Understand cybersecurity megatrends with our rundown of 2026 data breach statistics [with data sourced from original studies published this year]. At…
Your Ring Doorbell Could Miss Trick-or-Treaters — Check These Settings Before Halloween
Before trick-or-treaters arrive, check your Ring Doorbell motion zones to reduce unwanted alerts and make sure visitors are detected along your walkway.
IT Security News Roundup: 2026-10-29 Afternoon
IT Security News: Afternoon roundup, 2026-10-29 Summary Active exploitation and fresh patch advisories dominated this window: CISA added Linux kernel and Broadcom VMware ESX flaws to its Known Exploited Vulnerabilities catalog, attackers began scanning for a recently patched Oracle E-Business…
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
The supply chain attack campaign’s shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
Microsoft urges Entra ID admins to migrate users to passkeys
Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice…
Warp Breach Exposes AI Agent Logs and Telemetry
Warp has disclosed a security incident involving a third party infrastructure vendor that exposed AI agent decision logs and user telemetry. Chief…
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises.
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Genesys Hack Exposes Customer Data From Internal Systems
Genesys, a California-based provider of customer experience and call-center technology, has disclosed a cyberattack in which unauthorized actors accessed…
Even after PHP2Shell, blast radius matters more than a CVSS score
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why…
French Energy Giant ENGIE Hit by Data Breach, Customer Records Accessed Through Partner Platform
ENGIE, one of the world’s largest energy companies, has notified customers in France that an unauthorized third party accessed their personal data through…
Chrome extensions with 13.4 million installs caught hijacking searches
A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users’ searches through…
Chinese National Extradited to Face Charges in $36.9 Million Cryptocurrency Fraud
A 44-year-old Chinese national has been brought to the United States from the Netherlands to answer federal charges tied to a cryptocurrency investment…
IT Security News Hourly Summary 2026-10-29 18h : 40 posts
40 posts published in the last hour 16:37Veeam Patches Critical Authorization Bypass 16:37From federal SOCs to Talos: Ryan Fetterman on practical security research 16:36Banks are blocking AI agents from customer accounts 16:36Politicians in U.S. and E.U. Say Targeted Ads Are…
Veeam Patches Critical Authorization Bypass
Veeam disclosed a critical authorization bypass vulnerability in its Backup & Replication software on October 27, 2026, that permits attackers without…
From federal SOCs to Talos: Ryan Fetterman on practical security research
What does it mean to be “blue collar” for the blue team? Ryan Fetterman discusses the realities of detection engineering, and shares his philosophy on…
Banks are blocking AI agents from customer accounts
They cite security risks. But could keeping these tools out also protect banks’ profits?
Politicians in U.S. and E.U. Say Targeted Ads Are a Security Risk
Politicians in Europe and the U.S. are speaking out against the use of advertising technology to infect targets with zero-click spyware.
European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
U.S. CISA adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities…
From industry concern to practical action: the value of working with regulators
How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrity
Some Early iPhone Duo Buyers Report Screen Defects
Some early users of Apple’s first foldable iPhone report defect that causes cracks in inner screen, amid strong initial demand
How to Choose the Best Managed IT Service Provider for Businesses
Knowing how to choose the best managed IT service provider for a business can influence… How to Choose the Best Managed IT Service Provider for Businesses…
Federal bankruptcy courts contractor says no data stolen during cyber intrusion
“No data was extracted,” a spokesperson for BAE Systems, a federal contractor, told Recorded Future News about its probe into a cyberattack against its…