IT Security News Daily Summary 2026-10-30

200 posts published today

22:32Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
22:32php2shell: anatomy of two PHP lifecycle bugs
22:3227 arrests and 248 potential victims identified in action week against labour exploitation
22:31Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
22:04Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
22:04CVE-2026-115415 – Secret masking bypass in the environment tool in Strands Agents Tools
22:04China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
22:03Critical Linux kernel flaw allows remote root attacks on MPTCP servers
22:03Applebee’s exposed customers’ personal data after leaving database password in app
22:03Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
22:00IT Security News Hourly Summary 2026-10-30 23h : 11 posts
21:33Anthropic VS code extension on Cursor backdoored for nearly 12 hours
21:33U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog
21:32Researchers Uncover Compaction Smuggling Flaw That Exposes OpenAI Reasoning Traces
21:32Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
21:32Friday Squid Blogging: Bigfin Squid Off California Coast
21:31The Department of Know: Big Binance hack, Cursor backdoor, FEC taken offline
21:04DOJ raises privacy concerns over potential sale of Character.AI chats
21:03Devs Hit by Trojanized Claude Code Extension for Cursor
21:03A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
21:03Leaked DHS employee archive, Icepick, faces challenges to stay online
21:00IT Security News Hourly Summary 2026-10-30 22h : 15 posts
20:32CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
20:32CrowdStrike Agent Graph Shows How Agents Act on the Endpoint
20:32DreamHost Forces Password Resets Amid Ongoing Security Incident
20:31Build an Intelligence Advantage with Falcon Next-Gen SIEM
20:06Black October: A Cybersecurity Today Special Edition
20:05What Is IoT Security? A Homeowner’s Guide to Protecting Smart Devices
20:05Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
20:05Frontier AI–Accelerated Attacks: Securing the Agentic Web and MCP Surface
20:04UNM Health addresses cyberattack in New Mexico after ransomware group claims responsibility
20:04Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
20:04Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
20:03How to Protect Your Brand From Social Media Scams
20:03Energy Giant Engie Notifies Customers of Supply Chain Breach
20:03KeyDrift Malware Targets Cisco SD-WAN to Collect Encryption Keys
20:00IT Security News Hourly Summary 2026-10-30 21h : 18 posts
19:34The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
19:33$6.3 Billion Stolen from Binance in Attack Attributed to North Korea
19:33Fashion retailer Resolve says hackers stole payment card information
19:33AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
19:32A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat
19:32Japan’s GMO Internet Urges Customers to Disconnect PCs
19:32Florida education department says data breach may affect 4.9 million people
19:31Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
19:05Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
19:05TeamViewer Vulnerability Lets Attackers Run Code on IT Support Staff’s PCs
19:05DHS personnel leak exposes contact details and sensitive job information
19:04PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most
19:04Unwrapping Retail Peak Season Cyber Threats
19:04Fake crypto app on Apple App Store linked to $23K wallet theft
19:03Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
19:03ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
19:03Student SSNs and Medicaid IDs Exposed in Frontline School Software Breach
19:00IT Security News Hourly Summary 2026-10-30 20h : 27 posts
18:36Critical Drupal Commerce Vulnerability Could Let Hackers Buy Products for Just $0.01
18:35Australia severs criminal access to 180,000 computers after breaching Amadey malware backend
18:35The Nansh0u Campaign – Hackers Arsenal Grows Stronger
18:35Wordfence Bug Bounty Program Monthly Report – July 2026
18:34CVE-2026-119117 – Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
18:34Fake PS5 Emulators on GitHub Spread Malware to Gamers
18:34Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
18:33Almost 50 arrested as police target Western Balkan network linked to killings
18:33Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
18:33Cloudflare Blocks 8,200 DDoS Attacks per Hour as Threats Surge
18:32484,142 Exposed Cloud Buckets Contain 18 Billion Files
