We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce the successful completion of our first…
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and…
U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
CVE-2026-85228 – Integer overflow in tensor buffer validation in Deep Java Library
Read this article
Brotli bug reaches far beyond Node.js (CVE-2026-111497)
A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497…
IT Security News Hourly Summary 2026-10-27 19h : 23 posts
23 posts published in the last hour 17:46CVE-2026-89065 and CVE-2026-89066: Issue with projen – Path traversal and OS command injection 17:46CVE-2026-89049 – Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent 17:46Part 3 –…
CVE-2026-89065 and CVE-2026-89066: Issue with projen – Path traversal and OS command injection
Read this article
CVE-2026-89049 – Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
Read this article
Part 3 – Cybersecurity journeys: The work behind the work
The most important work I’ve done in cybersecurity would make for terrible television. There were no countdown clocks and no frantic typing, just a lot of…
CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles
Bulletin ID: 2026-150-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/24/2026 20:00 PM PDT Summary: AWS identified…
South Korean Hacker Used AI Tools to Breach 60 Organizations in 44 Days, Police Say
South Korean police uncovered a hacking operation that stole 8.2 million records from about 90 organizations, with AI tools accelerating dozens of…
CVE-2026-18061 – XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
Read this article
DIG AI: A Dark Web AI Powering Cybercrime and Extremism
DIG AI is an uncensored Dark Web AI tool identified in 2025. New research reveals how criminal AI services and autonomous tools are advancing cybercrime.
CVE-2026-89090 – Denial of service in the event stream header decoder in AWS SDK for Go v2
Read this article
Python jettisons the native JIT, at least for now
The experimental just-in-time compiler, or JIT, for CPython will be removed after its maintainers missed deadlines for its formalization set by the Python…
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group
IT Security News Roundup: 2026-10-27 Afternoon
IT Security News: Afternoon roundup, 2026-10-27 Summary The most pressing thread was active exploitation of critical PHP flaws, now confirmed by CISA and researchers, alongside emergency fixes from Microsoft, Apple and Tailscale. Healthcare stayed in focus, with the University of…
‘Aokigahara’ Stealer Targets ‘Developer Keyrings’ & AI Assistants
The malware’s focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer…
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked…
CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) offers two free tools to help organizations find security misconfigurations in Microsoft…
Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
New findings by the Citizen Lab and SHARE Foundation show that a prominent supporter of Serbia’s student movement was targeted with spyware.
Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
The timing of these capabilities remains uncertain. However, this should not be the main concern. Adapting systems and coordinating security upgrades will…
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day…
Hackers Use Fake FedEx Invoices to Deploy Sirius Backdoor and Evade Windows Security
Hackers are sending fake FedEx tax invoices to trick users into installing a stealthy backdoor on Windows. The malware, called Sirius Backdoor, hides…