Oracle is adding a new orchestration layer to its Fusion Cloud Applications suite to help enterprises automate business workflows, coordinate AI agents,…
HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges
HashiCorp disclosed a vulnerability in consul-k8s, a cross-namespace authorization bypass that could let attackers with limited Kubernetes permissions…
Private repos still leak secrets to Gheist, a stolen GitHub token campaign
Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user…
Samsung TVs without mics may listen through soundbars, researcher says
The most startling claim is that a Samsung TV without a built-in microphone may use a connected soundbar or Bluetooth microphone to listen to the room.
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management
For the eighth consecutive time, Palo Alto Networks is recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management. Once…
Hiding Capabilities in AI Models
Interesting research: “ AI Models Can Provably Hide Arbitrary Capabilities ” Abstract: Capability evaluations aim to surface dangerous model behaviors…
Alibaba AI model tried to send data to Beijing server, Cohere says
An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage service during a cybersecurity evaluation, rival…
IT Security News Roundup: 2026-10-27 Morning
IT Security News: Morning roundup, 2026-10-27 Summary Today's early reports were dominated by attacks that abuse trust and legitimate access, from fake IT support on Microsoft Teams to a hosting provider forcing resets after an unexplained incident. Several stories also…
Hackers Use Google Ads to Push Fake Claude Downloads Hosted on Real Claude.ai Domain
Hackers are buying Google Ads to promote fake Claude download pages hosted on Anthropic’s legitimate claude.ai domain, exploiting content-sharing features…
Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
Coordinated by the European Commission in cooperation with Europol, the analysis draws on stakeholder consultations, dedicated meetings, surveys and…
Apple backports CoreGraphics zero-day patches to older iPhones
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in “extremely sophisticated”…
Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI
Anthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses.
Alibaba’s Qwen AI Model Attempts to Upload Files to China While Performing Cybersecurity Tasks
Researchers found that Alibaba’s Qwen3.8-Flash-Next model attempted an unauthorized upload to an Alibaba Cloud storage bucket in Beijing while performing…
First ISC2 AI Security Certification Expected for Early 2027
ISC2 is seeking 3000 volunteers to enrol to a pilot exam phase for its upcoming AI security certification
DreamHost Security Incident Forces Password Resets for Email and FTP/SFTP Accounts
DreamHost has implemented forced password resets for certain email and FTP/SFTP accounts following an incident that affected its File Manager and webmail…
Hackers Hijack Microsoft 365 Accounts at 79 Organizations Using Stolen Login Tokens
Hackers compromised Microsoft 365 accounts at 79 organizations by reusing stolen login tokens, recording at least 497 successful sign-ins between July 14…
Apple Fixes Actively Exploited iOS Zero-Day Vulnerability in CoreGraphics
Apple has released updates for iOS 18.7.11 and iPadOS 18.7.11 to address three security vulnerabilities, including a CoreGraphics flaw connected to…
Copenhagen University Breach Compromises Data on Half a Million People
Hackers have stolen personal information on over 520,000 people from the University of Copenhagen
Hackers Abuse Magento CMS Blocks to Infect Online Stores and Evade Malware Detection
Hackers are injecting JavaScript into Magento CMS blocks to maintain access to compromised storefronts while selectively hiding malicious responses from…
IT Security News Hourly Summary 2026-10-27 12h : 25 posts
25 posts published in the last hour 10:46Data Breach Statistics That Matter in 2026 10:45What happens when security tools go dark before the ransomware 10:45US Regulator Issues Rebuke Over Nuclear Safety 10:45Cohere Finds Qwen AI Model Contacting a Server in…
Data Breach Statistics That Matter in 2026
Understand cybersecurity megatrends with our rundown of 2026 data breach statistics [with data sourced from original studies published this year]. At…
What happens when security tools go dark before the ransomware
A China-linked ransomware crew disabled the security tools at a critical infrastructure operator before it launched the encryptor. Most security budgets…
US Regulator Issues Rebuke Over Nuclear Safety
US’ Nuclear Regulatory Commission reprimands Holtec over ‘chilled work environment’ that impairs staff from reporting safety concerns
Cohere Finds Qwen AI Model Contacting a Server in China
Cohere found an Alibaba AI model attempting to contact a server in China, raising security concerns about unexpected network activity in self-hosted AI…