Binance has suspended deposits and withdrawals due to a security incident. Early estimates from blockchain tracking indicated that attackers may have…
SK Hynix’s Solidigm Ties $45bn US Plant to China Upgrades
Solidigm reportedly considers major flash memory plant in US, but only if administration allows it to update factory in Dalian
Fake IT help desk callers got by on little more than names and email addresses
Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening…
Authenticator token theft, Tailworm SSH flaws, UK police supplier breaches
Authenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk…
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that…
Polymarket Reportedly Hacked as Users Report Funds Stolen From Crypto Wallets
Polymarket’s international platform temporarily suspended trading after a third-party provider was compromised, leading to reports of unauthorized…
Apple Debuts First-Ever Touchscreen Mac
Apple brings out touchscreen MacBook Pro for first time, after resisting the trend for decades, on heels of M6 Macs, iPhone Duo
Critical Linux Kernel Vulnerability Lets Remote Attackers Crash Ubuntu Systems
A critical vulnerability in the Linux kernel, identified as CVE-2026-98432, threatens Ubuntu systems through a networking memory flaw that could cause…
OpenAI election war room, FEC filing disruption, Gemini Carbon debut
OpenAI opens an election war room https://www.politico.com/news/2026/10/28/openai-election-war-room-interference-01137690 Hack attempt disrupts FEC…
Hackers Launch Over 18 Million DDoS Attacks in Three Months, Cloudflare Reports
In the third quarter of 2026, Cloudflare successfully mitigated 18.2 million network-layer distributed denial-of-service (DDoS) attacks. This increase…
IT Security News Hourly Summary 2026-10-30 08h : 15 posts
15 posts published in the last hour 06:33Lessons from Cybersecurity Black Week 06:33What exactly is ISOC? And what does it mean for you? 06:33China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility 06:32Google Unveils Gemini 4 Carbon: Frontier…
Lessons from Cybersecurity Black Week
A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and…
What exactly is ISOC? And what does it mean for you?
Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going…
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited…
Google Unveils Gemini 4 Carbon: Frontier AI Model Built for Cyber Defense
HOC Shorts Google officially announced Gemini 4 Carbon, its latest frontier AI model optimized for autonomous cyber defense,…
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
Interpol’s annual Operation Serengeti, now in its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in…
Japan’s GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Japan’s GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service,…
Accenture Employee Allegedly Gave Claude Code AI Agent Administrative Access to Pentagon Systems
An Accenture employee reportedly linked a personal Claude Code account to a secure Department of Defense production environment, granting the AI coding…
ESET APT Activity Report Q2 2026–Q3 2026
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026
Accenture Contractor Allegedly Gave Claude AI Agent Access to Secure Pentagon Network
An Accenture employee allegedly gave a personal Claude Code AI agent administrative access to a secure U.S. Department of Defense environment, allowing it…
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible…
Scammers rebuild fake shopping sites within hours of a takedown
One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs…
Polymarket Hacked – Users Reported Funds Stolen From Their Wallets
Polymarket suffered a security incident on October 29, 2026, after a compromised third-party provider exposed users of its international platform to…
New Zero-Click Android Vulnerability Lets Attackers Crash Phones With a Single SMS
A recently discovered Android vulnerability, referred to as SMS of Death, allows attackers to crash a phone’s telephony process with just one malformed…