IT Security News Daily Summary 2026-10-21

200 posts published today

21:31Bullhorn sees red after cyberattack knocks recruitment platform offline
21:31Threats Making WAVs – Incident Response to a Cryptomining Attack
21:04Compromised eMudhra intermediate certificates
21:03Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials
21:03PHP Vulnerability Fallout After European Government Websites Go Offline
21:03Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
21:03AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
21:02AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
21:02ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
21:02Lazarus hackers use post-quantum cryptography for malware delivery
21:01Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
21:00IT Security News Hourly Summary 2026-10-21 23h : 16 posts
20:33Microsoft’s New Security Tools Can Restrict AI Agents That Go Off Track
20:32What Security Teams Can Do To Tame Wild Code
20:32Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
20:32Inside a Global AI-Assisted Hacking Campaign
20:31Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
20:31RAG Security: Protecting Retrieval-Augmented Generation Systems
20:31WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators
20:04AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive
20:03HIPAA Security Rule Delayed to 2027: Why Healthcare Can’t Wait
20:03Meta glasses caught recording conversations without wake phrase
20:03Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
20:02‘PHP2Shell’ Bugs Signal Red Alert for Security Industry
20:02Samsung Black Friday 2026: Galaxy Offers to Look Out For
20:02Possible new Cellebrite iPhone Radio Zero-Day
20:02OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight
20:00IT Security News Hourly Summary 2026-10-21 22h : 16 posts
19:33The internet is having a very bad cybersecurity day
19:33PHP releases emergency fixes for 2 critical vulnerabilities
19:32Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw
19:32WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators
19:32Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
19:31Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique
19:31A patch only reduces risk when it runs in production
19:31Weak encryption certificates could have let hackers easily spoof websites
19:03Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
19:03FBI Warns SafePay Ransomware Has Hit 600+ Organizations: Here’s What We Know
19:03Halfway is No Way: Why DSPM Fails if it Can Remediate, But Not Detect or Prioritize
19:02CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
19:02Man seeking love travels 2,000 km to meet an AI-generated woman
19:02UK finance watchdog wants firms to report AI failures and close calls
19:01OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks
19:00IT Security News Hourly Summary 2026-10-21 21h : 34 posts
18:33The local computing rebellion
18:33PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers
18:33Citizen Lab Director Slams Trump Administration, ‘Techno-Fascist’ Executives
18:33Protecting citizens, preserving rights
18:33Microsoft Treats AI Agents as Insider Threats in New Security Framework
18:33LiteLLM supply chain attack hoovers up passwords and secrets
18:33Protesters Call For Limits On London Robotaxis
18:32OSCP+ Scoring Update: What You Need to Know
18:32PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment
18:32Introducing a new AI chapter in the NCSC research problem book
18:32LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
18:32When ‘access denied’ becomes an agent’s next objective
18:32LiteLLM Compromised – Hackers Injected an Infostealer and RAT in the Latest 1.107.0 PyPI Release
18:32Why cyber resilience is now a boardroom priority for UK public services
18:32Hackers Plant Spy Chips In Crypto Wallets, Steal $90m
18:31Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
18:31China-Linked Hackers Turn Trusted Windows Applications Into Backdoors to Steal Credentials
18:31Enterprise AI needs more than an AI engineer
18:31APT28 Hackers Open Secret SSH Tunnel Into NATO Country’s Naval Shipbuilder Network
18:05Ukraine Claims First Drone Evacuation Of Wounded Soldier
18:05Microsoft Warns Windows Server Updates May Disrupt Exchange Email — Here’s the Workaround
18:05OpenCode keys exposed, AI agents raid websites, Rank Math backdoor
18:05ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
18:04Critical Remote Code Execution Vulnerabilities in PHP Core
18:04Hackers Use Gentlemen Ransomware to Disable Windows Defender and Destroy Backups
18:04Blackwall quadruples valuation to $2.2B as websites wrangle an increasingly crowded internet
18:03Google Upgrades Chrome With Gemini AI to Detect Fake Antivirus and Browser Update Scams
18:03How to Protect Your SME from AI-Driven Cyberattacks
18:03Node.js Releases Security Updates to Fix High-Severity TLS, DNS and Brotli Vulnerabilities
18:02Microsoft Withdraws From Major UK AI Data Centre
18:02Hackers Use AI-Powered Browsers to Hide Thousands of Fake Accounts and Bypass Security Detection
18:02PHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
18:02The AI Adoption Blind Spot: How Fake AI Tools Put Enterprises at Risk
18:00IT Security News Hourly Summary 2026-10-21 20h : 16 posts
17:33OpenAI’s GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
17:33OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
17:33Best practices for integrating IAM Roles Anywhere with your PKI
17:32Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
17:32The journey of a paper unicorn: adventures inside a modern warehouse
17:32Signal bug could keep your mic – and camera – on after hangup
17:31Margate Trials Driverless Shuttle Bus
17:31Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge
17:31High Court Dismisses Cabbies’ £250m Case Against Uber
17:03Saudi National Accused Of Bugging OpenAI Meeting Room
17:03Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections
17:02PHP2Shell: Why websites are going offline for emergency security updates
17:02PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now
17:02PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
17:01OpenAI agents disabled safety monitoring, one lied about it
17:00IT Security News Hourly Summary 2026-10-21 19h : 30 posts
16:34Using model routing to lower inference costs
16:34Critical PHP vulnerabilities expose most websites to potential compromise
16:34DeepSeek deep-sixed at all US federal civilian agencies
16:33US Homeland Security Orders Federal Civilian Agencies to Stop Using and Remove DeepSeek AI Products
16:33Optiv Launches CyberBOT Cybersecurity Awareness Training Program
16:33Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
