Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability,…
IT Security News Hourly Summary 2026-10-29 21h : 34 posts
34 posts published in the last hour 19:36AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder 19:36Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers 19:36484,142 Exposed Cloud Buckets Contain 18…
AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder
A security firm has found that placing a disguised instruction file inside a user’s Downloads folder is enough to manipulate AI coding agents into…
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Snoops ‘likely still’ have access to US government-affiliated network
484,142 Exposed Cloud Buckets Contain 18 Billion Files
42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team…
Wordfence Bug Bounty Program Monthly Report – July 2026
In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to…
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff…
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses…
Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android’s usual confirmation screens, and to…
CISA, security researchers confirm successful exploitation of PHP flaws
The security community has come under increased scrutiny as earlier threat warnings were slow to materialize.
Almost 50 arrested as police target Western Balkan network linked to killings
Nearly 50 suspects have been arrested in an international operation targeting a drug trafficking network with Western Balkan members, linked to killings,…
Dutch Police Arrest Two Over $400,000 NFC Relay Bank Fraud
Dutch police have arrested two men suspected of operating a sophisticated bank-fraud scheme that used NFC relay attacks to steal more than €380,000,…
PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
Guardicore Labs uncovers a Ransomware detection campaign targeting MySQL servers. Attackers use Double Extortion and publish data to pressure victims.
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox,…
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
uCreator Android Spyware Targets Telegram and WeChat Accounts With Credential Theft and Cloning
A commercial Android surveillance toolkit known as uCreator can compromise Telegram accounts by capturing two-factor authentication (2FA) passwords and…
New Prompt Injection Techniques Cover Agent-Planning Attacks
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: New Prompt Injection Techniques Cover Agent-Planning Attacks
Malware Campaign Infects 953 Online Stores in Prolonged Attack
In the past two years, 953 online stores, primarily Magento-based websites, have been compromised by malicious JavaScript code injected into their…
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, 28th October 2026, CyberNewswire
New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding
The US Treasury proposes tighter China investment restrictions covering AI, biotechnology and advanced chips. Here’s what businesses and investors should…
US government says hackers are now exploiting critical PHP web bugs
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web’s software.
The CISO’s evolving role: Protecting and defending in the agentic era
As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity and data guardrails, and…
National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
Like the water sector initiative, the six-month pilot program will connect rural hospitals with industry for free services.