9 posts published in the last hour 07:32CISA Warns SafePay Ransomware Has Hit 600+ Organizations and Destroyed Backup Systems 07:31Naval hack, Muse exposes secrets, Army researching offensive AI hacking 07:31Cable Thieves Disrupt South Yorkshire Networks 07:31PHP2Shell: Mass Exploitation Looms for…
CISA Warns SafePay Ransomware Has Hit 600+ Organizations and Destroyed Backup Systems
CISA has warned that SafePay ransomware actors have compromised at least 600 organizations across multiple critical infrastructure sectors, combining data…
Naval hack, Muse exposes secrets, Army researching offensive AI hacking
Russian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html Muse exposes secrets when sharing…
Cable Thieves Disrupt South Yorkshire Networks
Thousands left without internet, telephone service for two days after thieves steal cables, amid ongoing crime ‘spike’
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
SBI Confirms Data Breach – 3000+ Customer Records Exposed on Dark Web
State Bank of India (SBI) has disclosed a data loss incident after a preliminary review identified 3,897 customer records containing personal information…
UK Regulator Pushes Apple To Open Up Contactless Tech
Current Apple offering for third-party contactless payments not working, says CMA, as it proposes lower fees, broader technical access
Meta Muse AI Privacy Flaw Exposes Confidential Business Data Through Shared Chat Links
Meta has paused Muse AI’s conversation sharing feature after a privacy flaw exposed confidential business records and personal details through…
Now ChatGPT Chrome Extension Can See and Analyze the Content in Open Tabs
OpenAI has expanded its ChatGPT Chrome extension so the assistant can read information across open tabs and carry out browser tasks. The update moves…
IT Security News Hourly Summary 2026-10-21 09h : 10 posts
10 posts published in the last hour 06:32Privacy-preserving AI can protect your heart data, the bill is the problem 06:32Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI 06:32Rust 1.100 Will Let Developers Block Fresh Cargo Packages to Reduce…
Privacy-preserving AI can protect your heart data, the bill is the problem
A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model…
Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader.
Rust 1.100 Will Let Developers Block Fresh Cargo Packages to Reduce Malware Supply Chain Risks
Rust 1.100, scheduled for November 12, 2026, will introduce stable support for Cargo dependency cooldowns, allowing developers to reject newly published…
Google Blames Power Outage For Widespread Cloud Disruption
Power issue blamed for outage at London data centre that roiled services for hours across banking, businesses, courts
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections
Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The…
INC Ransomware Hackers Use Claude AI, Expose 8,257 Messages and 46 Malware Builds
Ransomware affiliates associated with INC and The Gentlemen exposed an intrusion ecosystem after leaving operational servers publicly accessible. The…
Is the ad a scam? How to tell before you click
You can trust a social media platform and still get scammed by an ad running on it
DevGuard: Open-source vulnerability management for the software supply chain
DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk,…
Microsoft Introduces New Bug Bounty Rules That Could Affect Security Researchers’ Rewards
Microsoft has introduced new rules for assessing reports in its bug bounty programs, tying submission completeness more directly to potential rewards.…
IT Security News Hourly Summary 2026-10-21 08h : 9 posts
9 posts published in the last hour 05:32PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert 05:31WordPress Backup Plugin Developer Hacked to Inject Malicious Code on Installed Sites 05:31Why security tools lose sight of the credential…
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on…
WordPress Backup Plugin Developer Hacked to Inject Malicious Code on Installed Sites
TeamUpdraft, the developer behind the UpdraftPlus WordPress backup plugin, has disclosed a website breach that exposed remote management keys. Attackers…
Why security tools lose sight of the credential
Security teams have tools for code, endpoints, cloud infrastructure, identity, and secrets management. Credentials cut across all of them. A developer…
Hackers Exploit Compromised UpdraftCentral Keys to Install Malicious Plugins on WordPress Sites
Attackers exploited compromised UpdraftCentral connection keys to send trusted remote-management commands to WordPress sites, ultimately installing…