18:32Binance Reports $6.3 Billion Crypto Hack as Partners Race to Freeze Funds
18:32Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
18:31Android ‘SMS of Death’ Flaw Can Drop Emergency Calls, Trigger Reboot Loops
18:06Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
18:06New Prompt Injection Techniques Cover Agent-Planning Attacks
18:06Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals
18:05OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
18:05Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
18:05North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages
18:04CVE-2026-119086 – Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel
18:04When Threats Don’t Wait, Security Can’t Either
18:04The Oracle of Delphi Will Steal Your Credentials
18:03Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data
18:03PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
18:03APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments
18:00IT Security News Hourly Summary 2026-10-30 19h : 21 posts
17:34Researchers Uncover 319 Chrome Extensions Hijacking Search Traffic
17:33Apple notifications alert victims in 99 countries about mercenary spyware infections
17:33The Good, the Bad and the Ugly in Cybersecurity – Week 44 (2026)
17:33From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
17:32Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
17:32Pentagon Investigates Possible Cyberattacks Behind US Military Freezer Failures
17:32The CISO’s evolving role: Protecting and defending in the agentic era
17:3126,400 Active Cloud and AI Keys Exposed in China’s Gitee Repositories
17:06IT Security News Roundup: 2026-10-30 Afternoon
17:06Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
17:05CVE-2026-119116 and CVE-2026-119148 – Issues in AWS Nitro Enclaves SDK for C
17:05Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)
17:05Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
17:05GM cracks the petty cash box for multistate driver tracking settlement
17:04North Korean Hackers Steal $6.36 Billion From Binance in Largest Crypto Hack Ever
17:04Claude Model Builds Exploits Across Major Browsers & OSes
17:04Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
17:03WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
17:03Insurance industry fears potential impacts from PHP2Shell
17:03TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
17:00IT Security News Hourly Summary 2026-10-30 18h : 31 posts
16:37Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
16:36Anthropic: That Claude Code extension compromise… couldn’t be us
16:36Claude Builds Five Exploit Chains Targeting Chrome, Safari, Windows, and Linux
16:36Yet Another ClickFix Campaign, (Wed, Oct 28th)
16:35Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
16:35NVIDIA SkillSpector: Complete Security Scanner for AI Agent Skills & MCP
16:35When AI Guardrails Expose Vulnerabilities
16:34Hacktivists Dump Records of 41,000 DHS Employees, Citing ICE Escalation
16:34CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE
16:34Researchers uncover Volt Typhoon’s covert, ephemeral network
16:33ISC2 Launches New AI Security Certification as Cyber Skills Demands Grow
16:33Sony’s So-net Breach Exposes 2.59 Million Customer Records
16:33When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
16:32California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
16:32CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
16:07PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
16:07Hackers Target Asian Governments With New NetamLoader Malware Hidden in Windows Update Files
16:07Fake PDF and search tools hijacked searches for 13.4 million Chrome users
16:06L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara
16:06A quiet week in infosec <.<
16:06Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
16:05Trezor warns of suspected crypto-theft implant in hardware wallet
16:05Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
16:05New Framework Puts Ransomware Resilience for AI Systems in Focus
16:04BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
16:04Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed
16:04Fake ChatGPT and Claude Apps Deliver Crypto-Mining Malware
16:03Japan Faces Growing Cyberattack Crisis as AI Tools Help Hackers Target Businesses and Government
16:03Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
16:03Unauthorized Codex and Claude Code Relays Disable Security Protections at 12 Organizations
16:00IT Security News Hourly Summary 2026-10-30 17h : 40 posts
15:34Node2Shell: Remote Code Execution via a Brotli Decoder Flaw
