access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet. First seen on wired.com Jump to article: www.wired.com/story/hackers-exploited-the-php-vulnerabilities-days-before-they-were-patched/ also interesting: Russian APT28 hackers have redoubled efforts during Ukraine war, says French security agency Cybersecurity Snapshot: CISA’s Best Cyber Advice on Securing Cloud, OT,…
-
Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside
Imagine buying a brand new hardware wallet for your cryptocurrency with the shrink-wrap still on… what could possibly be hiding inside? We break out a Geiger counter and a cat to find out. First seen on grahamcluley.com Jump to article: grahamcluley.com/smashing-security-podcast-489/ also interesting: Ghost in the Machine: A Spy’s Digital Lifeline Ghost in the Machine:…
-
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/google/google-chrome-adds-gemini-powered-scam-detection-warns-users-of-clickfix-attacks/ also interesting: Cybersecurity Snapshot: Global Agencies Target Criminal “Bulletproof” Hosts, as CSA Unveils Agentic AI Risk Framework Cybersecurity Snapshot: Global Agencies Target Criminal…
-
CIOs Are Accountable for AI Agents They Can’t Fully Control
Agent Sprawl Leaves Technology Leaders Unable to Measure Results or Contain Risk. CIOs face mounting pressure to prove AI returns, but many can’t determine whether their agents are delivering business results or quickly contain those that behave unexpectedly, and research shows why technical monitoring alone is no longer enough. First seen on govinfosecurity.com Jump to…
-
Chrome puts insecure sites behind a permission prompt
Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by default for all users, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/22/google-chrome-https-protection/ also interesting: Emergency Chrome Update to Fix Actively Exploited CVE-2025-5419 Exploit-Welle zwingt Unternehmen zum schnellen Update –…
-
Metr Challenges Anthropic’s Claims About AI Safeguards
Independent Evaluator Says Low Model Risks Stem From Limited Capabilities, Not Guardrails. Metr found that Anthropic overstated how strong its monitoring and safeguards are in defending against risks posed by its frontier models. Metr agreed with Anthropic’s determination that the risk of catastrophic harm from its models are low, but it is not because of…
-
Wie die künstliche Intelligenz Online-Betrug und Kontoübernahmen in großem Stil ermöglicht
Angesichts der bevorstehenden Wahlen in mehreren Ländern zeigt eine Studie von Check Point Research auf, wie handelsübliche Tools in Kombination mit KI den Betrieb großer Netzwerke gefälschter Online-Identitäten erleichtern könnten. Die Untersuchung befasst sich mit Anti-Detect-Browsern Tools, die es einem einzelnen Betreiber ermöglichen, Tausende von Browserprofilen zu verwalten, von denen jedes den Anschein erweckt, […]…
-
SentinelOne CEO’s 5 Boldest AI Statements At OneCon 2026
The arrival of ultra-powerful frontier AI models has rapidly dismantled practically all core assumptions of cybersecurity over the last year”, requiring an equally massive shift in cyber defenses that can keep pace with the potential for autonomous cyberattacks and out-of-control agents, SentinelOne co-founder and CEO Tomer Weingarten said Wednesday. First seen on crn.com Jump to…
-
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-attributes-connectwise-supply-chain-attack-china-storm-0940/ also interesting: China-linked hackers target Japan’s national security and high-tech industries China-linked hackers target Japan’s national security and high-tech industries Cybersecurity…
-
TiDB Breach Exposes Flawed Cloud Security Assumptions
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/tidb-breach-flawed-cloud-security also interesting: Identity-First Security: Mitigating the Cloud’s Greatest Risk Vector Microsoft handed over BitLocker keys to law enforcement, raising enterprise data control…
-
Japan’s Onamae Desktop Cloud hacked, up to 27,000 servers affected
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers’ servers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japans-onamae-desktop-cloud-hacked-up-to-27-000-servers-affected/ also interesting: Cybersecurity Snapshot: Tenable Highlights Risks of AI Use in the Cloud, as UK’s NCSC Offers Tips for Post-Quantum Cryptography Adoption…
-
New Acronis CEO Seeks MSP Growth Through Platform Expansion
Company Looks to Extend Its Cyber Resilience Roots Into Managed Detection Services. Former WatchGuard CEO Prakash Panjwani is leading Acronis’ push to consolidate MSP security spending through open MDR and XDR integrations, AI-driven remediation and technician automation, with plans to expand adoption across 21,000 partners and define an acquisition strategy by early 2027. First seen…
-
More and More Cyber Jobs Require AI Expertise
