ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told…
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its…
Hackers Infect 953 Online Stores With Scanner-Evading Code
Attackers have infected 953 online stores with a scanner-evading JavaScript loader since July 2025
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters’ PeopleSoft 0-day turns out to involve three vulns
Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
Arctic Wolf warned that the function enables highly effective social engineering attacks, which lead to incidents such as ransomware
CVE-2026-115415 – Secret masking bypass in the environment tool in Strands Agents Tools
Bulletin ID: 2026-154-AWS Publication Date: 10/28/2026 12:30 PM PDT Description: We identified CVE-2026-115415, an issue where the environment tool…
Copenhagen University Breach Compromises Data on Half a Million People
Hackers have stolen personal information on over 520,000 people from the University of Copenhagen
IT Security News Hourly Summary 2026-10-28 21h : 27 posts
27 posts published in the last hour 19:36CyberStrikeAI Uses 44 AI Agents to Target Japanese Organizations 19:36Researchers Uncover Compaction Smuggling Flaw That Exposes OpenAI Reasoning Traces 19:36Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills 19:35U.S. Government Disrupts FAMOUS…
CyberStrikeAI Uses 44 AI Agents to Target Japanese Organizations
CyberStrikeAI used 44 AI agents to target Japanese organizations. Learn how the attacks worked and what security teams across APAC should check.
Researchers Uncover Compaction Smuggling Flaw That Exposes OpenAI Reasoning Traces
Researchers at Xint identified a vulnerability in the OpenAI API that could expose hidden reasoning traces from advanced AI models, creating a potential…
Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills
Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group
Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.”
AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce the successful completion of our first…
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70%…
Microsoft Authenticator Flaw Scores 8.6: Android Users Must Update
Microsoft Authenticator flaw CVE-2026-80097 scores 8.6 and puts Android work account tokens at risk. Learn which versions are affected and how to stay…
Japan’s GMO Internet Urges Customers to Disconnect PCs
GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack
DreamHost Forces Password Resets Amid Ongoing Security Incident
Due to a disruption of access to DreamHost’s File Manager and webmail services as a result of an incident, certain email and FTP/SFTP accounts were forced…
Energy Giant Engie Notifies Customers of Supply Chain Breach
An undisclosed number of Engie customers have had their data compromised after a supply chain incident
Part 3 – Cybersecurity journeys: The work behind the work
The most important work I’ve done in cybersecurity would make for terrible television. There were no countdown clocks and no frantic typing, just a lot of…
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with…
Fake Court Phishing Campaign Targets More Than 100,000 Companies
Fake court notices target more than 100,000 companies in a LodaRAT phishing campaign. Learn how the attack works and what security teams should check.
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware