October 30, 2026 · 1 article
Threat Researcher’s Notebook: How Attackers Redirect Crypto Payments
October 30, 2026
This blog discusses the general trend of Clipbanker malware, why they can be successful, what specific samples look like, and how to avoid them. (ReversingLabs Blog)
October 29, 2026 · 74 articles
The Internet Does Not Go Down, but a Flaw in One Technology Can Take Many Services Offline
October 29, 2026
Unauthenticated remote code execution vulnerabilities have been found in PHP, which powers roughly 70% of the web, prompting the FBI to recommend taking unpatched sites offline.... (Joho no Todai)
Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
October 29, 2026
Embedded browsers are at the heart of the problem (The Register - Security)
JAL and ANA Customer Data Accessed Through Amadeus Breach Spanning More Than Three Years
October 29, 2026
JAL and ANA have separately announced evidence that customer data was accessed externally following unauthorized access to their reservation system provider, Amadeus. About 92,0... (Joho no Todai)
Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion
October 29, 2026
Binance probes suspicious crypto transfers worth up to $5.8 billion as Tether and Circle freeze $1.79 billion in stablecoins linked to the activity. Binance is investigating a p... (Security Affairs)
Hugging Face malware campaign returns to hijack GPUs for crypto mining
October 29, 2026
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Sep... (BleepingComputer)
Japan Airlines suffers third-party data breach exposing passenger info
October 29, 2026
Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers. [...] (BleepingComputer)
Polymarket halts trading after crypto-draining script breach, $2.5M traced
October 29, 2026
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript,... (BleepingComputer)
Anthropic-Themed Phishing Emails Bypass Top Security Tools
October 29, 2026
Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products. (Dark Reading)
Leaked DHS employee archive, Icepick, faces challenges to stay online
October 29, 2026
A DHS contractor requested its removal, while a social media site blocked links to it. It was offline for a spell before finding a new home. The post Leaked DHS employee archive... (CyberScoop)
Rethinking Cybersecurity Awareness in the AI Era
October 29, 2026
This installment of the Reporters' Notebook video series discusses some of the trends and topics from Cybersecurity Awareness Month, from using AI for better training to educati... (Dark Reading)
Limited reports of PHP bug exploitation emerge
October 29, 2026
One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S. "government affilia... (The Record)
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
October 29, 2026
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing... (The Hacker News)
484,142 Exposed Cloud Buckets Contain 18 Billion Files
October 29, 2026
42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team counted 484,142 publicly... (Security Affairs)
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
October 29, 2026
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Con... (BleepingComputer)
Claude Model Builds Exploits Across Major Browsers & OSes
October 29, 2026
An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says. (Dark Reading)
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
October 29, 2026
CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vuln... (Palo Alto Networks Unit 42)
Yoba malware hides in fake desktop versions of ChatGPT and Claude
October 29, 2026
Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found. The... (Help Net Security)
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
October 29, 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaini... (BleepingComputer)
Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
October 29, 2026
Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. "It shows significant gains... (The Hacker News)
Webinar: How to Build AI Threat Readiness Into Your Security Operations
October 29, 2026
Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models can now help attack... (The Hacker News)
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
October 29, 2026
Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s Black Lotus Labs has spent... (Security Affairs)
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
October 29, 2026
The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for sale - but with key sec... (Dark Reading)
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
October 29, 2026
An exploited flaw in the Remote Access SSL VPN service lets unauthenticated attackers remotely force ASA and FTD firewalls to reload. The post Attackers Exploit Second Cisco Fir... (SecurityWeek)
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
October 29, 2026
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October.... (The Hacker News)
VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign
October 29, 2026
(CrowdStrike Blog)