But There’s No Consensus Way to Assess Levels of Skill. A growing number of cybersecurity jobs require not just a baseline familiarity with AI tools, but significant AI expertise, according to an analysis of validated job vacancies in the field. The Sans Institute analyzed a two-day job market snapshot of 6,193 active postings. First seen…
-
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine
A Russian satellite made a close approach to a commercial radar satellite linked to Ukraine, raising concerns about surveillance and security in space. A Russian-made satellite called Kosmos 2612 got very close to ICEYE-X36 last week, a commercial Earth-observation satellite that may support countries like Ukraine. CNN reports it may have come within less than…
-
‘PHP2Shell’ Bugs Signal Red Alert for Security Industry
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/php2shell-bugs-red-alert-security-industry also interesting: Azure Health Bot Service Vulnerabilities Possibly Exposed Sensitive Data Sitecore zero-day vulnerability exploited by attackers (CVE-2025-53690) OpenClaw integrates VirusTotal malware scanning as security firms flag enterprise risks…
-
Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/cloud-security-alliance-survey-data-loss-prevention-detects-data-loss also interesting: The silent security gap in enterprise AI adoption The multi-billion dollar mistake: Why cloud misconfigurations are your biggest security threat Public Amazon bucket…
-
Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/marvell-microsoft-oracle-standardize-data-center-hardware-security also interesting: What is Security Posture Management and Why is it Important? What is Security Posture Management and Why is it Important? What is Security Posture…
-
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/lazarus-hackers-use-post-quantum-cryptography-for-malware-delivery/ also interesting: The most notorious and damaging ransomware of all time North Korean APT Hackers Compromise CI/CD Pipelines to Steal Sensitive Data Top 10 Cybersecurity…
-
US, UK and Germany Warn of Active SafePay Ransomware
Vertically Integrated Double-Extortion Group Hacks 13 Victims in 12 Days. U.S., U.K. and German agencies warned that SafePay ransomware has compromised at least 600 organizations since August 2024, exploiting VPN, firewall and backup software vulnerabilities to steal data and encrypt systems, often within 24 hours of initial access. First seen on govinfosecurity.com Jump to article:…
-
US, UK and Germany Warn of Active SafePay Ransomware
Vertically Integrated Double-Extortion Group Hacks 13 Victims in 12 Days. U.S., U.K. and German agencies warned that SafePay ransomware has compromised at least 600 organizations since August 2024, exploiting VPN, firewall and backup software vulnerabilities to steal data and encrypt systems, often within 24 hours of initial access. First seen on govinfosecurity.com Jump to article:…
-
Utah OKs 3 Health-AI Pilot Apps for ‘Regulatory Sandbox’
Test Projects Focus on AI-Enabled Drug Prescriptions, Physical Therapy Treatment. Utah has given the green light for three more healthcare technology companies to test out how their AI systems can safely provide services such as prescribing and refilling certain medications and providing AI-augmented physical therapy plans for specific health conditions. First seen on govinfosecurity.com Jump…
-
Weak Certificates From Indian CA Cause Cascade of Updates
eMudhra Says It Mistakenly Used Weak Certificates to Sign 8 Intermediary Certs. An Indian certificate authority revoked intermediate certificates after a researcher found it used a private encryption key that was only one byte in length, making it trivial for hackers to recover the key and issue their own fraudulent certs. The issue has the…
-
Compromised eMudhra intermediate certificates
Tags: ciscoCisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/compromised-intermediate-certificates/ also interesting: Cybersecurity Snapshot: CISA Hands Down Cloud Security Directive, While Threat from North Korean IT Workers Gets the Spotlight CISA Warns of Exploited Critical Vulnerabilities in Cisco Identity Services Engine New…
-
Meta on the spot for $25 billion under New Mexico privacy ruling
The Cambridge Analytica data privacy scandal from a decade ago is still weighing on Meta’s finances. First seen on therecord.media Jump to article: therecord.media/meta-new-mexico-penalty-cambridge-analytica-privacy-case also interesting: Meta’s still violating GDPR rules with latest plan to train AI on EU user data, says noyb Australia Levies First-Ever Privacy Act Fine Over Lab Breach Bridging the EU…
-
ConnectWise Aims To Get Cloud BackUp For Microsoft 365 Up And Running By End Of This Week: CTO David Raissipour
