Hackers have quietly planted malware in 42 real GitHub repositories. The traps fire when a developer opens a project with Claude, Gemini, Cursor, or VS…
IT Security News Hourly Summary 2026-10-28 09h : 14 posts
14 posts published in the last hour 07:42Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges 07:42Patient records exposed in Quest breach: What you need to know 07:42Japan’s GMO Offers $1 Million Bounty to Catch Hackers…
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google’s…
Patient records exposed in Quest breach: What you need to know
Quest Diagnostics says a breach affected personal information and patient records. Here’s what patients need to know and what to do now.
Japan’s GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Japan’s GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service,…
SK Hynix’s Solidigm Ties $45bn US Plant to China Upgrades
Solidigm reportedly considers major flash memory plant in US, but only if administration allows it to update factory in Dalian
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that…
Authenticator token theft, Tailworm SSH flaws, UK police supplier breaches
Authenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk…
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it…
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a…
Bellini Capital CISO on AI security governance and the limits of patching faster
In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still…
Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control
Executives need visibility into workplace AI, clear data controls and limits on agent access before approving wider adoption. Here’s what businesses need…
Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication
A critical flaw in the GoAhead embedded web server lets revoked client certificates pass authentication checks, potentially restoring access to identities…
Tiny magnetic vortices could help computers work more like your brain
Scientists have filmed tiny magnetic vortices called skyrmions melting out of an organized lattice for the first time, revealing new ways to manipulate…
Hackers Abuse Indian Government Domains to Push Illegal Gambling Websites Through Google Search
Hackers have abused Indian government and educational domains to promote illegal gambling websites through Google Search, using unauthorized DNS changes…
IT Security News Hourly Summary 2026-10-28 08h : 10 posts
10 posts published in the last hour 06:44Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature 06:43Bias in Qwen3-Coder Model 06:43Britain bets big on AI to defend against the threats AI is helping create 06:43AbuseBox: Open-source monitor for blacklists, DNS,…
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
Interpol’s annual Operation Serengeti, now on its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in…
Bias in Qwen3-Coder Model
Interesting research : TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for,…
Britain bets big on AI to defend against the threats AI is helping create
Whitehall wants agents guarding critical infrastructure as part of a wider £600M spending spree
AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records
AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS,…
Malicious npm Campaign Hijacks 42 GitHub Repositories to Steal Credentials and Spread Malware
Research has identified 42 weaponized GitHub repositories belonging to 11 legitimate owners in the testmetest npm campaign, exposing an operation that…
How to Find and Exploit JWT Token Vulnerabilities
By HOC Team | Updated: October 2026 | Read time: ~18 min JSON Web Tokens (JWTs) have become…
Hackers Abuse Online Ads to Track Starlink Users and Spy on Individuals Across 49 Countries
Advertising infrastructure is increasingly being repurposed as a surveillance channel that can profile internet users and track their movements across…
NIST starts the countdown to retire quantum-vulnerable encryption
The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for…