A quiet week in infosec <.<
October 29, 2026
In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all, there are still good peo... (Cisco Talos)
CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
October 29, 2026
Bulletin ID: 2026-156-AWS Publication Date: 10/29/2026 09:30 AM PDT Description: We are aware of CVE-2026-119115, an incorrect authorization issue in the issuer resolution logic... (AWS Security Bulletins)
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
October 29, 2026
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system o... (SecurityWeek)
Cloud CISO Perspectives: Introducing new $250,000 tier for Google Cloud VRP (Q&A)
October 29, 2026
Welcome to the second Cloud CISO Perspectives for October 2026. Today, Chris Betz talks with Michael Cote, our vulnerability rewards program lead, about the new tier of our Clou... (Google Cloud Blog)
Tracking AI adoption in North Korean threat actor tradecraft
October 29, 2026
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified North Korean threat act... (Microsoft Security Blog)
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
October 29, 2026
IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The post IDC MarketScape names Microsoft a Leader in the 202... (Microsoft Security Blog)
Threat Modeling With 4 Simple Questions on a White Board
October 29, 2026
A four-question exercise that CISOs can use to create a threat model that promises results, without a big spend. (Dark Reading)
How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI
October 29, 2026
Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure. The post How Secure Are US Elections? Voting Mach... (SecurityWeek)
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
October 29, 2026
NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries (Infosecurity Magazine)
GitHub Octoverse 2026: AI Agents, Citizen Developers, and the New Security Reality
October 29, 2026
GitHub’s Octoverse 2026 counted 34.3 billion commits, and over 40% of pull requests now start with an AI agent. Read to learn what the State of the Octoverse 2026 Report reveals... (GitGuardian Blog)
Microsoft fixes Remote Desktop failures caused by recent Windows updates
October 29, 2026
Microsoft has resolved a known issue that prevents non-admin users from connecting to devices via Remote Desktop when the "Administrator protection" security feature is enabled.... (BleepingComputer)
Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps
October 29, 2026
Cisco open sourced Project Quarry, a rule language for detecting AI agent attacks that only emerge across sequences of benign actions. The post Cisco Open Sources Quarry to Catc... (SecurityWeek)
Cohere’s Qwen Story: Looks More Like Model Jaggedness
October 29, 2026
Key findings On October 26, Cohere reported a puzzling incident involving Qwen3.8-Flash-Next, an open-weight model from Alibaba. The task was straightforward: write a detection... (Check Point Research)
3 Ways AI Agents Already Operate in Your Browser
October 29, 2026
AI agents can control authenticated browsers, interact with corporate applications, and access sensitive data while appearing to act as legitimate employees. Keep Aware examines... (BleepingComputer)
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
October 29, 2026
Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targ... (Cisco Talos)
Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
October 29, 2026
The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation. The post Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities appear... (SecurityWeek)
BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts
October 29, 2026
BAE Systems says no data was extracted and no PII was breached in the incident that disrupted US bankruptcy court notices for weeks. The post BAE Says No Data Extracted in Incid... (SecurityWeek)
Integrate Aquasec and Prometheus for Greater Visibility Into Runtime Security Operations
October 29, 2026
TL;DR: Maintaining runtime protection across cloud native environments requires visibility into the health of security controls and the activity they detect. Aquasec protects ru... (Aqua Security Blog)
Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)
October 29, 2026
Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw. “Our Oracle E-Business Suite decoys recorded exploratory explo... (Help Net Security)
Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants
October 29, 2026
Cloudflare mitigated over 8,200 DDoS attacks per hour in Q3 2026 as attackers shifted to shorter, high-frequency strikes. Explore the latest threat data, including the collapse... (Cloudflare Blog)
Ubuntu Core Desktop returns as Canonical’s plan for an immutable default desktop
October 29, 2026
Canonical has restarted work on Ubuntu Core Desktop, the immutable and attestable version of Ubuntu that the company says will over time become the default Ubuntu desktop. Jon S... (Help Net Security)
Windows 11 KB5127936 update released with 41 changes and fixes
