200 posts published today
- 22:42Publishers Ask EU, UK Regulators To Block Meta AI Terms
- 22:42AI-powered phishing detection, third PHP2Shell bug, Quest medical breach
- 22:42Russian Hackers Use Experimental Network In Ukraine Strike
- 22:04SBOMs Alone Can’t Reveal the Scope of a Supply Chain Attack
- 22:04Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
- 22:04Bank of America kindly asks that you don’t share your banking password with your AI assistant
- 22:03A week in security (October 19 – October 25)
- 22:03DeepSeek, Huawei Narrow AI Performance Gap With Nvidia
- 22:033 Frameworks to Protect CISOs & Orgs Against AI Liability
- 22:00IT Security News Hourly Summary 2026-10-27 23h : 10 posts
- 21:40Code-execution flaw in UEFI firmware affects most servers on planet Earth
- 21:39External Teams Chats Anchor 15-Minute Malware Delivery
- 21:39Meta Free Cash Flow Falls Into Red Amid Heavy Spending
- 21:39Before you file that AI bug report, OpenAI has some advice
- 21:04Hackers hijack Convertr analytics script to steal payment card data
- 21:04All the security risks Anthropic is worried about before its IPO
- 21:03Navigate360’s lack of transparency is catching up with them; More organizations tell people NOT to use their tiplines.
- 21:03Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
- 21:03Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea
- 21:00IT Security News Hourly Summary 2026-10-27 22h : 18 posts
- 20:45Scientists overcome a hidden obstacle to more powerful quantum computers
- 20:44PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity
- 20:44Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters
- 20:4427 arrests and 248 potential victims identified in action week against labour exploitation
- 20:43Risky Bulletin: Brotli RCE is wrecking what’s left of the internet
- 20:43ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150, (Mon, Oct 26th)
- 20:43Code-execution flaw in UEFI firmware threatens most servers on planet Earth
- 20:42Work to protect DNS from quantum decryption attacks is speeding up
- 20:05SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 5
- 20:05Apple Fixes 163 iPhone, iPad Flaws in iOS 27.2 Update
- 20:05CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
- 20:04YARA-X 1.22.0 Release, (Sun, Oct 25th)
- 20:04Hacking attempts against US Federal Election Commission system triggered outage, email shows
- 20:04Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
- 20:03AI-assisted attackers breach European government via PHP2Shell
- 20:03Sponsored: Should your threat hunt become a detection?
- 20:03US indicts Malaysian national after Madagascar scam operation uncovered
- 20:00IT Security News Hourly Summary 2026-10-27 21h : 24 posts
- 19:50Hacker breached Capcom ID – obtained data from 11 million accounts and started changing passwords
- 19:49Scientists discover a hidden flaw that challenges 40 years of superconductor science
- 19:49Microsoft Teams to Get AI-Powered Context-Aware Phishing Detection
- 19:49Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
- 19:48AI ‘hacker’ finds 4 severe bugs in popular industrial control software in under 4 hours
- 19:48Researchers Exploit OpenAI API Flaw to Extract Hidden GPT-5.6 Reasoning Traces
- 19:48Ohio auditor: Cyber attack on state server carried out by possible ‘foreign state actors’
- 19:47MythicRatatoskr Backdoor Highlights Growing UAC-0099 and Sandworm Threat
- 19:47Before Your SOC Investigates: What 16K+ Security Teams Already Know
- 19:47Moldova Issues Warning About New Cyberattacks Following a Data Breach
- 19:46Japan’s Largest Car-Sharing Service Exposes 6.6 Million Accounts in Serious Data Breach
- 19:46Critical GoAhead TLS Flaws Could Expose Hundreds of Millions of Devices to Attacks
- 19:46Sweden blocks ChatGPT and Claude for govt workers
- 19:45APT41 Linked to BlackX Bootkit Attacks on Central Asian Diplomatic Agencies
- 19:45Pentagon ignored cybersecurity flaws before data breach, Marines’ lawsuit says
- 19:05Cyberattack forces University of New Mexico Health to divert ambulances, cancel appointments
- 19:05Hackers Are Serving Malware To iPhones Via Hundreds Of Infected Websites
- 19:04Microsoft releases Windows OOB updates to distrust eMudhra certificates
- 19:04Covered California Agent Data Exposed In Phishing Attack
- 19:04Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
- 19:03IN: 9 servers of Bajaj Hospital hacked in cyberattack at 3 am, sensitive data stolen; systems encrypted
- 19:03CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
- 19:03Conduent to pay $80M to settle 3rd-largest healthcare data breach
- 19:00IT Security News Hourly Summary 2026-10-27 20h : 10 posts
- 18:40CVE-2026-115413 – AWS API MCP Server OAuth token audience validation bypass
