Misaligned incentives led to an intractable argument
Encryption isn’t enough to protect data wherever it goes
Once data is in use, encryption falls short. A tested approach that replaces sensitive values with realistic substitutes could make stolen information far…
Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
Five suspects linked to the organisation and recruitment of serious violence have been arrested in Spain, Morocco, and France, in the latest results of…
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws
PHP will release emergency fixes for two critical RCE flaws rated 9.2, as researchers warn of potential risks to exposed and unsupported systems. PHP is…
China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors
Sophos found BRONZE SANDCASTLE abusing legitimate Windows apps to load encrypted backdoors, collect system information and steal Active…
PHP2Shell Exploitation Attempt Detected by Amazon Four Days Before Vulnerability Disclosure
Threat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities
Hackers Use Fake App Updates to Replace Legitimate Banking Apps With Malicious Versions
Hirudo, an Android banking remote-access trojan (RAT) that can steal credentials and remotely control an infected phone. Its most unusual feature is the…
IT Security News Roundup: 2026-10-22 Morning
IT Security News: Morning roundup, 2026-10-22 Summary This roundup highlights a growing trend of threat actors weaponizing artificial intelligence, as seen in AI-assisted attacks across Latin America and Asia alongside malicious AI agent skills designed to subvert code reviews. Alongside…
Delivery bots accused of illegally scanning customers
Two lawsuits allege delivery robots scanned customers’ faces without consent, linked scans to names and addresses, and used them to train AI.
CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint…
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations…
Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers
Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than 25 legitimate…
Eight reasons coding agents are better than software developers
I can’t stop anthropomorphizing my coding agent. I use both Claude Code and Cursor , and whenever I talk about these tools, I always refer to them as…
Security Serious Unsung Heroes Awards Celebrates 10 Years of Recognising Cybersecurity’s Hidden Heroes
Organised by Eskenzi PR, the tenth annual awards ceremony took place at St Barts Pub in London, bringing together cybersecurity professionals, educators,…
Anthropic ‘Lost $80bn’ In First Half Of Year
Start-up’s net loss reportedly rose to $80bn in the first half of this year, as it expects up to $750bn in compute costs
Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account
The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident
5th EMPACT Hackathon leads to the detection of 51 potential victims
An international operation involving 40 experts and investigators from 20 countries has identified 51 potential victims of human trafficking, as well as…
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Unknown threat actors breached TeamUpdraft’s website and potentially gained unauthorized access to customers’ connection keys for UpdraftCentral,…
PHP2Shell Exploitation Started Days Before Patches
Initial attempts were observed on October 17, and mass activity began shortly after patches were released.
How AI is changing software pricing
In 2026, the AI monetization conversation has shifted quickly from one concern to the next. Early in the year, fears that AI agents would erode software…
U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases
U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services…
IT Security News Hourly Summary 2026-10-22 12h : 29 posts
29 posts published in the last hour 09:34How Some Malicious AI Skills Hide Instructions from Reviewers 09:34Microsoft Links ConnectWise Hack To Chinese AI Tool 09:34Chrome Adds New “Suspicious Site” Warnings — Here’s When You’ll See Them 09:34Anthropic finds 94 cases…
How Some Malicious AI Skills Hide Instructions from Reviewers
In Part III of our “From Automation to Infection” series (following Part I and Part II ), we analyzed 35,878 AI agent skills submitted to VirusTotal and…
Microsoft Links ConnectWise Hack To Chinese AI Tool
State-aligned attackers said to have carried out ConnectWise hack as part of broader campaign using ARTEX AI-based penetration-testing tool