15:33Defense contractor pleads guilty to aiding North Korean remote worker scheme
15:33What AI Cybercrime Exercises Reveal About Collective Defense
15:33AI-Accelerated Attacks, Major Breaches, and Critical Flaws Define the Week
15:33North Korea-linked group steals $6.3B from Binance in largest-ever cryptocurrency hack
15:33Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
15:33Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
15:33Bloatware in Aftermarket Auto Parts
15:33Cybersecurity Incident Disrupts New Mexico Hospital Network, Forcing Patient Diversions and Clinic Closures
15:33PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
15:33Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
15:32South Korea’s financial industry hit by fresh wave of cyberattacks
15:32CVE-2026-118029 – Unverified ownership of the default Athena query result location in AWS SDK for pandas
15:32JPN: Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout
15:32CVE-2026-119115 – Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
15:06Sony Breach Exposes 2.58M Records
15:06Banks are blocking AI agents from customer accounts
15:06Chinese National Extradited to Face Charges in $36.9 Million Cryptocurrency Fraud
15:06Syrian hacker who served Assad regime gets 42 months in US prison
15:06IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
15:06Chrome extensions with 13.4 million installs caught hijacking searches
15:06GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
15:06In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
15:05Binance’s $6.3bn heist: how one laptop opened the door to the biggest crypto theft in history
15:05Your Ring Doorbell Could Miss Trick-or-Treaters — Check These Settings Before Halloween
15:05Syrian Electronic Army hacker gets prison time for attacks on Western targets
15:05Top cybersecurity conferences to attend in 2027
15:05Politicians in U.S. and E.U. Say Targeted Ads Are a Security Risk
15:05Hackers Use Cursor and Claude AI to Automate Attacks in Aur0ra Ransomware Operations
15:05China-Linked Hackers Exploit PHP2Shell
15:04Genesys Hack Exposes Customer Data From Internal Systems
15:04Tracking AI adoption in North Korean threat actor tradecraft
15:04Malicious Claude Code extension on Cursor planted SSH backdoors
15:04Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
15:04Warp Breach Exposes AI Agent Logs and Telemetry
15:04Ukrainian Hacker Sentenced for $100M Ransomware
15:03Moldova Probes Possible Foreign State Involvement in Major Cyberattack Exposing Government Data
15:03Cisco open sources AI agent behavior detection tool
15:03French Energy Giant ENGIE Hit by Data Breach, Customer Records Accessed Through Partner Platform
15:00IT Security News Hourly Summary 2026-10-30 16h : 39 posts
14:38There’s a Security Deal Hiding in Your Customer’s Browser
14:37European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
14:37U.S. CISA adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog
14:37DHS Data Leak Exposes 41,000 Workers, Including ICE Agents
14:36Undead Software Projects Continue to Raise Security Risks
14:36How Rapid7 InsightGovCloud Supports BOD 22-01 Compliance
14:36Passkeys Are Better Than Passwords. But They Are Not Enough.
14:35Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
14:35CVE-2026-111497: Brotli DoS in WordPress
14:35EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft
14:34North Korean hackers blamed for stealing record $6.3B in Binance breach
14:34Black Duck launches AI agent for vulnerability remediation
14:34Threat Modeling With 4 Simple Questions on a White Board
14:33CYBER BRIEFING | October 30, 2026
14:33Wazuh and AI for Enhanced SOC Workflows
14:33Yoba campaign spreads malware via fake AI apps
14:32Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware
14:32CYBER BRIEFING | October 28, 2026
14:09Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
14:09Gheist turns GitHub Actions into a secret extraction service
14:08Ivanti Connect Secure Zero-Day Exploited
14:08Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
14:08Wordfence Intelligence Weekly WordPress Vulnerability Report (October 19, 2026 to October 25, 2026)
14:07Hackers steal $6.3 billion from Binance in record crypto heist
14:07Hackers Use Zero-Click Coruna and DarkSword Exploits to Steal Sensitive Data From iPhones
14:07PHP2Shell: Finding the PHP You Didn’t Know You Were Running

IT Security News Daily Summary 2026-10-30

200 posts published today

Like this:

Related

200 posts published today

Share this:

Like this:

Related

Post navigation