IT Security News: Overnight roundup, 2026-10-29 Summary The most important story in this window was the PHP2Shell campaign, in which attackers chained web-layer flaws with a Linux kernel exploit to root 25 servers, including government-affiliated systems. It sits alongside follow-up…
Virtualine Domain Seized, but Allegedly Abusive Website Remains Online
The FBI seized Virtualine, a hosting service accused of supporting criminal sites, ignoring abuse reports and helping launder money from illegal…
Admin dropped the F-bomb in a password to show hackers who was really 1337
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
Ex-Merseyside Police Officer Founds $400m AI Start-Up
Former senior UK police officer wins Silicon Valley backing for start-up valued at nearly $400m to develop AI tools for law enforcement
HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js
The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.…
Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept…
ENGIE Data Breach Exposes Customer Details and Energy Contracts
ENGIE says attackers accessed French customers’ contact and energy contract data through a partner sales tool. Banking data was not affected. French…
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine.…
12 Threat Intelligence Platforms (TIP): The 2026 Buyer’s Verdict Guide
A TIP earns its keep in decisions changed per month blocks pushed, hunts launched, patches reprioritized and 2026’s field spans premium all-source graphs,…
HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.
Social media addiction affects older adults too
Social media addiction is often discussed as a problem affecting teenagers. Yet older adults can also spend more time on social platforms than they…
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization’s…
CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom…
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data
11 User & Entity Behavior Analytics (UEBA) Tools: The 2026 Buyer’s Verdict Guide
UEBA earns its keep on attacks that look like logins stolen credentials used plausibly, insiders drifting toward exits and fails on unexplainable scores…
Meta Postpones New Commercial Terms After ‘Theft’ Complaints
Meta indefinitely suspends new commercial terms after publishers, digital advertisers complained over use of content for AI training
12 Cyber Threat Intelligence (CTI) Feeds & Services: The 2026 Buyer’s Verdict Guide
CTI services answer different sentences who targets us, what’s leaked about us, which alerts are noise, whose infrastructure is that and no provider owns…
Canada’s Terrestar Joins Shared Satellite Venture
Montreal-based Terrestar to work with Equatys venture founded by Viasat and Space42 to build shared direct-to-device satellite infrastructure
Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses
An alleged leak from cryptocurrency swap service Wagyu.xyz contains 4,580 completed cross-chain swaps linking incoming transaction hashes, Monero…
IT Security News Hourly Summary 2026-10-29 10h : 8 posts
8 posts published in the last hour 08:32Cyber Vulnerabilities Besiege Italy, Absent Clear Cause 08:32Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia 08:32Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day 08:31UK Government…
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can’t quite explain why cyber threats look so different in Italy compared to everywhere else.
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Kaspersky researchers analyze a complex targeted attack employing NetamLoader, a sophisticated malicious framework and targeting a customized government…
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.
UK Government ‘Data Centre Covenant’ To Prioritise Critical Sites
Government’s proposed data centre deal requires investments in local communities, prioritises facilities for military, NHS
Google Misses Expectations, Stoking Scrutiny Of AI Spending
Google shares slump after it misses analysts’ expectations for most core businesses, in spite of strong cloud growth