While everyone was distracted by PHP, another RCE has been wrecking the internet, Australia’s ABC wipes some staff devices, a third PHP RCE is incoming…
Court strikes down West Virginia law barring disclosure of public officials’ personal data
A federal appellate court panel said West Virginia’s version of Daniel’s Law — meant to shield the personal data of police and other officials — is…
IT Security News Hourly Summary 2026-10-28 22h : 24 posts
24 posts published in the last hour 20:35Linux Flaws Exposed Before Fixes as Root Exploit Goes Public 20:34Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking 20:34FEC Filing System Shut Down After Reported Hacking Attempt Days Before Midterms…
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
Six Linux flaws were made public, including one with a working root exploit and no merged fix
Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale.…
FEC Filing System Shut Down After Reported Hacking Attempt Days Before Midterms
The FEC’s filing system is offline after a reported hacking attempt, delaying campaign finance disclosures days before the 2026 midterm elections.
php2shell: anatomy of two PHP lifecycle bugs
How out-of-memory corruption and stale worker state became two critical PHP RCEs and why the original exploit theory got it wrong.
First ISC2 AI Security Certification Expected for Early 2027
ISC2 is seeking 3000 volunteers to enrol to a pilot exam phase for its upcoming AI security certification
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs,…
Watchdog Urges Police and Fire Service to Improve Cybersecurity
UK police forces and fire and rescue services have been urged to strengthen cybersecurity as rising cyber threats outpace current defenses
AI ‘hacker’ finds 4 severe bugs in popular industrial control software in under 4 hours
One critical, three high-severity EPICS bugs could disrupt research experiments
Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online.
CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
CISA’s new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of “passive defense”
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys,…
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
Artem Stryzhak participated in a series of ransomware attacks on hospitals, government entities and law firms from the middle of 2018 to late 2021.
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key…
ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs
ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told…
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its…
Hackers Infect 953 Online Stores With Scanner-Evading Code
Attackers have infected 953 online stores with a scanner-evading JavaScript loader since July 2025
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters’ PeopleSoft 0-day turns out to involve three vulns
Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
Arctic Wolf warned that the function enables highly effective social engineering attacks, which lead to incidents such as ransomware