Three days is the average time between a high-severity vulnerability becoming public and its exploitation, according to the latest Quarterly Threat…
Attackers Hijacked 300+ Tor Exit Relays
More than 300 Tor exit relays fell under attacker control in early October 2024, enabling a large-scale credential theft operation targeting SSH users.
Gemini-Compatible AI Browsers Could Help Scammers Run Thousands of Fake Accounts, Researchers Warn
Antidetect browsers tools that create separate browser profiles with altered digital fingerprints could help scammers operate thousands of apparently…
Google Gemini AI gains personal intelligence in Android Auto
Google has expanded Gemini AI capabilities in Android Auto and vehicles with Google built-in by integrating Personal Intelligence features that access…
Sekoia + Zimperium: Investigate Mobile Threats In Your SOC
Connect Zimperium Mobile Threat Defense with Sekoia so Sekoia Elevate AI agents investigate mobile alerts in the context of your whole SOC.
Training AIs to Solve CAPTCHAs
Interesting research : Abstract : Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them…
Microsoft PowerToys adds CursorHide, Button Lock mouse tools
Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements. […]
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been…
OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor
In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it.
Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)
PHP.net announced that it will release a critical update today. We decided to change the infoCon to YELLOW due to the widespread use of PHP, the expected…
ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants
Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access…
Spyware found on devices belonging to prominent Serbian critics as elections loom
The confirmed and suspected targets include a university rector backing Serbia’s protests and a prosecutor who investigated a Trump-linked Belgrade…
The Autonomous Enterprise: What Happens When Work Runs Itself?
AI agents are taking on enterprise workflows. Explore when human judgement matters and how to measure the business value of greater autonomy.
Millions of California students’ sensitive data stolen in breach
The California Department of Education notified students about a data breach at contractor Educational Testing Service.
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant.
US Cybersecurity Job Postings Drop 26% as AI Security Demand Surges
While the demand for artificial intelligence security specialists continued to grow, cybersecurity job postings decreased to a four-year low in 2026 in…
Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports
Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused…
The Autonomous Enterprise: Head-to-Head
AI agents are taking on enterprise workflows. Explore when human judgement matters and how to measure the business value of greater autonomy.
IT Security News Hourly Summary 2026-10-21 15h : 26 posts
26 posts published in the last hour 12:35From pilots to production: The four disciplines that make generative AI work 12:35Q-day is coming: How to prepare for post-quantum security challenges 12:34US Government Orders DeepSeek Out of Federal Civilian Systems 12:34Signal bug…
From pilots to production: The four disciplines that make generative AI work
This series lays out a practical framework for taking generative AI (GenAI) from pilots to dependable production systems in the enterprise. It focuses on…
Q-day is coming: How to prepare for post-quantum security challenges
Q-day is coming. Discover how to prepare your IT infrastructure for post-quantum security challenges.
US Government Orders DeepSeek Out of Federal Civilian Systems
PHP prepares emergency patches for two critical RCE flaws, while older, unsupported versions could remain exposed without vendor fixes. The U.S.…
Signal bug could let someone keep listening after you hang up
A flaw in Signal’s calling library could let another participant keep hearing you after you hang up. Update your app to get the latest fixes.
AI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackers
Consider this the wake-up call