Artem Stryzhak gets 70 months for Nefilim and Hive ransomware attacks targeting hospitals, government agencies and businesses in the US and overseas.
Windows 11 KB5127936 update released with 41 changes and fixes
Microsoft released the KB5127936 preview cumulative update for Windows 11 versions 25H2 and 26H2, with 41 changes, including File Explorer and Cloud…
Six elements of resilient AI orchestration platforms
While many organizations are in early AI agent rollouts, research suggests that more will scale to greater numbers of agents and assistants in the coming…
ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History
ICE’s Homeland Security Investigations is engaged in far-reaching spying against left-wing activists that rivals the FBI and CIA crackdowns on the Civil…
319 Suspicious Chrome Extensions Hijack Default Search Settings Without Sensitive Permissions
An investigation into browser extensions identified 319 suspicious extensions linked to about 13.4 million reported users, exposing a search-hijacking…
New Cisco firewall zero-day exploited to crash SSL VPN devices
Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that…
IT Security News Hourly Summary 2026-10-29 13h : 24 posts
24 posts published in the last hour 11:33Apple Launches M6-Powered MacBook Pro, iMac 11:33Online Scam Volumes Double to Overtake Phishing 11:32Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net 11:32Hackers Use Fake ChatGPT and Claude Downloads on GitHub to…
Apple Launches M6-Powered MacBook Pro, iMac
New devices offer improved performance for graphics, local AI workloads, ahead of touchscreen laptop launch
Online Scam Volumes Double to Overtake Phishing
Akamai research reveals that scam detections topped six million in Q2 2026
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.
Hackers Use Fake ChatGPT and Claude Downloads on GitHub to Spread Malware
Hackers use fake ChatGPT and Claude GitHub downloads to spread Yoba malware through signed software files. Learn how the attack works and the risks for…
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
GitHub has announced that it’s introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time.…
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s…
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall…
Have an older iPhone or iPad? Apple has a security update for you
Apple has backported a fix for a CoreGraphics flaw reportedly exploited in targeted attacks to the iPhone XS, XS Max and XR, and seventh-generation iPad.
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project’s own GitLab server a week after GitLab released a fix, Alpine…
CISA Warns of VMWare ESX Logging Vulnerability Exploited in Attacks
The Cybersecurity and Infrastructure Security Agency has added a VMware ESX logging flaw to its Known Exploited Vulnerabilities catalog following evidence…
Microsoft Edge Security Flaws Allow Attackers to Execute Code Without Memory Corruption
Researcher Orange Tsai from DEVCORE has published a complete exploit chain for Microsoft Edge that successfully escapes the browser’s sandbox and executes…
IT Security News Roundup: 2026-10-29 Morning
IT Security News: Morning roundup, 2026-10-29 Summary The morning was dominated by edge-device and browser exploitation: Cisco patched a second actively exploited firewall VPN zero-day since August, a researcher showed a zero-click Microsoft Edge chain, and Volt Typhoon was tied…
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Illicit software on the computers of some of the world’s best online poker players allowed the accused cheater to see what cards were in the victims’…
Three Japan-Focused Cyberattacks Show How Hackers Use AI
Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026,…
PHP2Shell Was Exploited Before the Patch
PHP2Shell was exploited four days before its patch. Learn why exploitation is moving ahead of disclosure and how security teams can respond.
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.
Hackers Infect 17,960 Android Phones With Banking Trojans, Steal 7.6 Million SMS Messages
Hackers have compromised at least 17,960 Android devices and intercepted more than 7.6 million SMS messages in a banking malware campaign targeting India.…