Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”
12 SOAR Tools: The 2026 Buyer’s Verdict Guide
SOAR’s 2026 question is sustainability: which builder model code, low-code, or no-code will your actual team keep shipping with after the demo glow fades?…
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline
Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls
Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure Firewall Adaptive Security…
Amazon Launches Alexa Gadgets, Cuts Jobs In Devices Unit
Amazon reportedly cuts up to 250 jobs in devices unit, as it announces range of gadgets promoting updated Alexa AI service
12 SIEM Tools: The 2026 Buyer’s Verdict Guide
SIEM purchases fail by buying someone else’s SOC the wrong pricing architecture for your log profile, the wrong engine for your team’s skills and 2026…
UNM Health Cyber Incident Diverts Ambulances, Disrupts Patient Care
A cyber incident forced UNM Health to divert ambulances and pause outpatient care, highlighting why hospital response plans must protect patient services.
Volt Typhoon Hackers Exploit Multiple Zero-Days to Breach U.S. Critical Infrastructure Networks
Chinese state-sponsored hacking group Volt Typhoon has exploited multiple previously unknown vulnerabilities in enterprise management platforms to…
IT Security News Hourly Summary 2026-10-29 11h : 19 posts
19 posts published in the last hour 09:33Virtualine Domain Seized, but Allegedly Abusive Website Remains Online 09:33Admin dropped the F-bomb in a password to show hackers who was really 1337 09:33Ex-Merseyside Police Officer Founds $400m AI Start-Up 09:32HTTP2Shell: The Brotli…
Virtualine Domain Seized, but Allegedly Abusive Website Remains Online
The FBI seized Virtualine, a hosting service accused of supporting criminal sites, ignoring abuse reports and helping launder money from illegal…
Admin dropped the F-bomb in a password to show hackers who was really 1337
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
Ex-Merseyside Police Officer Founds $400m AI Start-Up
Former senior UK police officer wins Silicon Valley backing for start-up valued at nearly $400m to develop AI tools for law enforcement
HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js
The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.…
Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept…
ENGIE Data Breach Exposes Customer Details and Energy Contracts
ENGIE says attackers accessed French customers’ contact and energy contract data through a partner sales tool. Banking data was not affected. French…
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine.…
12 Threat Intelligence Platforms (TIP): The 2026 Buyer’s Verdict Guide
A TIP earns its keep in decisions changed per month blocks pushed, hunts launched, patches reprioritized and 2026’s field spans premium all-source graphs,…
HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.
Social media addiction affects older adults too
Social media addiction is often discussed as a problem affecting teenagers. Yet older adults can also spend more time on social platforms than they…
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization’s…
CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom…
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data
11 User & Entity Behavior Analytics (UEBA) Tools: The 2026 Buyer’s Verdict Guide
UEBA earns its keep on attacks that look like logins stolen credentials used plausibly, insiders drifting toward exits and fails on unexplainable scores…
Meta Postpones New Commercial Terms After ‘Theft’ Complaints
Meta indefinitely suspends new commercial terms after publishers, digital advertisers complained over use of content for AI training