Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust.
Fake crypto app on Apple App Store linked to $23K wallet theft
A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of…
Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
The timing of these capabilities remains uncertain. However, this should not be the main concern. Adapting systems and coordinating security upgrades will…
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and…
Student SSNs and Medicaid IDs Exposed in Frontline School Software Breach
Kalleigh Lane reports: If your school district used Frontline Central or School Health Management, your Social Security number, date of birth, or…
IT Security News Hourly Summary 2026-10-30 20h : 27 posts
27 posts published in the last hour 18:36Critical Drupal Commerce Vulnerability Could Let Hackers Buy Products for Just $0.01 18:35Australia severs criminal access to 180,000 computers after breaching Amadey malware backend 18:35The Nansh0u Campaign – Hackers Arsenal Grows Stronger 18:35Wordfence…
Critical Drupal Commerce Vulnerability Could Let Hackers Buy Products for Just $0.01
Drupal has warned that hackers are actively exploiting a highly critical security flaw in Commerce Core, putting online stores at risk of financial…
Australia severs criminal access to 180,000 computers after breaching Amadey malware backend
Lukas Brandt writes: Criminals using the Amadey malware lost control of about 180,000 infected computers after operators from the Australian Signals…
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses…
Wordfence Bug Bounty Program Monthly Report – July 2026
In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to…
CVE-2026-119117 – Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
Bulletin ID: 2026-159-AWS Publication Date: 10/30/2026 11:00 AM PDT Description: We published CVE-2026-119117. Insertion of sensitive information into a…
Fake PS5 Emulators on GitHub Spread Malware to Gamers
Hackers are using fake PS5 emulator repositories on GitHub to distribute malware. Learn how the infection works and what gamers can do to stay safe.
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX…
Almost 50 arrested as police target Western Balkan network linked to killings
Nearly 50 suspects have been arrested in an international operation targeting a drug trafficking network with Western Balkan members, linked to killings,…
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Snoops ‘likely still’ have access to US government-affiliated network
Cloudflare Blocks 8,200 DDoS Attacks per Hour as Threats Surge
Cloudflare mitigated 18.2 million DDoS attacks in Q3 2026, up 208% year over year, as shorter attacks challenged traditional network defenses.
484,142 Exposed Cloud Buckets Contain 18 Billion Files
42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team…
Binance Reports $6.3 Billion Crypto Hack as Partners Race to Freeze Funds
Binance is investigating a reported $6.3 billion crypto breach tied to a suspected DevOps laptop compromise as partners freeze assets linked to the attack.
Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android’s usual confirmation screens, and to…
Android ‘SMS of Death’ Flaw Can Drop Emergency Calls, Trigger Reboot Loops
Android flaw CVE-2026-58882 allows invisible SMS messages to crash telephony services, potentially disrupting emergency calls. Here’s what users should…
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox,…
New Prompt Injection Techniques Cover Agent-Planning Attacks
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: New Prompt Injection Techniques Cover Agent-Planning Attacks
Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals
Criminals are copying the look of Polymarket, one of the biggest prediction market sites. They use the copies to take cryptocurrency from people who think…
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, 28th October 2026, CyberNewswire OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery on Latest Hacking…