- 18:40October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
- 18:39CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
- 18:39Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills
- 18:04AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
- 18:04OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
- 18:03U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
- 18:03CVE-2026-85228 – Integer overflow in tensor buffer validation in Deep Java Library
- 18:03Brotli bug reaches far beyond Node.js (CVE-2026-111497)
- 18:00IT Security News Hourly Summary 2026-10-27 19h : 23 posts
- 17:46CVE-2026-89065 and CVE-2026-89066: Issue with projen – Path traversal and OS command injection
- 17:46CVE-2026-89049 – Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
- 17:46Part 3 – Cybersecurity journeys: The work behind the work
- 17:45CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles
- 17:45South Korean Hacker Used AI Tools to Breach 60 Organizations in 44 Days, Police Say
- 17:45CVE-2026-18061 – XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
- 17:44DIG AI: A Dark Web AI Powering Cybercrime and Extremism
- 17:44CVE-2026-89090 – Denial of service in the event stream header decoder in AWS SDK for Go v2
- 17:06Python jettisons the native JIT, at least for now
- 17:06Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
- 17:06IT Security News Roundup: 2026-10-27 Afternoon
- 17:06‘Aokigahara’ Stealer Targets ‘Developer Keyrings’ & AI Assistants
- 17:06GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
- 17:05CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace
- 17:05Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
- 17:05Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
- 17:04CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
- 17:04Hackers Use Fake FedEx Invoices to Deploy Sirius Backdoor and Evade Windows Security
- 17:04Warp discloses breach exposing AI agent logs, user telemetry data
- 17:03Hackers Abuse Signed ChatGPT and Claude Binaries to Deploy Malware Through Fake GitHub Downloads
- 17:03Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
- 17:03Israeli Ad Tech Firm Accused on Using Online Ads to Track Starlink Users
- 17:00IT Security News Hourly Summary 2026-10-27 18h : 17 posts
- 16:40Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
- 16:39Almost 50 arrested as police target Western Balkan network linked to killings
- 16:39PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
- 16:39EPICS Base
- 16:38CISA, security researchers confirm successful exploitation of PHP flaws
- 16:38Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
- 16:06Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation
- 16:05Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
- 16:05Five election scams to watch out for
- 16:05OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
- 16:04Dutch Police Arrest Two Over $400,000 NFC Relay Bank Fraud
- 16:04The Oracle of Delphi Will Steal Your Credentials
- 16:04Hackers Infect 953 Online Stores With Scanner-Evading Code
- 16:03uCreator Android Spyware Targets Telegram and WeChat Accounts With Credential Theft and Cloning
- 16:03The Nansh0u Campaign – Hackers Arsenal Grows Stronger
- 16:03AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder
- 16:00IT Security News Hourly Summary 2026-10-27 17h : 23 posts
- 15:46Securing the enterprise software supply chain in the AI era
- 15:46System Note: October 27, 2026
- 15:46Hackers repeatedly breached suppliers holding UK police data, watchdog finds
- 15:45Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk
- 15:45National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
- 15:45Why Vulnerability Management Fails Without Reliable Asset Data
- 15:44An Abandoned Popcorn Time Fork Left Millions of Computers at Risk
- 15:44ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs
- 15:44Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
- 15:43US launches program to deliver free cybersecurity help to rural hospitals
- 15:43University of New Mexico hospital diverts ambulances after cyberattack
- 15:43Good Smile Company Data Breach: Customer Details Exposed, Store Shut Down
- 15:42New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding
- 15:42Android Spyware Kit Can Steal Telegram Passwords and Clone WeChat Accounts
- 15:05Responsible disclosure in the age of Vulnpocalypse
- 15:05Malware Campaign Infects 953 Online Stores in Prolonged Attack
- 15:04Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs
- 15:04US government says hackers are now exploiting critical PHP web bugs
- 15:04CISA confirms PHP2Shell under attack as researchers clock successful exploits
- 15:03The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest
- 15:03Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
