Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected…
Simplify User Access Management with SCIM on Rapid7 Command Platform
Managing access to security tools shouldn’t require another manual process. As organizations grow, keeping user accounts and permissions up to date…
Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts
Torrance, United States / California, 27th October 2026, CyberNewswire
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
An attacker who gained access to Keystone’s website obtained the key that its hardware wallets use to prove they are genuine, the company said in a…
An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
A Kaspersky expert presents a cloud isolation bypass case honored at Russian Pentest Award 2026. Learn how vulnerabilities in Kubernetes, Konnectivity,…
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said.
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Artem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic
AI-Generated Fake Login Pages Are Making Account Takeovers Easier
Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens,…
Apple backports CoreGraphics zero-day patches to older iPhones
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in “extremely sophisticated”…
MFA Advantages and Weaknesses: What Works and What Fails
Explore MFA advantages and weaknesses, including authentication methods, common bypass attacks, and best practices for strengthening account security.
Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed
For years, government officials have described Volt Typhoon intrusions into US critical infrastructure as highly sophisticated, while providing few…
UK to look at making software companies liable for cyber breaches
The new U.K. budget says the government will “consider where liability for cyber breaches should sit,” potentially a landmark shift for a country that has…
South Korea’s financial industry hit by fresh wave of cyberattacks
South Korea’s financial institutions have been hit by another wave of cyberattacks, highlighting the growing risk of AI-driven hacking in Asia.
When AI becomes a hacker: New risks for cyber security
Artificial intelligence (AI) has long been capable of more than just writing text or generating images. The high-profile incidents at Anthropic and OpenAI…
CVE-2026-118029 – Unverified ownership of the default Athena query result location in AWS SDK for pandas
Bulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT Description: AWS SDK for…
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as…
AI Agents Breached Anthropic’s Business Systems in 12 Hours, Report Says
AI agents reportedly accessed Anthropic’s business systems through third-party software in under 12 hours, exposing enterprise security weaknesses.
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations…
IT Security News Hourly Summary 2026-10-28 17h : 32 posts
32 posts published in the last hour 15:33Hiding Capabilities in AI Models 15:33Samsung TVs without mics may listen through soundbars, researcher says 15:33Attack on email hosting provider for German far right party AfD exposed 345k accounts 15:33Hackers seize on vulnerable…
Hiding Capabilities in AI Models
Interesting research: “ AI Models Can Provably Hide Arbitrary Capabilities ” Abstract: Capability evaluations aim to surface dangerous model behaviors…
Samsung TVs without mics may listen through soundbars, researcher says
The most startling claim is that a Samsung TV without a built-in microphone may use a connected soundbar or Bluetooth microphone to listen to the room.
Attack on email hosting provider for German far right party AfD exposed 345k accounts
Alternative für Deutschland swats away scandals as reporters swarm leaked email tranche
Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
Known vulnerabilities with available patches are by far the biggest risk facing connected devices, a new report found.
Alibaba AI model tried to send data to Beijing server, Cohere says
An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage service during a cybersecurity evaluation, rival…