Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as “PHP2Shell” put the web management…
JPN: Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout
Maddie Baker and Spencer Landers As cyberattacks continue across Japan, companies are coming to realize the great financial risk of such attacks if their…
Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users
Discover-Tech allegedly targeted Starlink users with digital ads to track their locations, according to sources cited in a new Reuters report. Digital…
Cybersecurity Incident Disrupts New Mexico Hospital Network, Forcing Patient Diversions and Clinic Closures
A cybersecurity incident caused ambulance diversions, cancelled appointments and disruptions to medical facilities around the state on Monday October 26,…
AfD – 345,439 breached accounts
In September 2026, the German political party Alternative für Deutschland (AfD) suffered a data breach which exposed 345k unique email addresses. The…
Tracking AI adoption in North Korean threat actor tradecraft
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified…
Data Breach Statistics That Matter in 2026
Understand cybersecurity megatrends with our rundown of 2026 data breach statistics [with data sourced from original studies published this year]. At…
Your Ring Doorbell Could Miss Trick-or-Treaters — Check These Settings Before Halloween
Before trick-or-treaters arrive, check your Ring Doorbell motion zones to reduce unwanted alerts and make sure visitors are detected along your walkway.
IT Security News Roundup: 2026-10-29 Afternoon
IT Security News: Afternoon roundup, 2026-10-29 Summary Active exploitation and fresh patch advisories dominated this window: CISA added Linux kernel and Broadcom VMware ESX flaws to its Known Exploited Vulnerabilities catalog, attackers began scanning for a recently patched Oracle E-Business…
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
The supply chain attack campaign’s shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
Microsoft urges Entra ID admins to migrate users to passkeys
Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice…
Warp Breach Exposes AI Agent Logs and Telemetry
Warp has disclosed a security incident involving a third party infrastructure vendor that exposed AI agent decision logs and user telemetry. Chief…
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises.
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Genesys Hack Exposes Customer Data From Internal Systems
Genesys, a California-based provider of customer experience and call-center technology, has disclosed a cyberattack in which unauthorized actors accessed…
Even after PHP2Shell, blast radius matters more than a CVSS score
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why…
French Energy Giant ENGIE Hit by Data Breach, Customer Records Accessed Through Partner Platform
ENGIE, one of the world’s largest energy companies, has notified customers in France that an unauthorized third party accessed their personal data through…
Chrome extensions with 13.4 million installs caught hijacking searches
A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users’ searches through…
Chinese National Extradited to Face Charges in $36.9 Million Cryptocurrency Fraud
A 44-year-old Chinese national has been brought to the United States from the Netherlands to answer federal charges tied to a cryptocurrency investment…
IT Security News Hourly Summary 2026-10-29 18h : 40 posts
40 posts published in the last hour 16:37Veeam Patches Critical Authorization Bypass 16:37From federal SOCs to Talos: Ryan Fetterman on practical security research 16:36Banks are blocking AI agents from customer accounts 16:36Politicians in U.S. and E.U. Say Targeted Ads Are…
Veeam Patches Critical Authorization Bypass
Veeam disclosed a critical authorization bypass vulnerability in its Backup & Replication software on October 27, 2026, that permits attackers without…
From federal SOCs to Talos: Ryan Fetterman on practical security research
What does it mean to be “blue collar” for the blue team? Ryan Fetterman discusses the realities of detection engineering, and shares his philosophy on…
Banks are blocking AI agents from customer accounts
They cite security risks. But could keeping these tools out also protect banks’ profits?
Politicians in U.S. and E.U. Say Targeted Ads Are a Security Risk
Politicians in Europe and the U.S. are speaking out against the use of advertising technology to infect targets with zero-click spyware.