AI, global conflict and supply chain security are likely to be top of mind at many of the year’s big events.
Politicians in U.S. and E.U. Say Targeted Ads Are a Security Risk
Politicians in Europe and the U.S. are speaking out against the use of advertising technology to infect targets with zero-click spyware.
Hackers Use Cursor and Claude AI to Automate Attacks in Aur0ra Ransomware Operations
The GOLD OGRE cybercrime group is using AI coding agents, including Cursor and Anthropic’s Claude, to automate intrusions for Aur0ra ransomware (Aurora).…
China-Linked Hackers Exploit PHP2Shell
Cybersecurity researchers have identified a campaign by China-linked threat actors who successfully compromised two servers at a US government-affiliated…
Genesys Hack Exposes Customer Data From Internal Systems
Genesys, a California-based provider of customer experience and call-center technology, has disclosed a cyberattack in which unauthorized actors accessed…
Tracking AI adoption in North Korean threat actor tradecraft
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified…
Malicious Claude Code extension on Cursor planted SSH backdoors
A malicious version of Anthropic’s Claude Code VS Code extension was distributed through Cursor’s extension marketplace for approximately 11 hours on…
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Warp Breach Exposes AI Agent Logs and Telemetry
Warp has disclosed a security incident involving a third party infrastructure vendor that exposed AI agent decision logs and user telemetry. Chief…
Ukrainian Hacker Sentenced for $100M Ransomware
A Ukrainian national has been sentenced to nearly six years in federal prison for his role in a global ransomware campaign that caused an estimated $100…
Moldova Probes Possible Foreign State Involvement in Major Cyberattack Exposing Government Data
The Moldovan authorities are looking into whether the large cyber attack, which caused sensitive personal data to be breached and dozens of state services…
Cisco open sources AI agent behavior detection tool
Cisco has open-sourced Project Quarry, a behavior detection engine designed to monitor AI agents and prevent security incidents by analyzing complete…
French Energy Giant ENGIE Hit by Data Breach, Customer Records Accessed Through Partner Platform
ENGIE, one of the world’s largest energy companies, has notified customers in France that an unauthorized third party accessed their personal data through…
IT Security News Hourly Summary 2026-10-30 16h : 39 posts
39 posts published in the last hour 14:38There’s a Security Deal Hiding in Your Customer’s Browser 14:37European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking 14:37U.S. CISA adds Linux Kernel and Broadcom VMWare ESX flaws to…
There’s a Security Deal Hiding in Your Customer’s Browser
Discover how the Akamai Workforce Protector Partner Playbook helps you secure browser AI interactions, eliminate data visibility gaps, and close deals.
European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
U.S. CISA adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities…
DHS Data Leak Exposes 41,000 Workers, Including ICE Agents
A DHS data leak exposed records of more than 41,000 workers, including ICE agents. Learn what was leaked, the suspected access method, and security risks.
Undead Software Projects Continue to Raise Security Risks
A security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers.
How Rapid7 InsightGovCloud Supports BOD 22-01 Compliance
An introduction to CISA’s BOD 22-01 Issued nearly four years ago, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) Binding Operational…
Passkeys Are Better Than Passwords. But They Are Not Enough.
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a…
CVE-2026-111497: Brotli DoS in WordPress
A severe vulnerability in the Brotli compression library is enabling attackers to crash WordPress sites with minimal effort, exploiting a flaw in how the…
EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft
EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar…