UK-based secure data exchange specialist DOQEX has achieved Cyber Essentials certification, adding another recognised security standard to its existing…
Decades-Old Windows Utility Powers Modern ClickFix Attack
The attack uses malicious Google search results related to Amazon and leverages the “finger” utility to launch a CAPTCHA that installs malware, including…
Operation Serengeti III: Three Years of Collaboration Against Cybercrime
Fortinet examines Operation Serengeti III and three years of collaboration with INTERPOL and the World Economic Forum Cybercrime Atlas to disrupt…
Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers
Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than 25 legitimate…
Agentic AI helps hackers level up, even without detailed instructions
Low-skilled hackers are likely to become a lot more dangerous over the next 12 months, CrowdStrike warned.
OVHcloud CLI Packages on GitHub Were Replaced With Secret-Stealing Malware
Attackers replaced the binary releases of OVHcloud’s open-source CLI tool on GitHub with malicious builds designed to harvest secrets from developer…
Microsoft shares how to fix broken Exchange Online EWS apps
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working. […]
FCC bans two devices with surveillance chips linked to Huawei
The banned items — a wireless video transmitter and dashboard camera — are made with chips manufactured by Huawei subsidiary HiSilicon, which markets its…
What Is Scareware? How to Spot and Remove Fake Alerts
Scareware uses fake virus alerts to scare you into paying or downloading malware. Learn how to spot these pop-ups, remove them and keep your devices safe.
“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities
An investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, and database exfiltration.
European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
Custom Guardrails: The AI Rules No Vendor Can Write for You
Key takeaways Only 14 percent of organizations say they have formal GenAI policies that are actively enforced and audited, according to Check Point’s 2026…
Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign
Symantec, which discovered the operation, urged companies to scan their networks for signs of compromise.
Critical HPE Aruba AOS-8 Flaw Allows Hackers to Bypass SSH Authentication and Take Over Systems
Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass vulnerability in the SSH daemon of its AOS-8 wireless operating system.…
Huntress Expands Ingram Micro Partnership Across Canada and Latin America
Cybersecurity company Huntress has expanded its distribution partnership with Ingram Micro into Canada, Latin America and the Caribbean, strengthening its…
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
One in three people now tune out scam warnings, and scammers are counting on it.
New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lures and decoy content…
GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.
CVE-2026-87911
Read this article
PHP2Shell: What the Vulnerability Means and Why Patching Is Urgent
Two critical security vulnerabilities in the core of PHP affect a large proportion of websites – from personal WordPress blogs and online stores to…
When the attacker becomes the user: Rethinking account takeover
SPONSORED FEATURE: AI makes phishing easier than ever
CYBER BRIEFING | October 22, 2026
PHP RCE pair hits 9.2: patch now or pull sites offline
Quest Diagnostics Breach: What Patients Should Know
Quest Diagnostics is investigating a breach of its Quanum lab portal. Learn what is known about patient data exposure and what patients should do next.
Critical Node.js Brotli Decoder Bug (CVE-2026-111497) Allow RCE
HOC Shorts | Node.js released security updates across all supported active release lines (22.x, 24.x, and 26.x) addressing…