Cybersecurity researchers have uncovered an espionage campaign, believed to be conducted by APT41, targeting diplomatic organisations in Tajikistan,…
Pentagon ignored cybersecurity flaws before data breach, Marines’ lawsuit says
Daniel Terrill reports: A pair of Marines filed a class-action lawsuit Tuesday against the Pentagon over a data breach at the Defense Manpower Data…
Cyberattack forces University of New Mexico Health to divert ambulances, cancel appointments
DysruptionHub reports: A cyberattack forced the University of New Mexico Health System to divert ambulances and cancel clinic appointments Monday,…
Hackers Are Serving Malware To iPhones Via Hundreds Of Infected Websites
Thomas Brewster reports: Crypto thieves are targeting iPhone users at scale with a sneaky kind of cyberattack that only requires victims to view an ad or…
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys,…
Covered California Agent Data Exposed In Phishing Attack
John & Rusty Report: An attacker used a “phishing” strategy to get unauthorized access to Covered California agent information spreadsheets May 13,…
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
Artem Stryzhak participated in a series of ransomware attacks on hospitals, government entities and law firms from the middle of 2018 to late 2021.
IN: 9 servers of Bajaj Hospital hacked in cyberattack at 3 am, sensitive data stolen; systems encrypted
The Lokmat Times Desk reports: A cyber attack on the digital systems of Kamalnayan Bajaj Hospital has sent shockwaves through the city. Around midnight,…
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key…
Conduent to pay $80M to settle 3rd-largest healthcare data breach
Bruce Giles reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over the third-largest healthcare…
IT Security News Hourly Summary 2026-10-27 20h : 10 posts
10 posts published in the last hour 18:40CVE-2026-115413 – AWS API MCP Server OAuth token audience validation bypass 18:40October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities 18:39CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch…
CVE-2026-115413 – AWS API MCP Server OAuth token audience validation bypass
Bulletin ID: 2026-152-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/27/2026 11:00 AM PDT Description: The AWS API MCP…
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its…
Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills
Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce the successful completion of our first…
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and…
U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
CVE-2026-85228 – Integer overflow in tensor buffer validation in Deep Java Library
Read this article
Brotli bug reaches far beyond Node.js (CVE-2026-111497)
A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497…
IT Security News Hourly Summary 2026-10-27 19h : 23 posts
23 posts published in the last hour 17:46CVE-2026-89065 and CVE-2026-89066: Issue with projen – Path traversal and OS command injection 17:46CVE-2026-89049 – Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent 17:46Part 3 –…
CVE-2026-89065 and CVE-2026-89066: Issue with projen – Path traversal and OS command injection
Read this article
CVE-2026-89049 – Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
Read this article
Part 3 – Cybersecurity journeys: The work behind the work
The most important work I’ve done in cybersecurity would make for terrible television. There were no countdown clocks and no frantic typing, just a lot of…