A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff…
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass…
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
IT Security News Hourly Summary 2026-10-28 19h : 50 posts
50 posts published in the last hour 17:49The Oracle of Delphi Will Steal Your Credentials 17:49Securing the enterprise software supply chain in the AI era 17:49Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. 17:48AI Coding…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
Securing the enterprise software supply chain in the AI era
Across Europe, the Middle East, and Africa (EMEA), enterprise IT is undergoing a fundamental shift. Artificial intelligence (AI) is no longer restricted…
Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android’s usual confirmation screens, and to…
AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder
A security firm has found that placing a disguised instruction file inside a user’s Downloads folder is enough to manipulate AI coding agents into…
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses…
uCreator Android Spyware Targets Telegram and WeChat Accounts With Credential Theft and Cloning
A commercial Android surveillance toolkit known as uCreator can compromise Telegram accounts by capturing two-factor authentication (2FA) passwords and…
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox,…
Dutch Police Arrest Two Over $400,000 NFC Relay Bank Fraud
Dutch police have arrested two men suspected of operating a sophisticated bank-fraud scheme that used NFC relay attacks to steal more than €380,000,…
National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
Like the water sector initiative, the six-month pilot program will connect rural hospitals with industry for free services.
Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk
Apple’s iOS 27.2 fixes 163 security vulnerabilities, including WebKit and privacy flaws. IT teams should review updates across managed devices.
Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
Cannabis smuggling from North America and Thailand in Europe has seen a sharp rise, driven by oversupply in legal markets and the adaptability of…
US launches program to deliver free cybersecurity help to rural hospitals
Small and rural healthcare organizations are among the most vulnerable critical infrastructure organizations in the nation.
Why Vulnerability Management Fails Without Reliable Asset Data
Vulnerability management depends on knowing what needs protecting. Asset management provides that foundation by maintaining a current picture of IT…
Malware Campaign Infects 953 Online Stores in Prolonged Attack
In the past two years, 953 online stores, primarily Magento-based websites, have been compromised by malicious JavaScript code injected into their…
CISA confirms PHP2Shell under attack as researchers clock successful exploits
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs
Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate…
US government says hackers are now exploiting critical PHP web bugs
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web’s software.
The CISO’s evolving role: Protecting and defending in the agentic era
As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity and data guardrails, and…
New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding
The US Treasury proposes tighter China investment restrictions covering AI, biotechnology and advanced chips. Here’s what businesses and investors should…
Good Smile Company Data Breach: Customer Details Exposed, Store Shut Down
Good Smile Company confirms a data breach exposing customer details and partial payment information. Learn what was affected and what customers should do.