Cloudflare mitigated 18.2 million DDoS attacks in Q3 2026, up 208% year over year, as shorter attacks challenged traditional network defenses.
484,142 Exposed Cloud Buckets Contain 18 Billion Files
42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team…
Binance Reports $6.3 Billion Crypto Hack as Partners Race to Freeze Funds
Binance is investigating a reported $6.3 billion crypto breach tied to a suspected DevOps laptop compromise as partners freeze assets linked to the attack.
Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android’s usual confirmation screens, and to…
Android ‘SMS of Death’ Flaw Can Drop Emergency Calls, Trigger Reboot Loops
Android flaw CVE-2026-58882 allows invisible SMS messages to crash telephony services, potentially disrupting emergency calls. Here’s what users should…
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox,…
New Prompt Injection Techniques Cover Agent-Planning Attacks
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: New Prompt Injection Techniques Cover Agent-Planning Attacks
Hackers Build Fake Polymarket Platforms That Rig Trades and Block Cryptocurrency Withdrawals
Criminals are copying the look of Polymarket, one of the biggest prediction market sites. They use the copies to take cryptocurrency from people who think…
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, 28th October 2026, CyberNewswire OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery on Latest Hacking…
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages
A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in trusted software…
CVE-2026-119086 – Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel
Bulletin ID: 2026-158-AWS Publication Date: 10/30/2026 10:30 AM PDT Description: FreeRTOS-Kernel is a real-time operating system kernel for…
When Threats Don’t Wait, Security Can’t Either
Dhananjay Ganjoo, Managing Director – India & SAARC The uncomfortable part of an adaptive attack is not how quickly it starts, but how quickly it can…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data
Ransomware crews are now giving the hardest parts of a network break-in to AI coding tools. A group linked to Aur0ra ransomware used Cursor AI agents to…
PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
Guardicore Labs uncovers a Ransomware detection campaign targeting MySQL servers. Attackers use Double Extortion and publish data to pressure victims.
APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian Governments
A new malware framework called NetamLoader is being used against a custom version of Windows 10 that only government bodies in Asia use. The campaign…
IT Security News Hourly Summary 2026-10-30 19h : 21 posts
21 posts published in the last hour 17:34Researchers Uncover 319 Chrome Extensions Hijacking Search Traffic 17:33Apple notifications alert victims in 99 countries about mercenary spyware infections 17:33The Good, the Bad and the Ugly in Cybersecurity – Week 44 (2026) 17:33From…
Researchers Uncover 319 Chrome Extensions Hijacking Search Traffic
Researchers found 319 Chrome extensions linked to 13.4 million installs that redirected searches through operator-controlled servers. Here’s how to check.
Apple notifications alert victims in 99 countries about mercenary spyware infections
The notifications come shortly before the Pall Mall Process is nearing final negotiations on guidelines for the use of commercial hacking tools.
The Good, the Bad and the Ugly in Cybersecurity – Week 44 (2026)
PHP2SHELL’s complexity stalls mass exploitation, attackers chain it with Fragnesia to root firewalls, and a silent Brotli fix leaves Node2Shell exposed.
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos.
Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
Cannabis smuggling from North America and Thailand in Europe has seen a sharp rise, driven by oversupply in legal markets and the adaptability of…
Pentagon Investigates Possible Cyberattacks Behind US Military Freezer Failures
The Pentagon is investigating possible cyberattacks behind freezer failures at six US military bases, raising concerns about operational technology…