North Korea’s TraderTraitor group drained about $6.36 billion from Binance wallets across ten blockchains on October 29, 2026. TRM Labs, which published…
Claude Model Builds Exploits Across Major Browsers & OSes
An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in…
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The…
Insurance industry fears potential impacts from PHP2Shell
A systemic cyber event could lead to billions of dollars in claims that exceed current risk models.
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer…
IT Security News Hourly Summary 2026-10-30 18h : 31 posts
31 posts published in the last hour 16:37Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems 16:36Anthropic: That Claude Code extension compromise… couldn’t be us 16:36Claude Builds Five Exploit Chains Targeting Chrome, Safari, Windows, and Linux 16:36Yet Another…
Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during…
Anthropic: That Claude Code extension compromise… couldn’t be us
Claudeshop fingers ‘malicious actor’ in targeted supply-chain attack on Cursor
Claude Builds Five Exploit Chains Targeting Chrome, Safari, Windows, and Linux
Anthropic’s Claude built exploit chains against Chrome, Safari, Windows, and Linux, and extracted files from a locked Pixel 9 during controlled security…
Yet Another ClickFix Campaign, (Wed, Oct 28th)
Introduction
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on…
NVIDIA SkillSpector: Complete Security Scanner for AI Agent Skills & MCP
As developers increasingly rely on autonomous AI agents to write code, manage infrastructure, and execute complex workflows, third-party…
When AI Guardrails Expose Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When AI Guardrails Expose Vulnerabilities
Hacktivists Dump Records of 41,000 DHS Employees, Citing ICE Escalation
A hacktivist group has published internal records identifying more than 41,000 Department of Homeland Security employees and contractors, in what security…
CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by…
Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of…
ISC2 Launches New AI Security Certification as Cyber Skills Demands Grow
As artificial intelligence becomes more widely adopted, cybersecurity professionals are facing growing pressure to develop new skills, understand emerging…
Sony’s So-net Breach Exposes 2.59 Million Customer Records
Sony’s So-net breach exposed 2.59 million customer records and 54,401 email passwords. Learn what was leaked and how to protect accounts from follow-on…
When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
Los Angeles County officials told CyberScoop they received multiple grand jury subpoenas investigating alleged election fraud. States and civil groups…
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected…
Hackers Target Asian Governments With New NetamLoader Malware Hidden in Windows Update Files
Kaspersky researchers have uncovered NetamLoader, a .NET loading framework built on XAML markup. It appears to be a supply-chain attack on a customized…