U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services…
IT Security News Hourly Summary 2026-10-22 12h : 29 posts
29 posts published in the last hour 09:34How Some Malicious AI Skills Hide Instructions from Reviewers 09:34Microsoft Links ConnectWise Hack To Chinese AI Tool 09:34Chrome Adds New “Suspicious Site” Warnings — Here’s When You’ll See Them 09:34Anthropic finds 94 cases…
How Some Malicious AI Skills Hide Instructions from Reviewers
In Part III of our “From Automation to Infection” series (following Part I and Part II ), we analyzed 35,878 AI agent skills submitted to VirusTotal and…
Microsoft Links ConnectWise Hack To Chinese AI Tool
State-aligned attackers said to have carried out ConnectWise hack as part of broader campaign using ARTEX AI-based penetration-testing tool
Chrome Adds New “Suspicious Site” Warnings — Here’s When You’ll See Them
Chrome’s new suspicious-site warnings flag potential threats before they’re confirmed dangerous. Here’s who gets them and what the alerts mean.
Anthropic finds 94 cases where open-source projects drop security controls without warning
Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team…
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working…
Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code
Siemens has confirmed that the CVE-2026-110936 vulnerability, a DLL side-loading flaw in Siemens Software Center, is being actively exploited. Attackers…
October 21 Cybersecurity Nightmare: PHP and Node.js Flaws, LiteLLM Backdoor, and Active Attacks
October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about attacks already underway. PHP…
Shares Of South Korean Data Centre Firm Plummet On Debut
South Korea’s Elice sees shares drop nearly one-third on their first day of trading, as higher borrowing costs dent AI enthusiasm
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in…
Attackers Target Flowise AI Agents With Credential Theft, Prompt Injection and Workflow Hijacking
An attacker used an exposed Flowise AI orchestration server to enumerate workflows, harvest credentials, and try to turn its language-model agent into an…
Chinese AI Tool Used In Wave Of Japanese Hacks
Tokyo-based researchers find China-developed AI penetration testing tool ARTEX used in Japan attacks, after South Korean incidents
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM on Wednesday disclosed that threat actors compromised “multiple independent security controls” to push a malicious version of the Python package…
Bolt To Test Robotaxis In Madrid Next Year
Estonian ride-hailing platform to test robotaxis using Lucid EVs, Nvidia Hyperion and Alpamayo AI software, facing off against Uber, Waymo
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon’s Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026,…
Chinese Government Launches State-Owned Data Company
China sets up state-owned enterprise to manage data resources at national level to boost AI development and broader digital economy
EU Website Outages Follow Critical PHP Flaws: What IT Teams Should Know
Critical PHP flaws forced European government websites offline. Learn which PHP versions need patches and what IT teams should do.
Authorities disrupt nearly 11,000 cybercrime networks in Africa
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which…
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and…
Signal flaw could expose audio and video even after users hang up
A flaw in Signal’s calling library could let the other person on a call keep receiving a user’s audio, and possibly video, after that user hangs up.…
Hackers Actively Exploiting Siemens Software Center Flaw in ClickFix Malware Attacks
Hackers are exploiting a DLL side-loading flaw in Siemens Software Center to run malware through a trusted, signed application. Tracked as…
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
Hackers Used Claude and Grok to Automate Cyberattacks on Over 400 Banks and Financial Firms
A cybercrime group used artificial intelligence (AI) agents to coordinate attacks against more than 400 banks, payment providers and other financial…