200 posts published today
- 22:34Bank of America kindly asks that you don’t share your banking password with your AI assistant
- 22:34A week in security (October 19 – October 25)
- 22:33CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure
- 22:33SBOMs Alone Can’t Reveal the Scope of a Supply Chain Attack
- 22:33DeepSeek, Huawei Narrow AI Performance Gap With Nvidia
- 22:32Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
- 22:323 Frameworks to Protect CISOs & Orgs Against AI Liability
- 22:32Russian Hackers Use Experimental Network In Ukraine Strike
- 22:31GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
- 22:05Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
- 22:04Code-execution flaw in UEFI firmware affects most servers on planet Earth
- 22:04Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
- 22:04Hackers hijack Convertr analytics script to steal payment card data
- 22:04Meta Free Cash Flow Falls Into Red Amid Heavy Spending
- 22:03All the security risks Anthropic is worried about before its IPO
- 22:03External Teams Chats Anchor 15-Minute Malware Delivery
- 22:03Before you file that AI bug report, OpenAI has some advice
- 22:00IT Security News Hourly Summary 2026-10-28 23h : 14 posts
- 21:33Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
- 21:32Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
- 21:32Scientists overcome a hidden obstacle to more powerful quantum computers
- 21:3227 arrests and 248 potential victims identified in action week against labour exploitation
- 21:31Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters
- 21:05Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
- 21:04Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
- 21:04Work to protect DNS from quantum decryption attacks is speeding up
- 21:04ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150, (Mon, Oct 26th)
- 21:03Japan Airlines warns of data breach as country grapples with multiple cyber incidents
- 21:03CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
- 21:03Risky Bulletin: Brotli RCE is wrecking what’s left of the internet
- 21:03Court strikes down West Virginia law barring disclosure of public officials’ personal data
- 21:00IT Security News Hourly Summary 2026-10-28 22h : 24 posts
- 20:35Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
- 20:34Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
- 20:34FEC Filing System Shut Down After Reported Hacking Attempt Days Before Midterms
- 20:34php2shell: anatomy of two PHP lifecycle bugs
- 20:33First ISC2 AI Security Certification Expected for Early 2027
- 20:33Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
- 20:33Watchdog Urges Police and Fire Service to Improve Cybersecurity
- 20:32AI ‘hacker’ finds 4 severe bugs in popular industrial control software in under 4 hours
- 20:32Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
- 20:32Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
- 20:31CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
- 20:06October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
- 20:06Microsoft releases Windows OOB updates to distrust eMudhra certificates
- 20:06Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
- 20:05OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
- 20:05CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
- 20:05ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs
- 20:04CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
- 20:04Hackers Infect 953 Online Stores With Scanner-Evading Code
- 20:04Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
- 20:03Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
- 20:03CVE-2026-115415 – Secret masking bypass in the environment tool in Strands Agents Tools
- 20:03Copenhagen University Breach Compromises Data on Half a Million People
- 20:00IT Security News Hourly Summary 2026-10-28 21h : 27 posts
- 19:36CyberStrikeAI Uses 44 AI Agents to Target Japanese Organizations
- 19:36Researchers Uncover Compaction Smuggling Flaw That Exposes OpenAI Reasoning Traces
- 19:36Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills
- 19:35U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
- 19:35Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
- 19:35Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
- 19:34AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
- 19:34Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
- 19:34Microsoft Authenticator Flaw Scores 8.6: Android Users Must Update
- 19:33Japan’s GMO Internet Urges Customers to Disconnect PCs
- 19:33DreamHost Forces Password Resets Amid Ongoing Security Incident
- 19:33Energy Giant Engie Notifies Customers of Supply Chain Breach
- 19:32Part 3 – Cybersecurity journeys: The work behind the work
- 19:32AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
- 19:32Fake Court Phishing Campaign Targets More Than 100,000 Companies
- 19:31Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
- 19:06Discord to let search engines index public server messages
- 19:05The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
- 19:05Python jettisons the native JIT, at least for now
- 19:05South Korean Hacker Used AI Tools to Breach 60 Organizations in 44 Days, Police Say
- 19:04GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
- 19:04From Rules to AI and Back
- 19:04‘Aokigahara’ Stealer Targets ‘Developer Keyrings’ & AI Assistants
- 19:03Warp discloses breach exposing AI agent logs, user telemetry data
- 19:03DIG AI: A Dark Web AI Powering Cybercrime and Extremism
- 19:03Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
- 19:00IT Security News Hourly Summary 2026-10-28 20h : 21 posts
- 18:34Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS
- 18:34CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
- 18:33PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most
- 18:33Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
- 18:33Unwrapping Retail Peak Season Cyber Threats
- 18:32Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
- 18:32Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
- 18:32European digital rights nonprofit noyb sues Scale AI for ‘invasive’ worker surveillance
- 18:31Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
- 18:06Five election scams to watch out for
- 18:06Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation
- 18:05EPICS Base
- 18:05Almost 50 arrested as police target Western Balkan network linked to killings
- 18:05US sanctions Russians, North Koreans for laundering IT worker earnings
- 18:04CISA, security researchers confirm successful exploitation of PHP flaws
- 18:04Tailscale warns of SSH flaws allowing root privilege escalation
- 18:04PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
