By HOC Team | Updated: October 2026 | Read time: ~18 min JSON Web Tokens (JWTs) have become…
Tag: EN
IT bosses are confident they’ve found the certificates they don’t know about
Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate…
Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)
Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it&#;x26;#;39;s convenient to play with…
US Homeland Security Data Breach Exposes Personal Details of Over 41,000 Employees
A newly disclosed data leak has exposed personal and professional information on more than 40,000 U.S. Department of Homeland Security employees,…
WordPress 7.1.4 Security Update Patches 22 Vulnerabilities Affecting Millions of Websites
WordPress has released version 7.1.4 to address 22 vulnerabilities, including issues related to remote code execution, stored cross-site scripting,…
Hackers Turn Compromised Websites Into Fake Cloudflare Verification Traps for Windows and Mac Users
Attackers are using compromised websites to present fake Cloudflare verification pages that steer Windows and macOS users toward executing malicious…
Shame and sleepless nights haunt scam victims long after the money is gone
Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer…
CyberDakait Hackers Target Indian Banking Users, Compromise 17,960 Android Devices
CyberDakait, a financially motivated Android malware operation targeting Indian banking customers since July 2025. Researchers identified at least 17,960…
Stolen staff logins are spreading attacks between K-12 school districts
Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their…
Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 Firewall Servers
Hackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems…
Risky Bulletin: Moldovan public services crippled by cyberattack
Moldova takes down more than 80 public services after a cyberattack, the White House launches a new cybersecurity pilot program, South Korea arrests an…
Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers
Hackers combined PHP2Shell vulnerabilities with a Linux kernel exploit to gain root access on 25 servers across the United States, Japan, Taiwan, and…
Hackers Exploit PHP2Shell to Root 25 Servers – Including US Government Affiliates
HOC Shorts | The Breaking Discovery: Cybersecurity researchers uncovered a campaign in which attackers chained the PHP2Shell remote…
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains people’s contact…
Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks
Fortinet’s FortiAIGate is bringing AI security controls to enterprise workloads on Oracle Cloud Infrastructure (OCI), helping businesses inspect prompts,…
WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability
WordPress released version 7.1.4 on October 28, 2026, fixing 22 security flaws, including an unauthenticated remote code execution vulnerability in its…
Hackers Leak Records of 41,000 DHS Personnel, Exposing Undercover ICE Agents
A leak of records covering more than 41,000 Department of Homeland Security employees and contractors has exposed contact details, work assignments, and…
ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156,…
WatchGuard Discloses 7 Critical Firewall Flaws Allowing Remote Code Execution and Root-Level Attacks
WatchGuard disclosed seven critical Fireware OS vulnerabilities in an October 27, 2026 advisory, affecting Firebox firewalls and potentially enabling…
Srsly Risky Biz: Chinese AI can learn to love the West
Tom Uren and Amberleigh Jack talk about new research that shows that Chinese open-weight AI models can be reeducated to remove pro-CCP bias. Good news for…