11 posts published in the last hour 08:3212 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing 08:31Security researchers spent 6 days doing their Chromework, built 1B user exploit 08:31CenterPoint Energy Data Breach: More Than 1 Million Texans…
12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing
NowSecure and Data Theorem mobile security lead automated mobile testing, Guardsquare owns shielding/obfuscation, and Corellium’s virtual devices changed…
Security researchers spent 6 days doing their Chromework, built 1B user exploit
Xbow earned a $250K bug bounty and all the AI model got was a lousy t-shirt
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected
The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint…
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online – Built-in CODE Server, to plant web shells on Nextcloud servers. Three…
12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing
Your CI platform’s native controls (GitHub Advanced Security, GitLab Ultimate) are the baseline, Cycode and Legit lead dedicated pipeline posture, and…
12 Best SBOM Tools Compared (2026): Features & Pricing
Anchore’s Syft SBOM generator is the free generation standard, FOSSA and Cybeats lead SBOM management, and Finite State owns the embedded/OT depth…
SAP Patches Critical S/4HANA Flaw: What Security Teams Should Check
SAP’s October update fixes a critical S/4HANA code injection flaw and NetWeaver memory corruption. See affected systems, risks, and patching priorities.
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating system,…
Microsoft Patches Two Dozen RCE Flaws in Office
In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.
BAE Systems cyberattack disrupts US federal court operations
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal…
IT Security News Hourly Summary 2026-10-16 10h : 16 posts
16 posts published in the last hour 07:32XWorm RAT Evolves Into Advanced Surveillance Malware 07:32User refused to change her password because everyone already knew it 07:31Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis 07:31Apate sends AI agents undercover to…
XWorm RAT Evolves Into Advanced Surveillance Malware
Remote access trojan (RAT) XWorm has developed into an advanced surveillance threat whose capabilities extend beyond data theft and remote system control.…
User refused to change her password because everyone already knew it
School staff seemed to be trying to get ransomware – for a second time
Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Most companies use AI agents to ship products faster or speed up workflows. Apate.ai sends them undercover to get scammed.
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential…
Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers
CenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click…
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust…
Zero Trust in Practice: Moving Beyond the Buzzword
Zero trust has become one of the most overused terms in security marketing, often applied to products that simply add another layer of network…
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
In its October Patch Tuesday, the tech giant addressed more defects in one month than any annual total on record. Nearly 4 in 5 vulnerabilities affect…
BeyondTrust patches zero-day exploited in attacks since August
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late…
Fake WatchGuard VPN site steals credentials, then serves the genuine signed client
Huntress researchers have uncovered an SEO-poisoning campaign that harvests SSL VPN credentials through a lookalike WatchGuard download page, then hands…
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands…