Cisco Talos has uncovered NIK C2, a Go-based, 64-bit Windows remote access tool that embeds a working OpenAI client. Operators can send prompts through an…
Apple Launches M6-Powered MacBook Pro, iMac
New devices offer improved performance for graphics, local AI workloads, ahead of touchscreen laptop launch
Binance links $6.3 billion crypto theft to compromised DevOps laptop
Binance, the world’s largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer’s compromised laptop. […]
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
IT Security News Hourly Summary 2026-10-30 11h : 20 posts
20 posts published in the last hour 09:34Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls 09:34Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data 09:34Have an older iPhone or iPad?…
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall…
Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data
A grey market relay service is quietly installing the real OpenAI Codex and Anthropic Claude Code tools on company computers. It then changes their…
Have an older iPhone or iPad? Apple has a security update for you
Apple has backported a fix for a CoreGraphics flaw reportedly exploited in targeted attacks to the iPhone XS, XS Max and XR, and seventh-generation iPad.
Microsoft Fixes Remote Desktop Connection Failures Following Recent Updates
Microsoft resolved a Windows 11 issue that blocked non-admin users from connecting via Remote Desktop when Administrator protection was enabled, releasing…
Open-weight AI model GLM-5.3 cheated its way to correct answers
Irregular evaluated Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench, the company’s framework for measuring…
CISA Warns of GitLab Integer Overflow Vulnerability Exploited in Attacks
The Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting CVE-2026-97229. This GitLab vulnerability could allow code…
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Illicit software on the computers of some of the world’s best online poker players allowed the accused cheater to see what cards were in the victims’…
Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root Access
Attackers are chaining zero-day flaws in Ivanti Connect Secure VPN appliances to gain unauthenticated root access, exposing stored credentials and…
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project’s own GitLab server a week after GitLab released a fix, Alpine…
Researcher Uses Claude AI to Extract Internal Anthropic Binary and Recover Google Cloud Token
A security researcher got Claude AI to hand over an internal Anthropic program and a memory dump that held pieces of a working Google Cloud token. The…
Claude AI Exposes Internal Sandbox Details That Help Researcher Bypass Local Connection Restrictions
A Bishop Fox researcher investigating Claude’s sandbox obtained an internal control binary, recovered authorization tokens from process memory, and…
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Drupal has warned that threat actors are exploiting a “highly critical” security flaw in its Commerce Core component. The vulnerability, tracked as…
Simplifying .NET toolchain installs with dotnetup
If you’ve experimented with Rust , you already know how simple it is to get a basic toolchain in place, with the simple rustup command-line tool. The same…
5th EMPACT Hackathon leads to the detection of 51 potential victims
An international operation involving 40 experts and investigators from 20 countries has identified 51 potential victims of human trafficking, as well as…
TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.
FCC Approves Amazon Leo’s $11.5bn Globalstar Buy
US communications regulator gives green light for Amazon’s bid to add GlobalStar’s two dozen satellites to its constellation
Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access
A trojanized version of the Claude Code extension, identified as anthropic.claude-code version 2.1.313, contains a malicious loader that enables…
Israel Ad-Tech Company ‘Targeted Starlink Users For Surveillance’
Researchers reportedly found Israeli ad-tech company abused ad-bidding process in effort to identify, track Starlink users
WordPress 7.1.4 Fixes 22 Security Vulnerabilities, Including RCE Flaw Under Active Attack
WordPress released version 7.1.4 on October 28, 2026, which addresses 22 security vulnerabilities. Among them is an unauthenticated remote code execution…