Apple’s iOS 27.2 fixes 163 security vulnerabilities, including WebKit and privacy flaws. IT teams should review updates across managed devices.
Japan internet giant GMO says hackers posted stolen customer data
Japan’s GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.
Hackers Launch 8,200 DDoS Attacks Every Hour, Cloudflare’s Latest Report Reveals
Cloudflare blocked an average of more than 8,200 network-layer DDoS attacks every hour during the third quarter of 2026, showing how attackers are using…
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in…
IT Security News Hourly Summary 2026-10-29 20h : 36 posts
36 posts published in the last hour 18:36Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users 18:36Claude Model Builds Exploits Across Major Browsers & OSes 18:36Artificial Intimacy: Love and lies in the age of AI 18:35Threat Brief:…
Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users
As interest in new AI tools accelerates, cybercriminals are finding ways to exploit the trust surrounding them. Check Point Research (CPR) has uncovered…
Claude Model Builds Exploits Across Major Browsers & OSes
An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
Artificial Intimacy: Love and lies in the age of AI
Our latest report reveals how AI is reshaping our relationships, blurring what feels authentic, and creating new ways for intimacy to be exploited.
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.
Insurance industry fears potential impacts from PHP2Shell
A systemic cyber event could lead to billions of dollars in claims that exceed current risk models.
Process trees in Livehunt: YARA rules that know who launched what
Note: YARA-X v1.21.0 adds a parent_name field to the items in vt.behaviour.processes_list, and v1.22.0 adds ancestor_names. VirusTotal now fills that list…
UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became…
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration…
OpenAI bets on AI economics with lower-cost GPT-6.1 Terra
OpenAI has launched GPT-6.1 Terra, a new reasoning model that it says delivers near-frontier performance on visual reasoning, professional task execution,…
Zoom Launches AI Guardrails for Enterprise Security
Zoom has announced new enterprise security features designed to give administrators greater control over AI agents operating within their collaboration…
Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
We are pleased to share that we have been named winner of Advanced Persistent Threat (APT) Solution of the Year at the Computing Security Awards for ESEC…
ThreatAware Launches Dimension Governed Workspace
ThreatAware has introduced Dimension, a new governed workspace platform designed to help organizations build, deploy, and manage custom security…
When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
Apple patches 286 bugs in iOS, macOS 27.2
Apple has released major security updates for iOS and macOS version 27.2, patching a total of 286 vulnerabilities across both platforms.
When AI Guardrails Expose Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When AI Guardrails Expose Vulnerabilities
CISA 2030 Strategy Released
The Cybersecurity and Infrastructure Security Agency has released a comprehensive strategic plan called CISA 2030: Defend, Harden, Prevail, setting the…
Yet Another ClickFix Campaign, (Wed, Oct 28th)
Introduction
CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by…