Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with…
Fake Court Phishing Campaign Targets More Than 100,000 Companies
Fake court notices target more than 100,000 companies in a LodaRAT phishing campaign. Learn how the attack works and what security teams should check.
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware
Discord to let search engines index public server messages
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without…
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70%…
Python jettisons the native JIT, at least for now
The experimental just-in-time compiler, or JIT, for CPython will be removed after its maintainers missed deadlines for its formalization set by the Python…
South Korean Hacker Used AI Tools to Breach 60 Organizations in 44 Days, Police Say
South Korean police uncovered a hacking operation that stole 8.2 million records from about 90 organizations, with AI tools accelerating dozens of…
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked…
From Rules to AI and Back
Fraud prevention combines rules, AI and behavioral analytics to stop scams, reduce false declines and keep automated decisions explainable through human…
‘Aokigahara’ Stealer Targets ‘Developer Keyrings’ & AI Assistants
The malware’s focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer…
Warp discloses breach exposing AI agent logs, user telemetry data
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the…
DIG AI: A Dark Web AI Powering Cybercrime and Extremism
DIG AI is an uncensored Dark Web AI tool identified in 2025. New research reveals how criminal AI services and autonomous tools are advancing cybercrime.
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been…
IT Security News Hourly Summary 2026-10-28 20h : 21 posts
21 posts published in the last hour 18:34Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS 18:34CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft 18:33PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to…
Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS
Security researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers. He also says he chained them to run code on iOS. The work was…
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day…
PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most
As of October 28, 2026, Wordfence knows of no WordPress site compromised through PHP2Shell. Update PHP to a fixed version and restart it, because updating…
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
University hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases
Unwrapping Retail Peak Season Cyber Threats
Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust.
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability,…
Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
New findings by the Citizen Lab and SHARE Foundation show that a prominent supporter of Serbia’s student movement was targeted with spyware.
European digital rights nonprofit noyb sues Scale AI for ‘invasive’ worker surveillance
Noyb alleges the platform in some cases records freelancers’ mouse clicks and keystrokes every few seconds and claims the collected information can be…
Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
The timing of these capabilities remains uncertain. However, this should not be the main concern. Adapting systems and coordinating security upgrades will…
Five election scams to watch out for
Election messages can ask you to register, donate, take a survey, or buy merchandise. Here’s how to check before you click or pay.