Our latest report reveals how AI is reshaping our relationships, blurring what feels authentic, and creating new ways for intimacy to be exploited.
UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became…
Cloud isolation bypass via Kubernetes vulnerability chain
Security researchers have disclosed a critical vulnerability chain in a major cloud provider’s managed Kubernetes service that enabled complete bypass of…
Moldova investigates possible foreign involvement in major government cyberattack
Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens’ personal data and government digital…
DreamHost Forces Password Resets After Security Incident
Web hosting provider DreamHost has mandated password resets for a subset of email and FTP/SFTP accounts following a security incident that disrupted its…
Volt Typhoon hides zero-day attacks using ‘Silent Train’ framework
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand,…
CISA 2030 Strategy Released
The Cybersecurity and Infrastructure Security Agency has released a comprehensive strategic plan called CISA 2030: Defend, Harden, Prevail, setting the…
IT Security News Hourly Summary 2026-10-28 18h : 30 posts
30 posts published in the last hour 16:36A tiny laser beam could make computer memory 1,000 times faster 16:36Scanner Poses as 32 AI Bots to Find Credentials and Private Keys 16:36Yet Another ClickFix Campaign, (Wed, Oct 28th) 16:35The web’s having…
A tiny laser beam could make computer memory 1,000 times faster
Scientists at UC San Diego have developed a surprising new way to store digital information using light instead of magnets, potentially paving the way for…
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration…
Yet Another ClickFix Campaign, (Wed, Oct 28th)
Introduction
The web’s having a rough week. Here’s how to browse safely
PHP and Node.js flaws, hacked sites, fake updates, and rogue certificates can put you at risk even on trusted websites. Here’s how to stay safe.
Insurance industry fears potential impacts stemming from PHP2Shell
A systemic cyber event could lead to billions of dollars in claims that exceed current risk models.
NVIDIA SkillSpector: Complete Security Scanner for AI Agent Skills & MCP
As developers increasingly rely on autonomous AI agents to write code, manage infrastructure, and execute complex workflows, third-party…
Microsoft releases out-of-band Windows fixes with certificate updates
Did you hear the one about eMudhra and the power of 4? Time to get connected to certificate trust list updates
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by…
Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during…
Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of…
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected…
Simplify User Access Management with SCIM on Rapid7 Command Platform
Managing access to security tools shouldn’t require another manual process. As organizations grow, keeping user accounts and permissions up to date…
Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts
Torrance, United States / California, 27th October 2026, CyberNewswire
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
An attacker who gained access to Keystone’s website obtained the key that its hardware wallets use to prove they are genuine, the company said in a…
An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
A Kaspersky expert presents a cloud isolation bypass case honored at Russian Pentest Award 2026. Learn how vulnerabilities in Kubernetes, Konnectivity,…