Here is a look at how ConnectWise is aiming to provide thousands of its MSPs access by the end of this week to ConnectWise Cloud BackUp for Microsoft 365 and other services impacted by a security breach. First seen on crn.com Jump to article: www.crn.com/news/security/2026/connectwise-aims-to-get-cloud-backup-for-microsoft-365-up-and-running-by-end-of-this-week-cto-david-raissipour also interesting: Cybersecurity Snapshot: Prompt Injection and Data Disclosure Top…
-
5 Things To Know About ‘Critical’ PHP Vulnerabilities Exploitation
Two critical vulnerabilities in PHP are facing active exploitation attempts, creating an urgent need for widespread patching, according to cybersecurity researchers. First seen on crn.com Jump to article: www.crn.com/news/security/2026/5-things-to-know-about-critical-php-vulnerabilities-exploitation also interesting: Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data Exposure Smarter Threats Need Smarter Defenses: AI, APIs, and the Reality…
-
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014.The fix matters even for administrators who patched nine days earlier: the October 12 update covered only versions 19.2…
-
What to do as critical PHP flaws puts millions of websites at risk
Patch or go offline, say UK, US and EU agencies as two AI-discovered flaws in PHP, the language behind most websites, allow unauthenticated remote code execution First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652446/Critical-PHP-flaws-puts-millions-of-websites-at-risk-of-takeover also interesting: Top 12 ways hackers broke into your systems in 2024 Patch Tuesday for May: Five zero day vulnerabilities CISOs…
-
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight
OpenAI reveals two cases of AI agents disabling safety monitoring during coding tasks, with one falsely denying it had removed the safeguards. OpenAI published an internal incident report this week documenting two separate cases in which GPT-6 class agents weakened the system designed to detect misaligned behavior, in both cases while carrying out routine coding…
-
The internet is having a very bad cybersecurity day
From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/21/the-internet-is-having-a-very-bad-cybersecurity-day/ also interesting: Black Hat: Latest news and insights Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATTCK…
-
PHP releases emergency fixes for 2 critical vulnerabilities
The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw. First seen on cyberscoop.com Jump to article: cyberscoop.com/php-emergency-patches-php2shell-vulnerabilities/ also interesting: Chinese hackers breached critical infrastructure globally using enterprise network gear Top 10 Cybersecurity Predictions for 2026 NDSS 2025 Retrofitting XoM For Stripped Binaries Without Embedded…
-
Tech trio launches $10 million initiative to help under-resourced utilities bolster cybersecurity
Tags: cybersecurityUp to 500 under-resourced utilities will receive support in order to bolster their cybersecurity through a private sector initiative launched this week. First seen on therecord.media Jump to article: therecord.media/utilities-cybersecurity-initiative-accenture also interesting: New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code Pharmacy Cybersecurity Without Compromise: Reducing Costs and Protecting Patient Data at…
-
Weak encryption certificates could have let hackers easily spoof websites
Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/website-encryption-security-certificates-emudhra-incident/833622/ also interesting: Kerberoasting in 2025: How to protect your service accounts Offensive security takes center stage in the AI era When it comes to security resilience, cheaper isn’t always better TDL 020 –…
-
Mögliche Zero Days – Zwei kritische PHP-Schwachstellen bedrohen Millionen Webseiten
First seen on security-insider.de Jump to article: www.security-insider.de/kritische-php-schwachstellen-behoerden-offline-a-607c4678fa935b333a4c48f8efaca22e/ also interesting: Microsoft’s November 2024 Patch Tuesday Addresses 91 Vulnerabilities, Including Four Critical Zero-Days Italian-made spyware Dante linked to Chrome zero-day exploitation campaign Threat intelligence by ESET is a game changer Metabase 0-Day Flaw Exploited in Attack to Inject Arbitrary SQL and Steal Database Credentials
-
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index…
-
Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/ also interesting: The 2024 cyberwar playbook: Tricks used by nation-state actors Cybersecurity Snapshot: CISA’s Best Cyber Advice on Securing Cloud, OT, Apps and More F5 Security…
-
PHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/21/php-armageddon-openai-googles-wiz-find-ancient-holes-panicking-the-internet/ also interesting: Cybersecurity Snapshot: Industrial Systems in Crosshairs of Russian Hackers, FBI Warns, as MITRE Updates List of Top Hardware Weaknesses 9 top bug…
-
Democrat lawmakers say Russia is aiming to undermine party ahead of midterms
