IT Security News: Overnight roundup, 2026-10-29 Summary The most important story in this window was the PHP2Shell campaign, in which attackers chained web-layer flaws with a Linux kernel exploit to root 25 servers, including government-affiliated systems. It sits alongside follow-up…
Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 Firewall Servers
Hackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems…
Risky Bulletin: Moldovan public services crippled by cyberattack
Moldova takes down more than 80 public services after a cyberattack, the White House launches a new cybersecurity pilot program, South Korea arrests an…
IT Security News Hourly Summary 2026-10-29 06h : 4 posts
4 posts published in the last hour 04:32Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers 04:32Hackers Exploit PHP2Shell to Root 25 Servers – Including US Government Affiliates 04:03Bluesky Is Blocking Links to a Major…
Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers
Hackers combined PHP2Shell vulnerabilities with a Linux kernel exploit to gain root access on 25 servers across the United States, Japan, Taiwan, and…
Hackers Exploit PHP2Shell to Root 25 Servers – Including US Government Affiliates
HOC Shorts | The Breaking Discovery: Cybersecurity researchers uncovered a campaign in which attackers chained the PHP2Shell remote…
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains people’s contact…
IT Security News Hourly Summary 2026-10-29 05h : 6 posts
6 posts published in the last hour 03:33Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks 03:33WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability 03:33Hackers Leak Records of 41,000 DHS Personnel,…
Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks
Fortinet’s FortiAIGate is bringing AI security controls to enterprise workloads on Oracle Cloud Infrastructure (OCI), helping businesses inspect prompts,…
WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability
WordPress released version 7.1.4 on October 28, 2026, fixing 22 security flaws, including an unauthenticated remote code execution vulnerability in its…
Hackers Leak Records of 41,000 DHS Personnel, Exposing Undercover ICE Agents
A leak of records covering more than 41,000 Department of Homeland Security employees and contractors has exposed contact details, work assignments, and…
ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156,…
WatchGuard Discloses 7 Critical Firewall Flaws Allowing Remote Code Execution and Root-Level Attacks
WatchGuard disclosed seven critical Fireware OS vulnerabilities in an October 27, 2026 advisory, affecting Firebox firewalls and potentially enabling…
Srsly Risky Biz: Chinese AI can learn to love the West
Tom Uren and Amberleigh Jack talk about new research that shows that Chinese open-weight AI models can be reeducated to remove pro-CCP bias. Good news for…
IT Security News Hourly Summary 2026-10-29 03h : 4 posts
4 posts published in the last hour 01:31Attackers compromised 42 GitHub repositories by using files too large to be searched 01:03Officials seize domain of top bulletproof hosting provider Virtualine 01:03ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)…
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload…
Officials seize domain of top bulletproof hosting provider Virtualine
The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all…
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154,…
IT Security News Hourly Summary 2026-10-29 02h : 5 posts
5 posts published in the last hour 00:32Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook 00:32Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice 00:03Japan’s GMO urges customers to shut down PCs amid ransomware…
Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook
Understand APNIC IPv4 transfer rules, buyer requirements, fees and approval steps, with helpful checks to assess address blocks before completing a…
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US…
Japan’s GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company’s…
Privacy Commissioner of Canada to investigate data breach involving Crime Stoppers
October 27, 2026 – Gatineau, Quebec Privacy Commissioner of Canada Philippe Dufresne has opened an investigation related to a cybersecurity incident…
IT Security News Hourly Summary 2026-10-29 01h : 9 posts
9 posts published in the last hour 23:32Introducing Route 53 Resolved IP Validation for AWS Network Firewall 23:32Upwind raises $400M after walking away from Datadog acquisition offer 23:06IT Security News Roundup: 2026-10-28 Evening 23:04Microsoft Rushes out Fixes for .NET 23:04OpenAI’s…
Introducing Route 53 Resolved IP Validation for AWS Network Firewall
Your workloads reach most destinations by domain name, but a firewall can only act on what it sees in the traffic. For HTTP and HTTPS, AWS Network…