The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people.…
CVE-2026-85787 – An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope
Read this article
IT Security News Hourly Summary 2026-10-27 00h : 7 posts
7 posts published in the last hour 22:55IT Security News Daily Summary 2026-10-26 22:32Worm armed 42 GitHub repos by hiding a payload too big to fail 22:31CrowdStrike and Nvidia Expand AI Agent Security Partnership 22:03Former pentester used ARTEX AI to…
IT Security News Daily Summary 2026-10-26
200 posts published today 22:32Worm armed 42 GitHub repos by hiding a payload too big to fail 22:31CrowdStrike and Nvidia Expand AI Agent Security Partnership 22:03Former pentester used ARTEX AI to steal 8.2 million data records 22:03Hackers Weaponize Public PHP2Shell…
Worm armed 42 GitHub repos by hiding a payload too big to fail
Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
CrowdStrike and Nvidia Expand AI Agent Security Partnership
CrowdStrike and Nvidia Target AI Agent Threats With Expanded Partnership
Former pentester used ARTEX AI to steal 8.2 million data records
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI…
Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites
Hackers are now using public exploit code to break into websites that run PHP, and universities and business sites are among the main targets. The bugs…
Risks & Rewards: How AI Is Redefining the CISO’s Role
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI’s pros and cons, and ensure those deploying it own the risks.
IT Security News Hourly Summary 2026-10-26 23h : 7 posts
7 posts published in the last hour 21:32Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines 21:32Alibaba’s Qwen AI caught trying to contact server in China 21:32In-the-Wild Attack Abuses AI Agents’ Trust in Markdown 21:31Magento Campaign…
Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines
In an unusual move, the suit — brought under the state’s deceptive trade practices laws — seeks to hold founder and CEO Sam Altman personally liable for…
Alibaba’s Qwen AI caught trying to contact server in China
But there’s not much evidence this is anything more than echoes of unsanitized training data
In-the-Wild Attack Abuses AI Agents’ Trust in Markdown
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and…
Magento Campaign Infects 953 Online Stores Across Five Domains
Sansec tracks a Magento skimmer campaign that infected 953 stores, using five domains, bot filtering and malicious code hidden in CMS blocks. A criminal…
OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing
OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than…
LiteLLM supply chain attack started with an exposed master key
A ‘strong illustration of the risks associated with failing to rotate a potentially exposed key’
IT Security News Hourly Summary 2026-10-26 22h : 7 posts
7 posts published in the last hour 20:32Beyond the Endpoint: How Agent Cards Enable Discovery, Interoperability, and Trust 20:32Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI 20:31SSRF Prevention in C#: Securing…
Beyond the Endpoint: How Agent Cards Enable Discovery, Interoperability, and Trust
Imagine an employee asks an AI assistant: Can I claim this hotel expense? The assistant cannot answer the question itself, but somewhere in the enterprise…
Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful,…
SSRF Prevention in C#: Securing File Imports From User-Supplied URLs
A document portal that accepts a URL saves users the trouble of downloading a file and uploading it again. That’s particularly useful when large, complex,…
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According…
Between Two Nerds: Why frontier lab security will always suck
In this edition of Between Two Nerds Tom Uren and The Grugq talk about security culture. The PHP foundation seems to have had a change of heart about…
DreamHost forces password resets in ongoing “incident”
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. […]
IT Security News Hourly Summary 2026-10-26 21h : 8 posts
8 posts published in the last hour 19:3112,976 Refrigeration Controls Found Exposed Online in 99 Countries 19:04Inside Node2Shell: A Closer Look at CVE-2026-111497 19:04302.ai Data Leak: Private AI Chats Among 17.6 Million Exposed Files 19:04Can You Be Tracked With a…