HOC Shorts | Microsoft officially expanded Microsoft Defender for Endpoint to support Linux desktops and workstations, extending enterprise-grade…
Attack on BAE-managed system disrupts US bankruptcy courts
Legal eagles still plodding along with some operations, but paper and e-notices delayed until further notice
Microsoft Defender for Linux Workstations
Microsoft has launched a public preview of Defender for Linux Workstations, bringing its enterprise endpoint security platform to Linux desktop…
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The…
NCSC Cyber Security Guidance for SMEs
The National Cyber Security Centre has released comprehensive guidance aimed at helping UK small and medium-sized businesses, charities, clubs, and…
Hackers Abuse 20,000 Cloudflare Pages Domains to Push Fake Microsoft Security Alerts
Hackers have abused more than 20,000 Cloudflare Pages domains over six months to spread fake Microsoft security alerts and steer users toward scam call…
Job application scams exploit AI spray-and-pray strategy
Threat actors are targeting job seekers with fraudulent recruitment offers, taking advantage of applicants who use AI-powered tools to submit large…
iOS 27.0.1 Untethered Jailbreak Demonstrated on iPhone 18 Pro
Security researchers from the cybersecurity firm Calif demonstrated a working untethered jailbreak for iOS 27.0.1 on Apple’s newest iPhone 18 Pro. The…
BAE Systems Cyber Incident Disrupts US Bankruptcy Courts
A cybersecurity incident at defense contractor BAE Systems has caused significant disruption to the U.S.
MDR vs EDR vs SOC: What You’re Actually Buying in 2026
MDR vs EDR vs SOC explained for 2026, covering tools, monitoring, incident response, staffing and how each option supports CMMC compliance.
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe
Hackers disguise phishing as promising business opportunities
Attackers are breaking into business email accounts with short messages asking whether a company can quote on an upcoming project, the kind of request…
India Mandates Caller Name Display on 4G and Newer Networks From November 1
The Department of Telecommunications (DoT) announced on October 13, 2026, that telecom operators would be required to display registered caller names…
MITRE ATT&CK v20 Adds New AI Attack Techniques for Prompt Injection and Data Theft
MITRE released ATT&CK v20 on October 13, 2026. It adds the first Enterprise techniques for direct and indirect prompt injection, AI-enabled exfiltration…
Burger King Japan data breach exposes 11 million customer records
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server…
When AI Agents Commit Breaches, Humans May Not Be Held Liable
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
Rapid7 Intelligence Wins the 2026 Péter Szőr Award for Outstanding Research
Some awards you’re happy to receive, while others make you stop for a moment. Receiving the 2026 Péter Szőr Award this week at Virus Bulletin in Seville…
Google Chrome 155 Patches Critical Use-After-Free Flaw and Nine Additional Security Bugs
Google has released Chrome 155 to the Stable channel with 10 security fixes. One is rated Critical: a use-after-free in Prerender, tracked as…
IT Security News Hourly Summary 2026-10-16 15h : 14 posts
14 posts published in the last hour 12:31AI Data Centre Operator Firmus Cancels $5bn IPO 12:31Jev and other decision models can still be tricked with prompt injection 12:31AdFection Zero-Click Spyware Attack Hits Al Jazeera 12:31U.S. CISA adds Atlassian flaw to its…
AI Data Centre Operator Firmus Cancels $5bn IPO
Firmus had reportedly seen insufficient investor demand to justify offer price that sought sky-high $30bn valuation
Jev and other decision models can still be tricked with prompt injection
Never making type errors does not mean never making errors
AdFection Zero-Click Spyware Attack Hits Al Jazeera
Citizen Lab confirms that zero-click spyware infected Al Jazeera devices through targeted ads. Its investigation also exposes Discover-Tech’s global…
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…
AI Decision Models and Their Impact on AI SOC Platforms
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System…