The pair stressed the latest update showed no country is pursuing the technically challenging effort to interfere with or hack into the country’s election infrastructure or tamper directly with votes. First seen on therecord.media Jump to article: therecord.media/democrat-lawmakers-say-russia-is-aiming-to-undermine-party also interesting: Romanian elections targeted with cyberattacks by foreign state-sponsored actors Time of Reckoning Reviewing My 2024…
-
OpenAI’s GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks.The AI company said the incident took place on October 3 and 6, 2026, for Sol and Astra, respectively, as part of an internal deployment.”A GPT-6.1…
-
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
A developer’s GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/ovhcloud-github-compromise-glassworm-threat-actors also interesting: Microsoft’s January 2025 Patch Tuesday Addresses 157 CVEs (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335) GitVenom Campaign Abuses Thousands of GitHub Repositories to Infect Users APT Attacks Target Indian Government…
-
Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections
New York, NY, USA, October 21st, 2026, CyberNewswire According to the 2026 Autonomous Agents Threat Report, published by Arrakis Security, 76% of active agents have not run in 60 days, but their credentials still work and their triggers still fire. 44% have not run in 180 days. 24% of dormant agents can be started by…
-
Critical PHP Patches Address ‘Very, Very Bad Vulnerability’
Immediate Updating Advised as Experts Warn Large-Scale Attacks Likely Imminent. Security experts are warning all organizations to immediately apply new fixes for two critical PHP2Shell vulnerabilities in widely used PHP that can be remotely exploited by unauthenticated attackers to run arbitrary code, take full control of the underlying server and steal data. First seen on…
-
PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024
In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened attention on both, why it scrambled to post information earlier than planned. First seen on therecord.media Jump to article: therecord.media/php-foundation-statement-critical-vulnerabilities also interesting: ISMG Editors: AI Security Wake-Up Call From…
-
Optiv Launches CyberBOT Cybersecurity Awareness Training Program
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/optiv-launches-cyberbot-cybersecurity-awareness-training-program also interesting: Cybersecurity Snapshot: AI Data Security Best Practices Released, While New Framework Seeks To Help IT Pros Gain Cyber Skills Skills gaps send CISOs…
-
OpenAI agents disabled safety monitoring, one lied about it
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/openai-agents-disabled-safety-monitoring-one-lied-about-it/ also interesting: What is SIEM? Improving security posture through event log data Invisible C2″Š”, “Šthanks to AI-powered techniques AI programming copilots…
-
Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections
New York, NY, USA, 21st October 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/arrakis-security-report-finds-76-of-ai-agents-are-dormant-but-keep-their-credentials-and-connections/ also interesting: From hardcoded credentials to auth gone wrong: Old bugs continue to break modern systems From hardcoded credentials to auth gone wrong: Old bugs continue to break modern systems Summer: Why cybersecurity must be strengthened as vacations abound…
-
Critical PHP vulnerabilities expose most websites to potential compromise
Government agencies urged organizations to take their sites offline until they could be fixed. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/php-website-vulnerabilities/833580/ also interesting: Top Democrat Demands Answers on CISA Staffing Cuts F5 Security Incident Advisory Google fears massive attempt to clone Gemini AI through model extraction Russian LAUNDRY BEAR Hackers Exploit Zimbra Zero-Day to…
-
Booking.com under investigation by EU regulators over fake listings and scams
European Commission calls accommodation website’s approach to fraudulent listings and phishing scams as ‘absolutely substandard’EU regulators have opened an investigation into Booking.com, alleging that the accommodation website has not done enough to protect consumers from fake listings and scams.The European Commission, which regulates the world’s biggest tech companies operating in the EU, said Booking.com may…
-
New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lures and decoy content designed to conceal attacks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/new-phaas-uses-ai-phishing-lures/ also interesting: Top 5 ways attackers use generative AI to exploit your systems Cybersecurity Needs Satellite Navigation, Not Paper Maps 71% of CISOs hit…
-
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server.The flaws, together called PHP2Shell, sit in the PHP…