[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
Product Walkthrough: Bitdefender AI Visibility and Control
A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and…
‘123456’ password linked to Denmark data breach affecting 8.8M people
Local media reports three weakly protected accounts at small IT biz whose access to national register was abused
Scientists recreate a bizarre quantum effect that stops a particle cold
Oxford physicists have recreated a bizarre quantum effect in which a particle responds to a magnetic field without ever traveling through it. Using a…
Introducing macOS Mirage: Next-Generation Apple Silicon Dynamic Analysis and Sigma Detections
In November 2015, we released our first in-house macOS sandbox, Box of Apples , followed by an update in March 2018 that introduced HTML behavior reports,…
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
At TechCrunch Disrupt, Flock CEO Garrett Langley defended his company’s surveillance technology despite growing privacy concerns, arguing that its…
IT Security News Hourly Summary 2026-10-15 03h : 3 posts
3 posts published in the last hour 00:31Hackers heat up supermarket fridges, spoiling food across France 00:01CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab 00:00IT Security News Hourly Summary 2026-10-15 02h : 7 posts
Hackers heat up supermarket fridges, spoiling food across France
A cyberattack on supermarket temperature-control systems in France left spoiled food, empty shelves, and reports of fires.
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD…
IT Security News Hourly Summary 2026-10-15 02h : 7 posts
7 posts published in the last hour 23:31Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions 23:31Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference 23:31Attackers claim to have stolen…
Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions
IntroductionZscaler ThreatLabz analyzed a recently active exploitation campaign in which a threat actor abused ARTEX to target South Korean financial…
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
A ransomware negotiator attended a cybersecurity conference, only to be arrested by the FBI in connection with its investigation into the ShinyHunters…
Attackers claim to have stolen 80 million South African patient records in massive Ampath Laboratories data breach (Disputed)
Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker…
Physicists discover “astonishing” property of light that defies expectations
Scientists have uncovered a surprising hidden ability of light that allows it to develop spinning, twisting behavior as it travels through empty space,…
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks…
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any…
IT Security News Hourly Summary 2026-10-15 01h : 15 posts
15 posts published in the last hour 22:31Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant 22:31UK Regains Early Access to AI Models After Reported White House Reversal 22:31U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog 22:06IT…
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.
UK Regains Early Access to AI Models After Reported White House Reversal
UK researchers regain access to advanced AI models for safety testing as ministers consider stronger incident reporting and expand government cyber…
U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog. The U.S.…
IT Security News Roundup: 2026-10-14 Evening
IT Security News: Evening roundup, 2026-10-14 Summary This news cycle highlights a dual surge in severe infrastructure breaches and aggressive security enforcement, ranging from physical operational attacks on supermarket cooling systems to major multi-vendor patching campaigns. Critical zero-day and maximum-severity…
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Officials disrupted the cybercrime marketplace in April and arrested the alleged 20-year-old operator at that time. Illicit sales reportedly exceeded…
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
Data Governance Is a Security Control, Not a Compliance Checkbox
I’ve spent years fixing broken Glue jobs and Lake Formation permissions as an AWS support engineer, then moved to pre-sales architecture for banking data…