Microsoft has released an emergency Windows update to remove trust in certificates associated with compromised eMudhra certificate authority keys. The…
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems…
Anthropic’s Claude Chains One-Click and Zero-Click Exploits to Bypass Chrome, Android and Linux Security
Anthropic announced that an unreleased research model called Claude successfully developed working exploit chains for Chrome, Safari, Android, Windows,…
Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat
Sead Fadilpašić reports: Japanese internet giant GMO Group has told its customers to scan their computers for viruses, back up all of their data,…
Hackers Reuse XWorm Malware Loader Across Phishing Campaigns Targeting Colombia and the UK
A judicial-themed phishing campaign targeting Colombian organizations that delivers XWorm through obfuscated scripts, encrypted PowerShell, and a reusable…
KR: Bithumb discloses data leak after internal system breach; One of three financial firm breaches reported that day
CoinTelegraph reports: South Korea’s crypto exchange Bithumb is investigating the extent of a data leak caused by a hack of its internal mobile system…
OWASP Warns AI Agents Are Making Cyberattacks Easier for Less-Skilled Hackers
OWASP has issued a warning that AI agents and chatbots are reducing the skills required for certain aspects of cyberattacks, particularly in areas like…
IT Security News Hourly Summary 2026-10-28 14h : 30 posts
30 posts published in the last hour 12:35Whitsett, NC sends out alert about phishing email 12:35Gheist turns GitHub Actions into a secret extraction service 12:35Tailscale fixes SSH flaws allowing lateral movement within tailnets 12:35FBI seizes ‘bulletproof’ hosting site accused of…
Whitsett, NC sends out alert about phishing email
The Town of Whitsett, North Carolina issued an alert on Facebook on October 22: The Town of Whitsett is notifying residents, vendors, community partners,…
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows…
Tailscale fixes SSH flaws allowing lateral movement within tailnets
Tailscale, the company behind the popular software-defined mesh networking and connectivity platform of the same name, has shipped fixes for several…
FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering
The FBI seized the domain of a “bulletproof” hosting provider accused of facilitating a range of cybercrimes, including money laundering and the…
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.
CrowdStrike Uncovers New Agentic AI Campaigns
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Uncovers New Agentic AI Campaigns
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers
CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical…
Cisco open sources tool for detecting AI agents on hacking sprees
Project Quarry aims to provide a ‘shared language’ for evaluating agent behavior
Court denies motions to dismiss in PowerSchool Data Breach Litigation
In previous litigation involving Illuminate (J.M. v. Illuminate Educ. Inc.), the district court held that Illuminate could be considered a provider of…
Dahua Cameras Hijacked Through Cloud Access, Even Behind Firewalls
Ukraine warns of Dahua camera compromises through Easy4IP cloud access, exposing surveillance systems to unauthorized access even behind firewalls.
Ukrainian National Sentenced for Role in Hacking Hospitals, Businesses, and Governments as Part of Ransomware Conspiracies Causing Over $100 Million in Losses
A press release from the U.S. Department of Justice: Artem Stryzhak, 36, a Ukrainian national, was sentenced today to 70 months in prison for conspiracy…
Black Duck launches AI agent to fix vulnerabilities as fast as attackers exploit them
Application security vendor Black Duck has launched Signal Agentic Fix, a new AI agent designed to shrink the gap between vulnerability discovery and a…
AU: Northern Territory Health backtracks on claim only five patients impacted by RDH privacy breach
Grace Atta reports: The Northern Territory health department has backtracked on its claim that only five patients were affected by a privacy breach that…
Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator
A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to…
Traceability becomes the new battleground in healthcare data breach litigation
Abbye Alexander, Esq., Henry Norwood, Esq., and Emily Taing, Esq. of Kaufman Dolowich LLP write: Recent caselaw suggests a shift in how courts analyze…
EU law enforcement chiefs gather to discuss new challenges in EU security
The Convention was opened by Jürgen Ebner, Europol’s Acting Executive Director, and Justin Kelly, Commissioner of the Irish An Garda Síochána.Jürgen…