October 29, 2026
Microsoft released the KB5127936 preview cumulative update for Windows 11 versions 25H2 and 26H2, with 41 changes, including File Explorer and Cloud rebuild improvements. [...] (BleepingComputer)
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
October 29, 2026
'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully' (The Register - Security)
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
October 29, 2026
A flaw in Telegram for Android allowed an attacker to run code on a victim's phone via a voice call once the victim answered, according to security startup NebuSec. The attacker... (The Hacker News)
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
October 29, 2026
26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code... (The Hacker News)
Online Scam Volumes Double to Overtake Phishing
October 29, 2026
Akamai research reveals that scam detections topped six million in Q2 2026 (Infosecurity Magazine)
Have an older iPhone or iPad? Apple has a security update for you
October 29, 2026
Apple has backported a fix for a CoreGraphics flaw reportedly exploited in targeted attacks to the iPhone XS, XS Max and XR, and seventh-generation iPad. (Malwarebytes Labs)
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
October 29, 2026
The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records. The post Hackers Steal 2.6 Million Records Fr... (SecurityWeek)
ICO Reprimands Staffordshire Police After Domestic Abuse Breach
October 29, 2026
The UK’s privacy regulator has issued a reprimand to Staffordshire Police following a serious breach of personal information (Infosecurity Magazine)
Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents
October 29, 2026
Names, offices, contact details and assignments of more than 41,000 U.S. Department of Homeland Security (DHS) employees have been leaked by a hacktivist group calling itself th... (Help Net Security)
NIK C2: The new AI-enabled command-and-control framework
October 29, 2026
Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.” (Cisco Talos)
Election Website Security: 42% of US County Sites Still Lack .gov Domains
October 29, 2026
US election websites show improved security, but weak email protection, non-.gov domains and third-party tracking still expose voters to risks. Millions of Americans will use we... (Security Affairs)
Windows 11 VM Boot Hang Reported With Linux 6.18.58 as KVM SMM Handling Is Investigated
October 29, 2026
A report says a Windows 11 VM with Secure Boot and SMM enabled hung at the UEFI screen after a Fedora 44 KVM host was updated to Linux 6.18.58. KVM maintainers requested further... (Joho no Todai)
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
October 29, 2026
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data (Infosecurity Magazine)
Admin dropped the F-bomb in a password to show hackers who was really 1337
October 29, 2026
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS (The Register - Security)
ENGIE Data Breach Exposes Customer Details and Energy Contracts
October 29, 2026
ENGIE says attackers accessed French customers’ contact and energy contract data through a partner sales tool. Banking data was not affected. French multinational energy company... (Security Affairs)
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
October 29, 2026
Researchers can't quite explain why cyber threats look so different in Italy compared to everywhere else. (Dark Reading)
Qualys CISO on what security teams can do as exploit campaigns grow
October 29, 2026
In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains... (Help Net Security)
Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)
October 29, 2026
Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it&#;x26;#;39;s convenient to play with snapshots in your lab. St... (SANS ISC)
IT bosses are confident they’ve found the certificates they don’t know about
October 29, 2026
Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because automated... (Help Net Security)
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
October 29, 2026
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Activ... (The Hacker News)
Shame and sleepless nights haunt scam victims long after the money is gone
October 29, 2026
Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report. Scam victims... (Help Net Security)
Stolen staff logins are spreading attacks between K-12 school districts
October 29, 2026
Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their staff accounts or cred... (Help Net Security)
Srsly Risky Biz: Chinese AI Can Learn to Love the West
October 29, 2026
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Nebulock . You can h... (Risky Business News)
AWS Brotli Response Removes Node.js 18 and 20 From Updated CodeBuild Images: Verify Lambda Fixes by Runtime Version
October 29, 2026
AWS's response to Brotli vulnerability CVE-2026-111497 uses different delivery mechanisms across Lambda, CodeBuild, App Runner, and other services. Whether a fix arrives depends... (Joho no Todai)
