SANS survey found most have yet to achieve mature cloud security programs
One Micron Taiwan Union To Stage Strike, As Another Signs Deal
Union at Micron’s Taoyuan plant to stage strike over profit-sharing, after Taichung union calls off action after reaching agreement
Africa cybercrime crackdown nets 1,462 arrests and over $105 million
Police in 21 countries arrested 1,462 suspects and took down 10,909 malicious networks in Operation Serengeti III, an INTERPOL-coordinated cybercrime…
Cable Thieves Disrupt South Yorkshire Networks
Thousands left without internet, telephone service for two days after thieves steal cables, amid ongoing crime ‘spike’
Stolen UpdraftCentral keys used to backdoor WordPress sites
A threat actor breached TeamUpdraft’s website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral…
AI-found bugs are expected to rise, and OpenAI has a five-stage response plan
OpenAI has proposed a five-stage process for handling critical vulnerabilities in widely used software. The process grew out of a two-month response to…
ISOC, AI Agents, And The New Shape Of Security Operations
See how ISOC and AI agents are reshaping the SOC, helping teams investigate faster, reduce alert fatigue, and give human analysts more room for judgment.
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections
Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The…
Hackers Exploit ‘Basic Flaws’ To Attack French Supermarket Fridges
French cyber-security agency finds lack of basic security precautions enabled attacks that destroyed food, caused fires
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
This story is developing and was written before PHP’s scheduled 14:00 UTC release on October 21. Once the release is out, the affected and fixed versions…
Is the ad a scam? How to tell before you click
You can trust a social media platform and still get scammed by an ad running on it
Sites Go Dark As Admins Rush To Patch PHP Flaw
Governments, other organisations take websites offline after researchers publish fix for critical PHP flaw affecting 70 percent of internet
North Korean Hackers Use Post-Quantum Encryption to Conceal Malware in New Cyberespionage Campaign
North Korea-linked Lazarus Group used post-quantum cryptography in a cyberespionage campaign targeting South Korean organizations, concealing malware…
Google Blames Power Outage For Widespread Cloud Disruption
Power issue blamed for outage at London data centre that roiled services for hours across banking, businesses, courts
IT Security News Hourly Summary 2026-10-22 10h : 31 posts
31 posts published in the last hour 07:36US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny 07:35Industrial Defender Unifies Endpoint Intelligence and Network Monitoring for CIP-015, Adds Risk Signal 07:35Meta Ordered to Pay New Mexico $25 Billion…
US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny
DeepSeek has been dealt a huge blow in the US, even as it continues to innovate and keep pace with, or in some cases outperform, rival models from…
Industrial Defender Unifies Endpoint Intelligence and Network Monitoring for CIP-015, Adds Risk Signal
Orlando, Florida, United States, 21st October 2026, CyberNewswire
Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook
The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019.
PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Risky Bulletin: Hacker hijacks 10% of Tor exit nodes
A hacker hijacks more than 10% of Tor’s exit nodes, a second ransomware negotiator has been linked to ShinyHunters, a Chinese crime ring hacked Staples,…
Operation FlashHole: Lazarus breaks security, defies control
Kaspersky researchers analyze Operation FlashHole – a recent complex attack by Lazarus, involving a sophisticated malware set, watering-hole technique and…