The uncomfortable truth about MFA is that its implementation can start running into trouble before the technical rollout is even finished. IT switches it…
Hackers backdoor Linux servers using trojanized CWP web server
A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP)…
IT Security News Hourly Summary 2026-11-05 18h : 24 posts
24 posts published in the last hour 16:34Keys to the Kingdom: The eMudhra Weak-Key Compromise 16:34French authorities probe cyberattack targeting nation’s blood supply 16:34Tobacco company got smoked by leaving secret recipes on a file share 16:33Residential Proxy Traffic Traced to…
Keys to the Kingdom: The eMudhra Weak-Key Compromise
Learn more about the eMudhra incident, implications, downstream vulnerabilities that came out of it and mitigation.
French authorities probe cyberattack targeting nation’s blood supply
The attack follows a wave of hacks against refrigeration systems at supermarkets across Europe.
Tobacco company got smoked by leaving secret recipes on a file share
They denied the data was real…then removed it
Residential Proxy Traffic Traced to White House Network
White House network addresses were used as exits by 28 residential proxy services
Phishing-Resistant Isn’t Enough; Yubico Takes Aim at Identity-Verification Gap
The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a…
When trust becomes the payload: Inside the threats, etc quarterly report
The newest threats, etc report details how adversaries are weaponizing trust across the entire enterprise stack, abusing everything from AI assistants and…
The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send…
Cyber Resilience Starts with AI Governance
Learn why organizations can’t build cyber resilience if leadership doesn’t understand AI risk.
UK: Royal Cornwall Hospitals Trust data breach exposed health details of 7,715 staff
Lee Trewhela reports: The Royal Cornwall Hospitals Trust (RCHT) has admitted a huge data breach has led to many affected staff experiencing “significant…
Email threat landscape: Q3 2026 trends and insights
Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing…
Cyberattack wipes cloud data at major Russian hosting provider Beget
Daryna Antoniuk reports: A major Russian web hosting provider is struggling to restore its services after a cyberattack destroyed data across its cloud…
France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
A supplier of the French National Blood Service was hit by a cyber-attack in which hackers turned cold rooms hosting blood samples up to 110°C (230°F)
Why Higher Ed Needs a New Playbook for Ransomware, AI Risk, and Compliance
Discover how higher education institutions use Zero Trust microsegmentation and AI governance to contain ransomware and meet FERPA compliance.
Attackers Actively Probing for Upgrade-Window RCE Vulnerability in WordPress Core
On October 28th, 2026, the WordPress Security Team released WordPress 7.1.4, along with backported security releases for older branches, addressing…
HYFLOCK Ransomware Encrypts Only First 4KB of Larger Files, Leaves Parts of Victims’ Files Accessible
HYFLOCK ransomware has an encryption weakness that leaves parts of larger files readable, giving affected organizations a limited chance to recover data…
Hackers Alter Refrigeration Settings, Forcing European Stores to Discard Food
Hackers changed refrigeration settings at European supermarkets, forcing stores to discard produce, while UK suppliers reported attacks on…
OpenSSH Flaw Could Let Attackers Bypass Password Authentication on Alpine Linux Servers
A critical OpenSSH flaw could let remote attackers bypass password authentication on affected Alpine Linux servers, including accounts intended for…
Russia-Aligned Hackers Target Ukraine’s War Crimes Courts and Military Aid Networks
A Russia-aligned hacking group that researchers had not previously named or documented has been running a systematic intelligence campaign against…
Researchers Discover White House Network IP Available for Rent Through 28 Proxy Services
Researchers at Layer3 Intel found that 28 residential proxy services rent addresses on the White House network. Anyone with a few dollars could send web…
Closing the Identity Gap at the Service Desk
Attackers target IT service desks to bypass MFA by impersonating employees and convincing staff to reset passwords or register new authentication devices.…
Hackers Turn Popular Chinese Keyboard Software Into a Backdoor for Cyberespionage Attacks
A China-aligned hacking group is abusing Sogou Input Method, one of the most popular Chinese typing tools, to secretly install a backdoor called DarkVigil…