Officials seize domain of top bulletproof hosting provider Virtualine
October 29, 2026
The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all illicit-attributed inflow... (CyberScoop)
Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder
October 29, 2026
We reproduced CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js and other runtimes, and explain how to detect and remediate it. (Datadog Security Labs)
Prediction Markets Emerge as a New Vertical for Traffer Teams
October 29, 2026
Discover how Russian traffer teams use turnkey fraud infrastructure to exploit prediction markets. (Recorded Future)
Rebuild the planet
October 29, 2026
Patching can't keep pace with AI-discovered vulnerabilities. See how Chainguard plans to eliminate entire classes of security bugs by design. (Chainguard Unchained)
October 28, 2026 · 45 articles
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
October 28, 2026
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher... (The Hacker News)
Researchers uncover Volt Typhoon’s covert, ephemeral network
October 28, 2026
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure... (CyberScoop)
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
October 28, 2026
Artem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic (The Register - Security)
Wazuh and AI for Enhanced SOC Workflows
October 28, 2026
Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely o... (The Hacker News)
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
October 28, 2026
Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay... (The Hacker News)
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
October 28, 2026
Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with security controls (Infosecurity Magazine)
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
October 28, 2026
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user shoul... (The Hacker News)
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
October 28, 2026
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle p... (The Hacker News)
PHP2Shell Remote Code Execution Vulnerabilities
October 28, 2026
What is the Vulnerability? The vulnerabilities affect PHP, a widely used server-side scripting language that powers websites and web applications. They involve flaws in PHP's in... (FortiGuard Labs)
Upwind Security Raises $400 Million at $3.8 Billion Valuation
October 28, 2026
The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog The post Upwind Security... (SecurityWeek)
Lessons from Cybersecurity Black Week
October 28, 2026
A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and which generated more no... (ESET WeLiveSecurity)
ESET APT Activity Report Q2 2026-Q3 2026
October 28, 2026
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026 (ESET WeLiveSecurity)
China's Shenlong Photographed in Orbit: DIA Report Publishes High-Resolution Image of Spaceplane Resembling X-37B
October 28, 2026
A Defense Intelligence Agency (DIA) space security report includes commercial satellite imagery of China's reusable Shenlong spaceplane in orbit. The high-resolution image revea... (Joho no Todai)
GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
October 28, 2026
The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit. (Dark Reading)
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
October 28, 2026
Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns (The Register - Security)
European digital rights nonprofit noyb sues Scale AI for ‘invasive’ worker surveillance
October 28, 2026
Noyb alleges the platform in some cases records freelancers’ mouse clicks and keystrokes every few seconds and claims the collected information can be used to generate video doc... (The Record)
Unwrapping Retail Peak Season Cyber Threats
October 28, 2026
Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust. The post Unwrapping Retail... (Palo Alto Networks Unit 42)
GitHub’s npm package firewall can block brand-new versions before they install
October 28, 2026
GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new... (Help Net Security)
Moldova investigates possible foreign involvement in major government cyberattack
October 28, 2026
Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens' personal data and government digital infrastructure, according to local... (The Record)
Rotating 1,000 Service Account Passwords With Zero Outages: Why the Inventory Comes First
October 28, 2026
Rotating 1,000+ service credentials across 150+ applications with zero outages took one lesson: rotation is the last step. Here’s the six-stage SCALER method, from inventory to... (GitGuardian Blog)
Japan’s GMO Internet Urges Customers to Disconnect PCs
October 28, 2026
GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack (Infosecurity Magazine)
UK to look at making software companies liable for cyber breaches
October 28, 2026
The new U.K. budget says the government will "consider where liability for cyber breaches should sit," potentially a landmark shift for a country that has relied on voluntary co... (The Record)
