7 posts published in the last hour 23:31EU law enforcement chiefs gather to discuss new challenges in EU security 23:06IT Security News Roundup: 2026-10-26 Evening 23:04CISA Adds Two Known Exploited Vulnerabilities to Catalog 23:04CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership…
EU law enforcement chiefs gather to discuss new challenges in EU security
The Convention was opened by Jürgen Ebner, Europol’s Acting Executive Director, and Justin Kelly, Commissioner of the Irish An Garda Síochána.Jürgen…
IT Security News Roundup: 2026-10-26 Evening
IT Security News: Evening roundup, 2026-10-26 Summary The evening was dominated by AI-related security stories and fresh exploitation of freshly disclosed software flaws. Attackers are weaponizing public PHP2Shell exploit code, a LiteLLM supply-chain compromise traced back to a single unrotated…
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog and updated the PHP Alert, Critical Vulnerabilities in PHP…
CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server
Read this article
University of Copenhagen data breach exposes data of 525,000 people
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people.…
CVE-2026-85787 – An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope
Read this article
IT Security News Hourly Summary 2026-10-27 00h : 7 posts
7 posts published in the last hour 22:55IT Security News Daily Summary 2026-10-26 22:32Worm armed 42 GitHub repos by hiding a payload too big to fail 22:31CrowdStrike and Nvidia Expand AI Agent Security Partnership 22:03Former pentester used ARTEX AI to…
IT Security News Daily Summary 2026-10-26
200 posts published today 22:32Worm armed 42 GitHub repos by hiding a payload too big to fail 22:31CrowdStrike and Nvidia Expand AI Agent Security Partnership 22:03Former pentester used ARTEX AI to steal 8.2 million data records 22:03Hackers Weaponize Public PHP2Shell…
Worm armed 42 GitHub repos by hiding a payload too big to fail
Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
CrowdStrike and Nvidia Expand AI Agent Security Partnership
CrowdStrike and Nvidia Target AI Agent Threats With Expanded Partnership
Former pentester used ARTEX AI to steal 8.2 million data records
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI…
Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites
Hackers are now using public exploit code to break into websites that run PHP, and universities and business sites are among the main targets. The bugs…
Risks & Rewards: How AI Is Redefining the CISO’s Role
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI’s pros and cons, and ensure those deploying it own the risks.
IT Security News Hourly Summary 2026-10-26 23h : 7 posts
7 posts published in the last hour 21:32Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines 21:32Alibaba’s Qwen AI caught trying to contact server in China 21:32In-the-Wild Attack Abuses AI Agents’ Trust in Markdown 21:31Magento Campaign…
Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines
In an unusual move, the suit — brought under the state’s deceptive trade practices laws — seeks to hold founder and CEO Sam Altman personally liable for…
Alibaba’s Qwen AI caught trying to contact server in China
But there’s not much evidence this is anything more than echoes of unsanitized training data
In-the-Wild Attack Abuses AI Agents’ Trust in Markdown
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and…
Magento Campaign Infects 953 Online Stores Across Five Domains
Sansec tracks a Magento skimmer campaign that infected 953 stores, using five domains, bot filtering and malicious code hidden in CMS blocks. A criminal…
OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing
OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than…
LiteLLM supply chain attack started with an exposed master key
A ‘strong illustration of the risks associated with failing to rotate a potentially exposed key’
IT Security News Hourly Summary 2026-10-26 22h : 7 posts
7 posts published in the last hour 20:32Beyond the Endpoint: How Agent Cards Enable Discovery, Interoperability, and Trust 20:32Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI 20:31SSRF Prevention in C#: Securing…
Beyond the Endpoint: How Agent Cards Enable Discovery, Interoperability, and Trust
Imagine an employee asks an AI assistant: Can I claim this hotel expense? The assistant cannot answer the question itself, but somewhere in the enterprise…
Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful,…