16:32Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
16:32Assurance Retraite – 70,372 breached accounts
16:32Your AI agent fixed the bug, but what else did it change?
16:31ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)
16:31Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
16:31ICANN testing tech to let law enforcement access non-public WHOIS info
16:06Widespread PHP Flaw May Cause Many Site Outages Today
16:06Microsoft Edge Is Testing Restart-Free Security Updates: What Works Now
16:06IT Security News Roundup: 2026-10-21 Afternoon
16:06CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
16:05‘AdFection’ Turns Ad Impressions Into Zero-Click Spyware Delivery
16:05OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
16:05Patch Now: php2shell: What We Know About the Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
16:05PSA: UpdraftCentral Connection Key Compromise Used to Install Malicious Plugins on WordPress Sites
16:04WhatsApp’s Hidden AI Instructions Told Chatbot Not to Mention Privacy Complaints
16:04Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
16:04Your Security Stack Knows Who Logged In. But Does It Know What AI Agents Do Next?
16:03ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
16:03One DNS Query Revealed 6,800 Meta Muse Chat Links
16:03Google Messages’ New Scam Protection Uses Cloud AI: What Happens to Your Privacy?
16:02Researchers Infiltrate Microsoft Tech Support Scam Operation
16:02Eight US States Sue OpenAI Over Alleged ChatGPT Safety Risks to Children
16:02Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk
16:00IT Security News Hourly Summary 2026-10-21 18h : 42 posts
15:33subfinder – Passive Subdomain Enumeration Tool
15:33ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users
15:33PSA: Patch your Plex media server before someone hacks it
15:33‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets
15:33Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
15:33Best Cybersecurity Marketing Agencies for B2B
15:33Security patches need patches now that attackers have AI
15:32Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
15:32Two critical RCEs in PHP core
15:32Between Two Nerds: Why AI will mean infinite bugs
15:32Russia-Linked Hackers Target NATO Defense Contractors in European Espionage Campaign
15:32Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
15:32Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
15:32Fortinet Recognized by Crime Stoppers International for Cybersecurity Leadership
15:32FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure
15:31PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
15:31OVHcloud CLI Packages on GitHub Were Replaced With Secret-Stealing Malware
15:31PHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatched
15:31Nigerian Hacker Sentenced To Eight Years For Fraud And Identity Theft
15:31Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
15:31OpenCode Breach Exposes User API Keys in What Company Calls a Distillation Attack
15:05PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities
15:05High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
15:05European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
15:05PHP ships emergency patches for critical PHP2Shell flaws
15:04Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779
15:04New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
15:04OnlyFans Copyright Takedowns Expose Compromised Websites
15:04php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619
15:04Salt Security wins three InfoSec Innovator awards
15:04GenAI Security Gateway: An End-to-End Architecture
15:04Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness
15:03AI Use in Connecticut Utilities Faces Security Review
15:03WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
15:03DHS to ban DeepSeek from federal civilian agencies
15:03ClickFix has never been bigger, and AI tools are its most convincing lure yet
15:03CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild
15:02Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
15:02Critical PHP vulnerabilities expose vast majority of websites to potential compromise
15:02‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
15:01Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in
15:00IT Security News Hourly Summary 2026-10-21 17h : 38 posts
14:38From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software
14:37OpenCode Breach Could Affect OpenAI, Anthropic and Google
14:37How Fraudulent Airline Support Numbers Exploit Search Results and AI-Generated Answers
14:37eMudhra security blunder left trusted CA signing keys exposed to anyone
14:36Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding
14:36AOMEI Backupper update servers hijacked to push malware: Check your PC
14:36The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
14:35Agents are your newest insiders. Security must move at their speed.
14:35AI Guardrails Aren’t Stopping Criminal Hackers
14:35CYBER BRIEFING | October 19, 2026
14:34How to conduct a cyber-resilience assessment
14:34AI-Powered Fraud Puts 9 in 10 Americans at Risk as Cyber Scams Become More Sophisticated
14:34Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
14:33“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities
14:33CrowdStrike Uncovers New Agentic AI Campaigns
14:33Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign
14:32⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
14:32Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks
14:32Check Point Expands Strategic Collaboration with AWS to Accelerate AI and Cloud Security Capabilities
14:31CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
14:31CYBER BRIEFING | October 21, 2026
14:31Secure Sensitive Data with Cyera and Akamai Guardicore Segmentation
14:06PHP2Shell: Critical PHP vulnerabilities patched, update now!
14:06Signal RingRTC CVE-2026-113380 Call Hang-Up Flaw
14:05Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt
14:05php2shell: What We Know About the Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
14:05Conduent Agrees to Pay $80m to Settle Data Breach Class Action
14:04Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
14:04GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
14:04Meta wants to scrape your website to train its AI, and you can’t say no
14:03AI could lower barriers for OT infrastructure attacks
14:03Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities
14:03Meta Business Suite terms allow AI web scraping
14:02NVIDIA unveils security architecture that can stop AI agents crossing set boundaries

IT Security News Daily Summary 2026-10-21

200 posts published today

Like this:

Related

200 posts published today

Share this:

Like this:

Related

Post navigation