Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the…
Hackers Abuse Signed ChatGPT and Claude Binaries to Deploy Malware Through Fake GitHub Downloads
A malware campaign known as Yoba targets users by leveraging the popularity of AI tools like ChatGPT and Claude to trick them into installing infected…
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability,…
Israeli Ad Tech Firm Accused on Using Online Ads to Track Starlink Users
Israeli advertising company Discover-Tech is accused of using online ads to track people connected to SpaceX’s Starlink satellite internet service.…
IT Security News Hourly Summary 2026-10-27 18h : 17 posts
17 posts published in the last hour 16:40Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack 16:39Almost 50 arrested as police target Western Balkan network linked to killings 16:39PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL…
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
University hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases
Almost 50 arrested as police target Western Balkan network linked to killings
Nearly 50 suspects have been arrested in an international operation targeting a drug trafficking network with Western Balkan members, linked to killings,…
PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
Guardicore Labs uncovers a Ransomware detection campaign targeting MySQL servers. Attackers use Double Extortion and publish data to pressure victims.
EPICS Base
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory,…
CISA, security researchers confirm successful exploitation of PHP flaws
The security community has come under increased scrutiny as earlier threat warnings were slow to materialize.
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass…
Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation
Microsoft releases emergency .NET updates to fix a Brotli memory flaw and Linux privilege escalation, while correcting two incomplete October security…
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
Five election scams to watch out for
Election messages can ask you to register, donate, take a survey, or buy merchandise. Here’s how to check before you click or pay.
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward
Dutch Police Arrest Two Over $400,000 NFC Relay Bank Fraud
Dutch police have arrested two men suspected of operating a sophisticated bank-fraud scheme that used NFC relay attacks to steal more than €380,000,…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
Hackers Infect 953 Online Stores With Scanner-Evading Code
Attackers have infected 953 online stores with a scanner-evading JavaScript loader since July 2025
uCreator Android Spyware Targets Telegram and WeChat Accounts With Credential Theft and Cloning
A commercial Android surveillance toolkit known as uCreator can compromise Telegram accounts by capturing two-factor authentication (2FA) passwords and…
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses…
AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder
A security firm has found that placing a disguised instruction file inside a user’s Downloads folder is enough to manipulate AI coding agents into…
IT Security News Hourly Summary 2026-10-27 17h : 23 posts
23 posts published in the last hour 15:46Securing the enterprise software supply chain in the AI era 15:46System Note: October 27, 2026 15:46Hackers repeatedly breached suppliers holding UK police data, watchdog finds 15:45Apple Just Patched 163 iPhone Security Flaws —…
Securing the enterprise software supply chain in the AI era
Across Europe, the Middle East, and Africa (EMEA), enterprise IT is undergoing a fundamental shift. Artificial intelligence (AI) is no longer restricted…
System Note: October 27, 2026
Unfortunately, a backup failure has resulted in the loss of media files and documents attached to posts. They will be restored eventually, but restoring…