- 18:03Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
- 18:03Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
- 18:03Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
- 18:00IT Security News Hourly Summary 2026-10-28 19h : 50 posts
- 17:49The Oracle of Delphi Will Steal Your Credentials
- 17:49Securing the enterprise software supply chain in the AI era
- 17:49Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
- 17:48AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder
- 17:48The Nansh0u Campaign – Hackers Arsenal Grows Stronger
- 17:48uCreator Android Spyware Targets Telegram and WeChat Accounts With Credential Theft and Cloning
- 17:47Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
- 17:47Dutch Police Arrest Two Over $400,000 NFC Relay Bank Fraud
- 17:34National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
- 17:34Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk
- 17:34Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
- 17:33US launches program to deliver free cybersecurity help to rural hospitals
- 17:33Why Vulnerability Management Fails Without Reliable Asset Data
- 17:33Malware Campaign Infects 953 Online Stores in Prolonged Attack
- 17:32CISA confirms PHP2Shell under attack as researchers clock successful exploits
- 17:32Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs
- 17:32US government says hackers are now exploiting critical PHP web bugs
- 17:31The CISO’s evolving role: Protecting and defending in the agentic era
- 17:29New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding
- 17:29Good Smile Company Data Breach: Customer Details Exposed, Store Shut Down
- 17:23Japan internet giant GMO says hackers posted stolen customer data
- 17:23GitHub’s npm package firewall can block brand-new versions before they install
- 17:23CYBER BRIEFING | October 27, 2026
- 17:22TeamViewer Vulnerabilities Could Let Hackers Execute Malicious Code Through Remote Desktop Sessions
- 17:22OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
- 17:22Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users
- 17:21Insurance industry fears potential impacts from PHP2Shell
- 17:21When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
- 17:21Zoom Launches AI Guardrails for Enterprise Security
- 17:20Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript
- 17:20Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
- 17:20Beyond the Sandbox Verdict: 3 Questions for Faster SOC Decisions
- 17:19Apple patches 286 bugs in iOS, macOS 27.2
- 17:19PropellerAds: Why Modern Malware Delivery Starts Before the Payload
- 17:19When AI Guardrails Expose Vulnerabilities
- 17:18OWASP Finds ChatGPT Helped Low-Skilled User Take Over Admin Account in Hacking Test
- 17:06ThreatAware Launches Dimension Governed Workspace
- 17:06Process trees in Livehunt: YARA rules that know who launched what
- 17:06IT Security News Roundup: 2026-10-28 Afternoon
- 17:06Sony ISP subsidiary data breach exposes 2.5 million customer records
- 17:05OpenAI bets on AI economics with lower-cost GPT-6.1 Terra
- 17:05Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
- 17:05Artificial Intimacy: Love and lies in the age of AI
- 17:04UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
- 17:04Cloud isolation bypass via Kubernetes vulnerability chain
- 17:04Moldova investigates possible foreign involvement in major government cyberattack
- 17:03DreamHost Forces Password Resets After Security Incident
- 17:03Volt Typhoon hides zero-day attacks using ‘Silent Train’ framework
- 17:03CISA 2030 Strategy Released
- 17:00IT Security News Hourly Summary 2026-10-28 18h : 30 posts
- 16:36A tiny laser beam could make computer memory 1,000 times faster
- 16:36Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
- 16:36Yet Another ClickFix Campaign, (Wed, Oct 28th)
- 16:35The web’s having a rough week. Here’s how to browse safely
- 16:35Insurance industry fears potential impacts stemming from PHP2Shell
- 16:34NVIDIA SkillSpector: Complete Security Scanner for AI Agent Skills & MCP
- 16:34Microsoft releases out-of-band Windows fixes with certificate updates
- 16:34CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
- 16:33CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE
- 16:33Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
- 16:33Researchers uncover Volt Typhoon’s covert, ephemeral network
- 16:32PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
- 16:32Simplify User Access Management with SCIM on Rapid7 Command Platform
- 16:32Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts
- 16:31Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
- 16:07An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
- 16:07Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
- 16:06Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
- 16:06AI-Generated Fake Login Pages Are Making Account Takeovers Easier
- 16:06Apple backports CoreGraphics zero-day patches to older iPhones
- 16:05MFA Advantages and Weaknesses: What Works and What Fails
- 16:05Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed
- 16:05UK to look at making software companies liable for cyber breaches
- 16:04South Korea’s financial industry hit by fresh wave of cyberattacks
- 16:04When AI becomes a hacker: New risks for cyber security
- 16:04CVE-2026-118029 – Unverified ownership of the default Athena query result location in AWS SDK for pandas
- 16:03Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
- 16:03AI Agents Breached Anthropic’s Business Systems in 12 Hours, Report Says
- 16:03Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
- 16:00IT Security News Hourly Summary 2026-10-28 17h : 32 posts
- 15:33Hiding Capabilities in AI Models
- 15:33Samsung TVs without mics may listen through soundbars, researcher says
- 15:33Attack on email hosting provider for German far right party AfD exposed 345k accounts
- 15:33Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
- 15:33Alibaba AI model tried to send data to Beijing server, Cohere says
- 15:33Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
- 15:33Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management
- 15:33Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine
- 15:33U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog
- 15:33I underestimated how fast security teams would trust AI to act in the SOC
- 15:32JPN: Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout
- 15:32AfD – 345,439 breached accounts
- 15:32Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
- 15:32Oracle pushes AI deeper into enterprise workflows with Fusion Companion
- 15:32Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users
- 15:09Data Breach Statistics That Matter in 2026