Android users can transfer passwords and passkeys between compatible password managers. Here’s how Credential Exchange works, how to import into…
Anthropic Finds Ingredients for Future AI Worms
Anthropic’s latest study combined IoT and network tests to explore AI self-replication, which researchers said would be “challenging” to shut down.
FBI arrests OpenAI employee accused of planting hidden recording device in conference room
It’s not clear exactly for what purpose the recording device was used, but FBI director Kash Patel said the scheme was to “capture sensitive…
Critical Next.js SVG Image Processing Vulnerability Could Enable Remote Code Execution
Vercel has released an out-of-band security update for Next.js that fixes two critical remote code execution (RCE) flaws and one high-severity…
Top 8 Penetration Testing Tools to Enhance Your Security in 2026
Compare the best penetration testing tools for 2026, including pricing, key features, use cases, and top picks for modern security teams today.
IT Security News Hourly Summary 2026-10-15 13h : 32 posts
32 posts published in the last hour 10:34Microsoft disrupts phishing network behind more than a billion scam messages 10:34Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies 10:34Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise…
Microsoft disrupts phishing network behind more than a billion scam messages
Microsoft uncovered a criminal marketplace supplying tools and accounts used in phishing scams worldwide. Attackers used these resources to target…
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
Attackers exploit a critical Cisco email gateway flaw to gain root access. Cisco urges customers to update scanner tools and check for compromise. Cisco…
LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys
Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI…
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no…
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand…
ADINT: Weaponized Ad Tech for Zero-Click Spyware and Mass Identity Vacuuming
Confiant Threat Intelligence – security@confiant.com
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online…
Citrix Patches XenServer Vulnerabilities That Could Enable Host Compromise
Citrix has released security updates for XenServer 8.4 and XenServer 9. The updates fix several vulnerabilities, three of which could let a malicious…
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory…
FTC says ‘sextortion’ protection companies deceived customers about services
A federal lawsuit claims that Dmitry Belkin and his companies routinely failed to deliver on services to protect customers, generated fake evidence and…
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker…
U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S.…
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity…
IT Security News Roundup: 2026-10-15 Morning
IT Security News: Morning roundup, 2026-10-15 Summary This news cycle highlights the escalating double-edged sword of artificial intelligence, as attackers increasingly weaponize autonomous agents while enterprise teams struggle to govern AI permissions and code. Meanwhile, regulatory bodies and security agencies…
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was…
Cartoon Network Leak Exposes 200GB of Source Files, Storyboards and Animation Assets
A large cache of internal Cartoon Network production material is circulating online. It reportedly exceeds 200GB and includes source files, storyboards…
Almost 50 arrested as police target Western Balkan network linked to killings
Nearly 50 suspects have been arrested in an international operation targeting a drug trafficking network with Western Balkan members, linked to killings,…