Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they…
Apple patches 286 bugs in iOS, macOS 27.2
Apple has released major security updates for iOS and macOS version 27.2, patching a total of 286 vulnerabilities across both platforms.
Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
Pillow Flaw Could Turn Image Filenames Into Code Execution
A Pillow vulnerability could allow attackers to execute server commands through manipulated image filenames. Here’s how to assess exposure and apply fixes.
Malicious apps prey on Russians’ anxiety about fuel prices, drone strikes
Cybercriminals are stuffing infostealer malware into bogus apps aimed at tracking gas prices, police activity, drone strikes and other information of…
New Sirius Backdoor Hides Inside Windows Processes to Steal Passwords and Evade Detection
A previously undocumented Sirius backdoor variant during a priority customer investigation, revealing a multistage campaign that hides malicious code…
Japan internet giant GMO says hackers posted stolen customer data
Japan’s GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.
Zoom Launches AI Guardrails for Enterprise Security
Zoom has announced new enterprise security features designed to give administrators greater control over AI agents operating within their collaboration…
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
We are pleased to share that we have been named winner of Advanced Persistent Threat (APT) Solution of the Year at the Computing Security Awards for ESEC…
DreamHost Forces Password Resets After Security Incident
Web hosting provider DreamHost has mandated password resets for a subset of email and FTP/SFTP accounts following a security incident that disrupted its…
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
A leaked SquareML access key could have been used to access a database containing personal and health information.
ThreatAware Launches Dimension Governed Workspace
ThreatAware has introduced Dimension, a new governed workspace platform designed to help organizations build, deploy, and manage custom security…
Socure links AI agents to verified people and businesses
Socure has launched Agent Intelligence, a suite that detects AI agents, scores whether they should be trusted, and ties each agent to the verified person…
CISA 2030 Strategy Released
The Cybersecurity and Infrastructure Security Agency has released a comprehensive strategic plan called CISA 2030: Defend, Harden, Prevail, setting the…
UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became…
Cloud isolation bypass via Kubernetes vulnerability chain
Security researchers have disclosed a critical vulnerability chain in a major cloud provider’s managed Kubernetes service that enabled complete bypass of…
IT Security News Hourly Summary 2026-10-27 15h : 19 posts
19 posts published in the last hour 13:34OpenAI bets on AI economics with lower-cost GPT-6.1 Terra 13:34DNSFilter LUMINATE unifies DNS security, AI controls and remote work protection 13:33Moscow faces internet disruptions as foreign leaders gather for summits 13:33Artificial Intimacy: Love…
OpenAI bets on AI economics with lower-cost GPT-6.1 Terra
OpenAI has launched GPT-6.1 Terra, a new reasoning model that it says delivers near-frontier performance on visual reasoning, professional task execution,…
DNSFilter LUMINATE unifies DNS security, AI controls and remote work protection
DNSFilter has launched LUMINATE by DNSFilter, a security platform that allows organizations to deliver five security solutions from one agent, one console…
Moscow faces internet disruptions as foreign leaders gather for summits
The restrictions will be in place from October 27 to 29, coinciding with the Gas Exporting Countries Forum summit and the Russia-Africa summit, Russia’s…
Artificial Intimacy: Love and lies in the age of AI
Our latest report reveals how AI is reshaping our relationships, blurring what feels authentic, and creating new ways for intimacy to be exploited.
Process trees in Livehunt: YARA rules that know who launched what
Note: YARA-X v1.21.0 adds a parent_name field to the items in vt.behaviour.processes_list, and v1.22.0 adds ancestor_names. VirusTotal now fills that list…
HPE Patches Dozens of Critical Flaws in Networking Products
Eight max-severity security defects could lead to remote code execution and authentication bypass.
Australia’s spies are sharing intelligence with hacking targets — and want them to share back
More than half of the individual warnings from the Australian Signals Directorate (ASD) drew on previously secret material that had been cleared for…