IT Security News: Evening roundup, 2026-10-28 Summary The evening was dominated by supply chain and infrastructure exposure. AWS published guidance on the Brotli decoder flaw (CVE-2026-111497) that has rippled across runtimes, a critical EDK2 firmware bug put most servers at…
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload…
Officials seize domain of top bulletproof hosting provider Virtualine
The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all…
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154,…
IT Security News Hourly Summary 2026-10-29 02h : 5 posts
5 posts published in the last hour 00:32Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook 00:32Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice 00:03Japan’s GMO urges customers to shut down PCs amid ransomware…
Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook
Understand APNIC IPv4 transfer rules, buyer requirements, fees and approval steps, with helpful checks to assess address blocks before completing a…
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US…
Japan’s GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company’s…
Privacy Commissioner of Canada to investigate data breach involving Crime Stoppers
October 27, 2026 – Gatineau, Quebec Privacy Commissioner of Canada Philippe Dufresne has opened an investigation related to a cybersecurity incident…
IT Security News Hourly Summary 2026-10-29 01h : 9 posts
9 posts published in the last hour 23:32Introducing Route 53 Resolved IP Validation for AWS Network Firewall 23:32Upwind raises $400M after walking away from Datadog acquisition offer 23:06IT Security News Roundup: 2026-10-28 Evening 23:04Microsoft Rushes out Fixes for .NET 23:04OpenAI’s…
Introducing Route 53 Resolved IP Validation for AWS Network Firewall
Your workloads reach most destinations by domain name, but a firewall can only act on what it sees in the traffic. For HTTP and HTTPS, AWS Network…
Upwind raises $400M after walking away from Datadog acquisition offer
The cloud security startup raised a Series C at a $3.8B valuation, instead of selling itself for the same price.
Microsoft Rushes out Fixes for .NET
Brotli Emergency Patches, PHP-to-Shell Exploited, and Australia Disrupts 180K Amadey Infections | Cybersecurity Today On Cybersecurity Today (Oct. 28,…
OpenAI’s GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. […]
Next-gen privacy protocols: WireGuard vs OpenVPN vs Shadowsocks
Compare WireGuard, OpenVPN and Shadowsocks for speed, privacy, enterprise access and censorship resistance, including VPN tunnels differ from encrypted…
6 Best Secure Cloud Storage Solutions in 2026
The best secure cloud storage services include Sync.com, IDrive, OneDrive, pCloud, NordLocker, and Internxt for protecting sensitive files and privacy.
UNM Health ransomware attack disrupts patient care, surgeries
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities.…
IT Security News Hourly Summary 2026-10-29 00h : 19 posts
19 posts published in the last hour 22:55IT Security News Daily Summary 2026-10-28 22:34Bank of America kindly asks that you don’t share your banking password with your AI assistant 22:34A week in security (October 19 – October 25) 22:33CVE-2026-111497: Native…
IT Security News Daily Summary 2026-10-28
200 posts published today 22:34Bank of America kindly asks that you don’t share your banking password with your AI assistant 22:34A week in security (October 19 – October 25) 22:33CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure 22:33SBOMs…
Bank of America kindly asks that you don’t share your banking password with your AI assistant
The banking giant reminds customers that “you’re responsible for activity” resulting from your AI agents’ access.
A week in security (October 19 – October 25)
A list of topics we covered in the week of October 19 to October 25 of 2026
CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure
Bulletin ID: 2026-155-AWS Publication Date: 10/28/2026 15:00 PM PDT Description: AWS is aware of CVE-2026-111497, an issue in the native Brotli…
SBOMs Alone Can’t Reveal the Scope of a Supply Chain Attack
A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.
DeepSeek, Huawei Narrow AI Performance Gap With Nvidia
Huawei’s collaboration with start-up DeepSeek and Huawei’s own engineering efforts are paying off in spite of inferior resources, finds study
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
A malicious instruction file sitting in a developer’s Downloads folder tried to make their AI coding agent install a known-malicious npm package, security…