Tom Uren and Amberleigh Jack talk about Russian targeting of Ukrainian data centres. That’s not good, but it looks like Russia is very poorly prepared for…
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts.
ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138,…
OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks
Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report.
IT Security News Hourly Summary 2026-10-16 13h : 29 posts
29 posts published in the last hour 10:33Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’ 10:33Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly 10:33Cisco Email Gateway Zero-Day Under Attack, Root Access at Risk…
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
At TechCrunch Disrupt, Flock CEO Garrett Langley defended his company’s surveillance technology despite growing privacy concerns, arguing that its…
Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly
Google says its Android scam-detection capabilities now flag more than 5 million suspected scam calls and text messages each month, as mobile fraud…
Cisco Email Gateway Zero-Day Under Attack, Root Access at Risk
Cisco Secure Email Gateway zero-day CVE-2026-76519 is under active attack. Learn which systems are vulnerable and how to patch and investigate compromise.
The $690 billion cloud spending spree
Every quarter, I look at the capital expenditure numbers coming out of the major cloud providers, and every quarter, they manage to surprise me. This…
Burger King Japan Data Breach Impacts 11.18 Million App Member Records
The Burger King Japan data breach occurred between October 2 and 7, exposing emails, birth dates and other…
Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions
IntroductionZscaler ThreatLabz analyzed a recently active exploitation campaign in which a threat actor abused ARTEX to target South Korean financial…
Fake Arch Linux AUR packages exploit typos to run malware with root privileges
Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access…
China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
The suspected PRC-aligned group Armory Castle has been observed exploiting the newly disclosed flaw for long-term persistence
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
A ransomware negotiator attended a cybersecurity conference, only to be arrested by the FBI in connection with its investigation into the ShinyHunters…
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager
PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access. PEERSTITCH, a…
CERT-In Warns Hackers Using AI Agents to Launch Cyberattacks in Just Hours
India’s cyber response agency, CERT-In, has warned that hackers are using AI agents to cut the time between gaining access to systems and causing damage…
Firefox 158 Patches 77 Security Flaws, Including Sandbox Escapes
Mozilla’s Firefox 158 patches 77 security vulnerabilities, including sandbox escapes, privilege escalation, and memory-safety flaws. Here’s what security…
MITRE ATT&CK v20 Added 9 New Attack Techniques Covering AI Exploits, MFA Bypass, and CAPTCHA Evasion
MITRE released ATT&CK v20 on October 13, adding nine Enterprise techniques that describe how attackers may target AI systems, steal application-specific…
Pop the champagne, Python 3.15 is here!
The best Python yet isn’t just faster than before. It’s also smarter at telling you what’s wrong, better at letting you profile applications, and loaded…
Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks
A cybercrime campaign has compromised at least 143 devices in 34 countries by exploiting flaws in D-Link, Ubiquiti and SAP products. The attackers…
IT Security News Roundup: 2026-10-16 Morning
IT Security News: Morning roundup, 2026-10-16 Summary The intersection of artificial intelligence and cybersecurity dominates this morning's news, with AI being leveraged both by threat actors to automate server exploitation and by researchers to discover critical flaws. Concurrently, global law…
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Officials disrupted the cybercrime marketplace in April and arrested the alleged 20-year-old operator at that time. Illicit sales reportedly exceeded…
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Langley’s comments come amid mounting scrutiny of Flock from privacy advocates, including the ACLU, and members of the public who are concerned about the…
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.