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
October 28, 2026
The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said. The post Prosecutors charge Madagascar scamme... (CyberScoop)
I underestimated how fast security teams would trust AI to act in the SOC
October 28, 2026
For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I assumed... (Help Net Security)
Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine
October 28, 2026
Belarus-linked hackers are increasingly aligning their cyber operations with Russia's interests in Ukraine, researchers said Wednesday. (The Record)
Microsoft urges Entra ID admins to migrate users to passkeys
October 28, 2026
Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in Febru... (BleepingComputer)
PostgreSQL Anonymizer 3.3 Fixes Residual Statistics in CVE-2026-110183: Reanalysis Depends on Privileges
October 28, 2026
PostgreSQL Anonymizer 3.3 fixes issues including original values remaining in statistics after a table is anonymized. It attempts to refresh statistics after static masking, but... (Joho no Todai)
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
October 28, 2026
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data. (Dark Reading)
Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users
October 28, 2026
Discover-Tech allegedly targeted Starlink users with digital ads to track their locations, according to sources cited in a new Reuters report. Digital defense firm TrendAI found... (Security Affairs)
JFrog Names Nine Global Winners for Inaugural Software Supply Chain Excellence Awards
October 28, 2026
JFrog announced completion of the first-ever Software Supply Chain Excellence Awards, recognizing the teams who have turned their software supply chain into a competitive advant... (JFrog Security Research)
Chrome and Firefox Updates Patch Over 200 Vulnerabilities
October 28, 2026
The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared firs... (SecurityWeek)
Banks are blocking AI agents from customer accounts
October 28, 2026
Banks say third-party AI agents put customer accounts at risk. Is security the only concern? (Malwarebytes Labs)
TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
October 28, 2026
FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers. The post TLS Flaws Found in GoAhead Web Serv... (SecurityWeek)
LABScon26 Replay | Keynote: A Sober Analysis of AI Impact
October 28, 2026
Harvard Professor James Mickens weighs the promises of AI against its potential harms, arguing for hardware-based mechanisms to isolate frontier models. (SentinelLabs)
VMware SDDC Manager Vulnerability CVE-2026-111497 Rated 9.8 in the 9.1.1 Series
October 28, 2026
A Brotli decompression vulnerability has been identified in SDDC Manager, which manages VMware virtual infrastructure, with a CVSS score of 9.8 for the 9.1.1 series and 7.5 for... (Joho no Todai)
When AI Guardrails Expose Vulnerabilities
October 28, 2026
(CrowdStrike Blog)
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
October 28, 2026
Company chiefs believe the attackers could be the same as those who used ARTEX to breach South Korea’s financial giants (The Register - Security)
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers
October 28, 2026
CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2... (Security Affairs)
Chrome and Firefox updates fix serious security flaws. Install them now
October 28, 2026
Google and Mozilla released security updates for Chrome and Firefox on October 27. Update your browser as soon as you can. (Malwarebytes Labs)
Studying Fraudulent North Korean IT Workers
October 28, 2026
Researchers set up a fake start-up company to study fraudulent North Korean IT workers. (Schneier on Security)
Long-Hidden Flaws Patched in EPICS Research Facility Control Software
October 28, 2026
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs. The post Long-Hidden Flaws Patched in EPICS Res... (SecurityWeek)
Three Japan-Focused Cyberattacks Show How Hackers Use AI
October 28, 2026
Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026, Japanese companies and o... (Security Affairs)
Waiting on a Node.js Upgrade? Build a Stopgap with the Controls You Own
October 28, 2026
Executive Summary Node.js has fixed CVE-2026-111497, a Brotli decoder flaw that can permit remote code execution, in 22.23.4, 24.22.1, and 26.12.1, but upgrading at scale is slo... (Qualys Blog)
Risky Bulletin: Moldova takes down 80+ public services after cyberattack
October 28, 2026
In other news: White House launches second cybersecurity pilot program; South Korea arrests AI-assisted cybercrime ring; Electrum wallet patches crypto-stealing bug. (Risky Business News)
GMO Desktop Cloud Attack: Attacker Site's Domain Suspended, but Users Must Still Protect Their Accounts
October 28, 2026
The attacker site's domain has been suspended following unauthorized access to Onamae.com Desktop Cloud, potentially affecting 26,739 servers, with unauthorized FX trades report... (Joho no Todai)