- 15:03Tailscale warns of SSH flaws allowing root privilege escalation
- 15:00IT Security News Hourly Summary 2026-10-27 16h : 20 posts
- 14:45CYBER BRIEFING | October 27, 2026
- 14:44Threats Making WAVs – Incident Response to a Cryptomining Attack
- 14:44Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users
- 14:44Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
- 14:43Apple patches 286 bugs in iOS, macOS 27.2
- 14:07Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
- 14:07Pillow Flaw Could Turn Image Filenames Into Code Execution
- 14:06Malicious apps prey on Russians’ anxiety about fuel prices, drone strikes
- 14:06New Sirius Backdoor Hides Inside Windows Processes to Steal Passwords and Evade Detection
- 14:06Japan internet giant GMO says hackers posted stolen customer data
- 14:05Zoom Launches AI Guardrails for Enterprise Security
- 14:05Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
- 14:05DreamHost Forces Password Resets After Security Incident
- 14:04Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
- 14:04ThreatAware Launches Dimension Governed Workspace
- 14:04Socure links AI agents to verified people and businesses
- 14:03CISA 2030 Strategy Released
- 14:03UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
- 14:03Cloud isolation bypass via Kubernetes vulnerability chain
- 14:00IT Security News Hourly Summary 2026-10-27 15h : 19 posts
- 13:34OpenAI bets on AI economics with lower-cost GPT-6.1 Terra
- 13:34DNSFilter LUMINATE unifies DNS security, AI controls and remote work protection
- 13:33Moscow faces internet disruptions as foreign leaders gather for summits
- 13:33Artificial Intimacy: Love and lies in the age of AI
- 13:33Process trees in Livehunt: YARA rules that know who launched what
- 13:32HPE Patches Dozens of Critical Flaws in Networking Products
- 13:32Australia’s spies are sharing intelligence with hacking targets — and want them to share back
- 13:32Sekoia introduces self-hosted deployment for organizations with strict data controls
- 13:31CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch
- 13:05CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
- 13:05Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts
- 13:05Exeon expands threat detection to shadow AI and autonomous agents
- 13:04Microsoft releases out-of-band Windows fixes with certificate updates
- 13:04The web’s having a rough week. Here’s how to browse safely
- 13:04Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
- 13:03Simplify User Access Management with SCIM on Rapid7 Command Platform
- 13:03Hackers Compromise 17 Exposed AI Pentesting Panels to Deploy Malware and Steal Credentials
- 13:03FireMon Agentic AI helps teams investigate access and prepare policy changes
- 13:00IT Security News Hourly Summary 2026-10-27 14h : 26 posts
- 12:34A tiny laser beam could make computer memory 1,000 times faster
- 12:34Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
- 12:34When AI becomes a hacker: New risks for cyber security
- 12:33After Black October: PHP Patches Leave Security Questions Open
- 12:33An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
- 12:33Researchers Discover OpenAI API Vulnerability That Leaks Hidden AI Reasoning Traces
- 12:33Alibaba’s Qwen AI Said It Wouldn’t Execute Commands, Then Tried to Send Data to China
- 12:33ThreatAware brings governance to AI-built security applications
- 12:33Unexplained DreamHost Incident Prompts Email, FTP Password Resets
- 12:33Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
- 12:33Chrome Removes eMudhra Root Certificate: How to Replace Affected TLS Certificates
- 12:32University of Copenhagen Data Breach Exposes 525,000 People’s Personal Data, Including Phone Numbers
- 12:32CISA lays out plan to push cyber adversaries out of US critical infrastructure
- 12:32Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
- 12:32MFA Advantages and Weaknesses: What Works and What Fails
- 12:32Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack
- 12:31AI-Generated Fake Login Pages Are Making Account Takeovers Easier
- 12:05Hackers Hijack AI Pentesting Agents to Install Backdoors and Steal API Keys
- 12:05Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones
- 12:04Cyberattack on University of Copenhagen exposes data of 525,000 people
- 12:04Hacker Uses AI to Breach 90 South Korean Organizations and Steal 8.2 Million Records
- 12:04iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
- 12:03Critical HashiCorp Consul Kubernetes Flaw Allows Attackers to Gain Elevated Privileges
- 12:03Attack on email hosting provider for German far right party AfD exposed 345k accounts
- 12:03Apple iOS 27.2 Released With Fixes for 163 Vulnerabilities, Including Fix for Critical WebKit RCE
- 12:00IT Security News Hourly Summary 2026-10-27 13h : 22 posts