U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited…
Cyber Incident at BAE Systems Disrupts Critical US Judicial Services
In response to an incident involving BAE Systems, bankruptcy-related services across US federal courts have been disrupted, halting the production and…
NordVPN CTO on NGAV and AI-era security
NordVPN has introduced what it calls next-generation antivirus (NGAV), a security product designed to address threats that have evolved far beyond…
IT Security News Hourly Summary 2026-10-17 13h : 6 posts
6 posts published in the last hour 10:31Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified 10:06IT Security News Roundup: 2026-10-17 Morning 10:02YouTube adds AI-generated music labels 10:01Microsoft: Windows Server 2022 reached end…
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
CEO said the workers were hired in Q2 and are still helping today
IT Security News Roundup: 2026-10-17 Morning
IT Security News: Morning roundup, 2026-10-17 Summary Artificial intelligence dominates this period as both a powerful defense mechanism and an emerging vector of vulnerability, with research demonstrating AI's ability to solve decades-old cryptographic mysteries while state-sponsored threat actors actively leverage…
YouTube adds AI-generated music labels
YouTube has begun rolling out a new labeling system that identifies music tracks created or modified using artificial intelligence.
Microsoft: Windows Server 2022 reached end of mainstream support
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. […]
UK Legal Aid Agency breach exposes 250K records from 1978
The UK government revealed that a cyberattack on the Legal Aid Agency in April 2025 compromised far more historical data than initially disclosed, with…
IT Security News Hourly Summary 2026-10-17 12h : 10 posts
10 posts published in the last hour 09:31AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns 09:31France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack 09:31Saudi OpenAI engineer charged with planting spy device 09:31Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic…
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
India’s CERT-In warns AI agents accessed confidential data undetected, while attackers used offensive AI frameworks to accelerate cyberattacks. CERT-In,…
France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack
Saudi OpenAI engineer charged with planting spy device
Federal authorities have charged Abdulrahman Alfozan, a 35-year-old Saudi national working as an engineer at OpenAI, with planting a covert surveillance…
Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds for five NIST elliptic curves in under 30…
RL Maps Midnight Blizzard Campaign Using AI Evasion
ReversingLabs has published detailed analysis of a Russian espionage campaign linked to Midnight Blizzard (also tracked as APT29, Cozy Bear, and NOBELIUM)…
Legal Aid Agency cyberattack: Compromised data goes back to 1978
Tevye Markson has an update on the April 2025 breach of the UK’s Legal Aid Agency, previously reported on this site: A new update on the Legal Aid Agency…
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh.…
Is this link safe? Find out with Malwarebytes Scam Link Check
Not sure if a link is safe? Malwarebytes Scam Link Check scans suspicious links for signs of phishing, scams, malware, and other online threats before you…
OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root…
IT Security News Hourly Summary 2026-10-17 11h : 6 posts
6 posts published in the last hour 08:31GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories 08:31X purges 13,000 accounts linked to suspected meddling ahead of US midterms 08:31SideCopy Hackers Target Indian Organizations With ReverseRAT Malware…
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises malicious JavaScript as a font file and…
X purges 13,000 accounts linked to suspected meddling ahead of US midterms
Platform points to Iran, Russia, and China but provides no public evidence for attribution
SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with spear-phishing attacks that…
Researchers Uncover Thousands of Phishing Domains Hiding Behind Inactive Pages
A domain returns a blank page. Maybe a generic “Not Found” message. There is no login form, suspicious branding, or obvious phishing content to…