Operating speeds for Starlink and military Starshield systems resume after SpaceX-imposed restrictions that disrupted drone operations
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding…
Hackers now scanning systems for recently-patched Oracle flaw
Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. […]
FortiBleed 2.0 Exposes 40,573 FortiGate Secrets Across 975 Previously Unlisted Domains
Hudson Rock’s FortiBleed 2.0 investigation found 40,573 records with cleartext secrets in FortiGate configuration reports, exposing passwords and service…
Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
Five suspects linked to the organisation and recruitment of serious violence have been arrested in Spain, Morocco, and France, in the latest results of…
CrowdStrike 2026 Legal Threat Landscape Report: eCrime Leads Attacks, China Activity Intensifies
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike 2026 Legal Threat Landscape Report: eCrime Leads Attacks, China Activity Intensifies
NZ: Grieving families’ ‘incredibly stressful’ wait for answers after major NZ cyber attack
Nicholas Jones reports: A major cyber attack has caused delays to coronial investigations, with one grieving family wanting answers after their mother’s…
Microsoft Releases Emergency Windows Updates to Revoke Trust in Compromised eMudhra Certificates
Microsoft has released an emergency Windows update to remove trust in certificates associated with compromised eMudhra certificate authority keys. The…
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems…
Anthropic’s Claude Chains One-Click and Zero-Click Exploits to Bypass Chrome, Android and Linux Security
Anthropic announced that an unreleased research model called Claude successfully developed working exploit chains for Chrome, Safari, Android, Windows,…
Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat
Sead Fadilpašić reports: Japanese internet giant GMO Group has told its customers to scan their computers for viruses, back up all of their data,…
Hackers Reuse XWorm Malware Loader Across Phishing Campaigns Targeting Colombia and the UK
A judicial-themed phishing campaign targeting Colombian organizations that delivers XWorm through obfuscated scripts, encrypted PowerShell, and a reusable…
KR: Bithumb discloses data leak after internal system breach; One of three financial firm breaches reported that day
CoinTelegraph reports: South Korea’s crypto exchange Bithumb is investigating the extent of a data leak caused by a hack of its internal mobile system…
OWASP Warns AI Agents Are Making Cyberattacks Easier for Less-Skilled Hackers
OWASP has issued a warning that AI agents and chatbots are reducing the skills required for certain aspects of cyberattacks, particularly in areas like…
IT Security News Hourly Summary 2026-10-28 14h : 30 posts
30 posts published in the last hour 12:35Whitsett, NC sends out alert about phishing email 12:35Gheist turns GitHub Actions into a secret extraction service 12:35Tailscale fixes SSH flaws allowing lateral movement within tailnets 12:35FBI seizes ‘bulletproof’ hosting site accused of…
Whitsett, NC sends out alert about phishing email
The Town of Whitsett, North Carolina issued an alert on Facebook on October 22: The Town of Whitsett is notifying residents, vendors, community partners,…
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows…
Tailscale fixes SSH flaws allowing lateral movement within tailnets
Tailscale, the company behind the popular software-defined mesh networking and connectivity platform of the same name, has shipped fixes for several…
FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering
The FBI seized the domain of a “bulletproof” hosting provider accused of facilitating a range of cybercrimes, including money laundering and the…
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.
CrowdStrike Uncovers New Agentic AI Campaigns
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Uncovers New Agentic AI Campaigns
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers
CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical…
Cisco open sources tool for detecting AI agents on hacking sprees
Project Quarry aims to provide a ‘shared language’ for evaluating agent behavior
Court denies motions to dismiss in PowerSchool Data Breach Litigation
In previous litigation involving Illuminate (J.M. v. Illuminate Educ. Inc.), the district court held that Illuminate could be considered a provider of…