200 posts published today
- 22:343 Frameworks to Protect CISOs & Orgs Against AI Liability
- 22:34Bank of America kindly asks that you don’t share your banking password with your AI assistant
- 22:34Extent of Crime Stoppers data breach unknown: Sault Police chief
- 22:33CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure
- 22:33Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
- 22:33Usage Metering Explained: Ingestion vs. Mediation vs. Metering vs. Rating
- 22:32US Probes Suspected Hack Behind Military Base Freezer Failures
- 22:32SBOMs Alone Can’t Reveal the Scope of a Supply Chain Attack
- 22:32Binance pauses withdrawals as hackers suspected of stealing billions in crypto
- 22:31Rethinking Cybersecurity Awareness in the AI Era
- 22:06Before you file that AI bug report, OpenAI has some advice
- 22:05Anthropic-Themed Phishing Emails Bypass Top Security Tools
- 22:05Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
- 22:05Code-execution flaw in UEFI firmware affects most servers on planet Earth
- 22:04Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
- 22:04Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
- 22:04WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release
- 22:03All the security risks Anthropic is worried about before its IPO
- 22:03External Teams Chats Anchor 15-Minute Malware Delivery
- 22:03Polymarket halts trading after crypto-draining script breach, $2.5M traced
- 22:00IT Security News Hourly Summary 2026-10-29 23h : 29 posts
- 21:34University of Copenhagen Breach Hits 525,000, Exposes Access PINs for 20,000
- 21:34php2shell: anatomy of two PHP lifecycle bugs
- 21:3427 arrests and 248 potential victims identified in action week against labour exploitation
- 21:33CISA Adds One Known Exploited Vulnerability to Catalog
- 21:33Watchdog Urges Police and Fire Service to Improve Cybersecurity
- 21:33Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
- 21:32CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
- 21:32Copenhagen University Breach Compromises Data on Half a Million People
- 21:32Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
- 21:31First ISC2 AI Security Certification Expected for Early 2027
- 21:08Discord to let search engines index public server messages
- 21:08CVE-2026-115415 – Secret masking bypass in the environment tool in Strands Agents Tools
- 21:08Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
- 21:07October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
- 21:07CyberStrikeAI Uses 44 AI Agents to Target Japanese Organizations
- 21:07Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
- 21:06Researchers Uncover Compaction Smuggling Flaw That Exposes OpenAI Reasoning Traces
- 21:06Hackers Infect 953 Online Stores With Scanner-Evading Code
- 21:06CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
- 21:05Leaked DHS employee archive, Icepick, faces challenges to stay online
- 21:05Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills
- 21:05ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs
- 21:04AI ‘hacker’ finds 4 severe bugs in popular industrial control software in under 4 hours
- 21:04Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
- 21:04U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
- 21:03OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
- 21:03Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
- 21:03Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
- 21:00IT Security News Hourly Summary 2026-10-29 22h : 39 posts
- 20:38AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
- 20:38From Rules to AI and Back
- 20:37DreamHost Forces Password Resets Amid Ongoing Security Incident
- 20:37Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
- 20:37Python jettisons the native JIT, at least for now
- 20:36GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
- 20:36Energy Giant Engie Notifies Customers of Supply Chain Breach
- 20:36Fake Court Phishing Campaign Targets More Than 100,000 Companies
- 20:35UNM Health addresses cyberattack in New Mexico after ransomware group claims responsibility
- 20:35Black October: A Cybersecurity Today Special Edition
- 20:35What Is IoT Security? A Homeowner’s Guide to Protecting Smart Devices
- 20:34Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
- 20:34Limited reports of PHP bug exploitation emerge
- 20:34Part 3 – Cybersecurity journeys: The work behind the work
- 20:33The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
- 20:33AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
- 20:33Microsoft Authenticator Flaw Scores 8.6: Android Users Must Update
- 20:32A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat
- 20:32Japan’s GMO Internet Urges Customers to Disconnect PCs
- 20:32Florida education department says data breach may affect 4.9 million people
- 20:31Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
- 20:08Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
- 20:08Fake crypto app on Apple App Store linked to $23K wallet theft
- 20:07GM settles with 36 states for selling driver data, agrees to $220 million fine and reforms
- 20:07CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
- 20:07Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
- 20:06PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most
- 20:06‘Aokigahara’ Stealer Targets ‘Developer Keyrings’ & AI Assistants
- 20:06Unwrapping Retail Peak Season Cyber Threats
- 20:05EPICS Base
- 20:05Student SSNs and Medicaid IDs Exposed in Frontline School Software Breach
- 20:05Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
- 20:04Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
- 20:04Five election scams to watch out for
- 20:04DHS personnel leak exposes contact details and sensitive job information
- 20:03ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
- 20:03Australia severs criminal access to 180,000 computers after breaching Amadey malware backend
- 20:03Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
- 20:00IT Security News Hourly Summary 2026-10-29 21h : 34 posts
- 19:36AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder
- 19:36Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
- 19:36484,142 Exposed Cloud Buckets Contain 18 Billion Files
- 19:35Wordfence Bug Bounty Program Monthly Report – July 2026
- 19:35Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
- 19:35The Nansh0u Campaign – Hackers Arsenal Grows Stronger
- 19:34Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
- 19:34CISA, security researchers confirm successful exploitation of PHP flaws
- 19:34Almost 50 arrested as police target Western Balkan network linked to killings
- 19:33Dutch Police Arrest Two Over $400,000 NFC Relay Bank Fraud
