IT Security News: Overnight roundup, 2026-10-29 Summary The most important story in this window was the PHP2Shell campaign, in which attackers chained web-layer flaws with a Linux kernel exploit to root 25 servers, including government-affiliated systems. It sits alongside follow-up…
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can’t quite explain why cyber threats look so different in Italy compared to everywhere else.
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Kaspersky researchers analyze a complex targeted attack employing NetamLoader, a sophisticated malicious framework and targeting a customized government…
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.
UK Government ‘Data Centre Covenant’ To Prioritise Critical Sites
Government’s proposed data centre deal requires investments in local communities, prioritises facilities for military, NHS
Google Misses Expectations, Stoking Scrutiny Of AI Spending
Google shares slump after it misses analysts’ expectations for most core businesses, in spite of strong cloud growth
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google’s…
Infineon Plans €1.1bn Upgrade For Gallium-Nitride Chip Plant
EU Chips Act to partially fund eight-year investment to upgrade Villach, Austria factory that produces energy-efficient power chips
IT Security News Hourly Summary 2026-10-29 09h : 19 posts
19 posts published in the last hour 07:33OpenAI election war room, FEC filing disruption, Gemini Carbon debut 07:33Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers 07:33Apple Debuts First-Ever Touchscreen Mac 07:32Authenticator token theft,…
OpenAI election war room, FEC filing disruption, Gemini Carbon debut
OpenAI opens an election war room https://www.politico.com/news/2026/10/28/openai-election-war-room-interference-01137690 Hack attempt disrupts FEC…
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that…
Apple Debuts First-Ever Touchscreen Mac
Apple brings out touchscreen MacBook Pro for first time, after resisting the trend for decades, on heels of M6 Macs, iPhone Duo
Authenticator token theft, Tailworm SSH flaws, UK police supplier breaches
Authenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk…
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it…
SK Hynix’s Solidigm Ties $45bn US Plant to China Upgrades
Solidigm reportedly considers major flash memory plant in US, but only if administration allows it to update factory in Dalian
Japan’s GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Japan’s GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service,…
Lessons from Cybersecurity Black Week
A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and…
Qualys CISO on what security teams can do as exploit campaigns grow
In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered…
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited…
Google Unveils Gemini 4 Carbon: Frontier AI Model Built for Cyber Defense
HOC Shorts Google officially announced Gemini 4 Carbon, its latest frontier AI model optimized for autonomous cyber defense,…
Cloudflare Image Transformation Flaw Allows Hackers to Bypass CSP and Execute Malicious JavaScript
Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content…
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
Interpol’s annual Operation Serengeti, now in its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in…
INJ3CTOR3 Malware Steals FreePBX Credentials to Enable Fraudulent Calls Even After Server Cleanup
INJ3CTOR3 has expanded its FreePBX toll-fraud campaign with automated credential theft, letting attackers keep billing unauthorized calls to victims even…
ESET APT Activity Report Q2 2026–Q3 2026
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026
CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js
CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following…