OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding…
IT Security News Hourly Summary 2026-10-21 19h : 30 posts
30 posts published in the last hour 16:34Using model routing to lower inference costs 16:34Critical PHP vulnerabilities expose most websites to potential compromise 16:34DeepSeek deep-sixed at all US federal civilian agencies 16:33US Homeland Security Orders Federal Civilian Agencies to Stop…
Using model routing to lower inference costs
Running frontier models for coding and other purposes can be very expensive, but also, sometimes, very effective. It’s tempting to use smaller or older…
Critical PHP vulnerabilities expose most websites to potential compromise
Government agencies urged organizations to take their sites offline until they could be fixed.
DeepSeek deep-sixed at all US federal civilian agencies
Order disallowing use of Chinese AI service is unhelpfully vague and broad
US Homeland Security Orders Federal Civilian Agencies to Stop Using and Remove DeepSeek AI Products
The US Department of Homeland Security issued an order on Monday directing federal civilian agencies to stop using technology products from Chinese AI lab…
Optiv Launches CyberBOT Cybersecurity Awareness Training Program
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more…
Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
Coordinated by the European Commission in cooperation with Europol, the analysis draws on stakeholder consultations, dedicated meetings, surveys and…
Assurance Retraite – 70,372 breached accounts
In September 2024, the French national pension fund Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries . The…
Your AI agent fixed the bug, but what else did it change?
Today we’re publishing patching-bugs and regression-hunt , two plugins that let engineers delegate patch development and regression checks to agents. Our…
ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: yellow Read the original article: ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142,…
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that’s being used to distribute malware such as Legion…
ICANN testing tech to let law enforcement access non-public WHOIS info
Single sign-on to help address imminent threats to life, critical infrastructure, or kids
Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving “404” or “Page Not Found” errors today: Nearly 70 percent of websites need to update their core software to fix…
Microsoft Edge Is Testing Restart-Free Security Updates: What Works Now
Microsoft has demonstrated Edge updates without restarts, but the feature is still a prototype. Here is what users and IT teams can enable today.
IT Security News Roundup: 2026-10-21 Afternoon
IT Security News: Afternoon roundup, 2026-10-21 Summary The major theme during this reporting period centers on critical emergency patches and active exploitation of foundational software assets, led by widespread remote code execution vulnerabilities in PHP core known as PHP2Shell. Alongside…
CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
Overview On October 21, 2026, the PHP project announced security releases for two critical vulnerabilities in PHP. CVE-2026-109618 can corrupt memory…
‘AdFection’ Turns Ad Impressions Into Zero-Click Spyware Delivery
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a “blank…
Patch Now: php2shell: What We Know About the Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
Initially published Oct 21st at 6 AM PT- last updated 8:40AM PT Patch Now: Ensure you are up to date with the latest version and use this link to patch…
PSA: UpdraftCentral Connection Key Compromise Used to Install Malicious Plugins on WordPress Sites
TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer…
WhatsApp’s Hidden AI Instructions Told Chatbot Not to Mention Privacy Complaints
Researchers found hidden instructions in WhatsApp Help Center pages that told its AI chatbot not to recommend certain privacy complaints to regulators.
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Second security snafu in two years