- 19:33PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
- 19:33Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
- 19:32Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
- 19:32The Oracle of Delphi Will Steal Your Credentials
- 19:32uCreator Android Spyware Targets Telegram and WeChat Accounts With Credential Theft and Cloning
- 19:31New Prompt Injection Techniques Cover Agent-Planning Attacks
- 19:08Malware Campaign Infects 953 Online Stores in Prolonged Attack
- 19:07OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
- 19:07New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding
- 19:07US government says hackers are now exploiting critical PHP web bugs
- 19:06The CISO’s evolving role: Protecting and defending in the agentic era
- 19:06National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
- 19:06US launches program to deliver free cybersecurity help to rural hospitals
- 19:05State of Ad Fraud 2026: 52% of Schemes Use AI as Cloaking Loses Ground to iOS Exploits and Messenger Phishing
- 19:05Sony ISP subsidiary data breach exposes 2.5 million customer records
- 19:05Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
- 19:04Why Vulnerability Management Fails Without Reliable Asset Data
- 19:04CYBER BRIEFING | October 27, 2026
- 19:04CISA confirms PHP2Shell under attack as researchers clock successful exploits
- 19:03Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk
- 19:03Japan internet giant GMO says hackers posted stolen customer data
- 19:03Hackers Launch 8,200 DDoS Attacks Every Hour, Cloudflare’s Latest Report Reveals
- 19:02Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
- 19:00IT Security News Hourly Summary 2026-10-29 20h : 36 posts
- 18:36Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users
- 18:36Claude Model Builds Exploits Across Major Browsers & OSes
- 18:36Artificial Intimacy: Love and lies in the age of AI
- 18:35Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
- 18:35Insurance industry fears potential impacts from PHP2Shell
- 18:35Process trees in Livehunt: YARA rules that know who launched what
- 18:34UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
- 18:34Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
- 18:34OpenAI bets on AI economics with lower-cost GPT-6.1 Terra
- 18:33Zoom Launches AI Guardrails for Enterprise Security
- 18:33Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
- 18:33Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
- 18:32ThreatAware Launches Dimension Governed Workspace
- 18:32When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
- 18:32Apple patches 286 bugs in iOS, macOS 27.2
- 18:31When AI Guardrails Expose Vulnerabilities
- 18:09CISA 2030 Strategy Released
- 18:08Yet Another ClickFix Campaign, (Wed, Oct 28th)
- 18:08CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE
- 18:08Sony’s So-net Breach Exposes 2.59 Million Customer Records
- 18:07CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
- 18:07Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
- 18:07ISC2 Launches New AI Security Certification as Cyber Skills Demands Grow
- 18:06The web’s having a rough week. Here’s how to browse safely
- 18:06Researchers uncover Volt Typhoon’s covert, ephemeral network
- 18:06NVIDIA SkillSpector: Complete Security Scanner for AI Agent Skills & MCP
- 18:05A tiny laser beam could make computer memory 1,000 times faster
- 18:05Simplify User Access Management with SCIM on Rapid7 Command Platform
- 18:05A quiet week in infosec <.<
- 18:04PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
- 18:04Microsoft releases out-of-band Windows fixes with certificate updates
- 18:04Volt Typhoon hides zero-day attacks using ‘Silent Train’ framework
- 18:03DreamHost Forces Password Resets After Security Incident
- 18:03Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
- 18:03Cloud isolation bypass via Kubernetes vulnerability chain
- 18:00IT Security News Hourly Summary 2026-10-29 19h : 46 posts
- 17:35Attack on email hosting provider for German far right party AfD exposed 345k accounts
- 17:35Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
- 17:35Alibaba AI model tried to send data to Beijing server, Cohere says
- 17:35BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
- 17:34Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed
- 17:34When AI becomes a hacker: New risks for cyber security
- 17:34Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
- 17:34South Korea’s financial industry hit by fresh wave of cyberattacks
- 17:34Hiding Capabilities in AI Models
- 17:34AI-Generated Fake Login Pages Are Making Account Takeovers Easier
- 17:34An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
- 17:34So Many AI Security Benchmarks, but None Tell the Whole Story
- 17:33CVE-2026-118029 – Unverified ownership of the default Athena query result location in AWS SDK for pandas
- 17:33Samsung TVs without mics may listen through soundbars, researcher says
- 17:33Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
- 17:33AI Agents Breached Anthropic’s Business Systems in 12 Hours, Report Says
- 17:33Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
- 17:32Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
- 17:32CVE-2026-119115 – Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
- 17:32Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
- 17:08Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
- 17:08What happens when security tools go dark before the ransomware
- 17:08Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
- 17:07US Regulator Issues Rebuke Over Nuclear Safety
- 17:07Oracle pushes AI deeper into enterprise workflows with Fusion Companion
- 17:07When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
- 17:07InfraTrust report warns of exploited flaws in critical network infrastructure
- 17:07JPN: Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout
- 17:07Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users
- 17:07Cybersecurity Incident Disrupts New Mexico Hospital Network, Forcing Patient Diversions and Clinic Closures
- 17:07AfD – 345,439 breached accounts
- 17:06Tracking AI adoption in North Korean threat actor tradecraft
- 17:06Data Breach Statistics That Matter in 2026
- 17:06Your Ring Doorbell Could Miss Trick-or-Treaters — Check These Settings Before Halloween
- 17:06IT Security News Roundup: 2026-10-29 Afternoon
- 17:06GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
- 17:05Microsoft urges Entra ID admins to migrate users to passkeys
- 17:05Warp Breach Exposes AI Agent Logs and Telemetry
- 17:05IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
- 17:04Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
- 17:04Genesys Hack Exposes Customer Data From Internal Systems