access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
it-sa 2026: Neuer Markenauftritt mit Idgard – Drivelock zeigt KI-Agenten-Kontrolle und Cloud-Wahlfreiheit
First seen on security-insider.de Jump to article: www.security-insider.de/drivelock-zeigt-ki-agenten-kontrolle-und-cloud-wahlfreiheit-a-a034c94a6c750a03d4089152fd4d2d34/ also interesting: Enhance Microsoft security by ditching your hybrid setup for Entra-only join AI looms large on the RSA Conference agenda »manage it« TechTalk: Wie ein Printmagazin das digitale IAM zum Leben erweckt Menlo Security Extends Platform Reach to AI Agents
-
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can’t quite explain why cyber threats look so different in Italy compared to everywhere else. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-analytics/cyber-vulnerabilities-besiege-italy also interesting: CISOs should stop freaking out about attackers getting a boost from LLMs Meta hit with $263 million fine in Europe over 2018 data breach CISA Issues Advisory on XWiki…
-
Cybersecurity für resiliente IT Wirkliche Sicherheit bietet nur Cyberresilienz
Die Sicherheitslage im Cyberspace bleibt angespannt. Durch die zunehmende Cloud- und KI-Nutzung wird es für Unternehmen sogar noch brisanter. Eine starke Cyberresilienz ist daher Pflicht, doch die ist nur durch kontinuierliches Monitoring und Nachjustieren der Sicherheitsinfrastruktur zu erreichen. First seen on ap-verlag.de Jump to article: ap-verlag.de/cybersecurity-fuer-resiliente-it-wirkliche-sicherheit-bietet-nur-cyberresilienz/109091/ also interesting: Why identity security is your best companion…
-
Cybersicherheit für digitale Produkte – Warum der CRA Hersteller zum Umdenken zwingt
Tags: cyersecurityFirst seen on security-insider.de Jump to article: www.security-insider.de/cra-compliance-digitale-produkte-security-by-design-sbom-a-6cab2b6a15da3ca7ca9cbfc9f9e84e89/ also interesting: Check Point gründet mit dem ExecutiveBoard einen Beirat für KI-gestützte Innovationen in der IT-Sicherheit 6 Empfehlungen für Unternehmen im Umgang mit KI-Risiken Cyberrisiken zählen zu den größten Unternehmensrisiken – Warum Cybersicherheit für ESG entscheidend ist Was Cybersicherheit und KI entgeht, wenn Frauen nicht mit am…
-
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces.”Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet,” the network security company said in an update to its advisory.The vulnerabilities, tracked as First seen on thehackernews.com Jump to…
-
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
Tags: attack, china, crowdstrike, cve, cybersecurity, exploit, flaw, hacker, infrastructure, kev, threat, vmware, vulnerability, zero-dayThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector.The vulnerability in question is CVE-2026-41709 (CVSS…
-
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
Tags: attack, china, crowdstrike, cve, cybersecurity, exploit, flaw, hacker, infrastructure, kev, threat, vmware, vulnerability, zero-dayThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector.The vulnerability in question is CVE-2026-41709 (CVSS…
-
Cloudflare Image Transformation Flaw Allows Hackers to Bypass CSP and Execute Malicious JavaScript
Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content Security Policy (CSP), enabling malicious JavaScript execution on a targeted website’s origin. Published on October 28, 2026, the research combines an XML serialization flaw, Chromium cache behavior, and redirects that circumvent image source restrictions. Exploitation depends on…
-
CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js
CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following confirmed evidence of exploitation. Added on October 27, 2026, this flaw allows unauthenticated attackers to corrupt memory, disrupt services, disclose sensitive information, or potentially execute arbitrary code through maliciously crafted compressed streams. Federal agencies have…
-
Qualys CISO on what security teams can do as exploit campaigns grow
In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/29/nathan-smolenski-qualys-ai-vulnerability-management/ also interesting: North Korean fake IT workers up the ante in targeting tech firms Act fast to blunt a new ransomware…
-
Fehlende Rechteprüfung in der API – Fehler in OpenStack Manila lässt Fremde öffentliche Freigaben steuern
Tags: apiFirst seen on security-insider.de Jump to article: www.security-insider.de/openstack-manila-cve-2026-71195-public-shares-manipulieren-a-1ca34b7cb0ade9a7aae95686145b2a40/ also interesting: PyPI Python Library “aiocpa” Found Exfiltrating Crypto Keys via Telegram Bot Research Finds That API Security Blind Spots Could Put AI Agent Deployments at Risk Large Language Model (LLM) integration risks for SaaS and enterprise Why AI Agents Need Least Privilege Too, and How to…
-
GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
The supply chain attack campaign’s shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/ghostaction-hacking-wave-fizzles-attackers-github also interesting: 25 on 2025: APAC security thought leaders share their predictions and aspirations Cybersecurity Snapshot: CISA Highlights Vulnerability Management Importance in Breach Analysis, as Orgs…
-
Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 Firewall Servers
Tags: access, credentials, cyber, data-breach, exploit, firewall, flaw, government, hacker, linux, theft, vulnerabilityHackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems associated with a United States government-affiliated environment, according to Dream researchers. Discovered on October 25, the operation progressed from exposed firewall management interfaces to credential theft, persistent tunneling, and Active Directory reconnaissance. Dream recovered…
-
US Homeland Security Data Breach Exposes Personal Details of Over 41,000 Employees
A newly disclosed data leak has exposed personal and professional information on more than 40,000 U.S. Department of Homeland Security employees, including personnel in surveillance, human intelligence, and undercover operations. Distributed Denial of Secrets announced the publication on October 28. It attributed the information to an entity calling itself “Department of Peace.” The reported exposure…
-
CyberDakait Hackers Target Indian Banking Users, Compromise 17,960 Android Devices
CyberDakait, a financially motivated Android malware operation targeting Indian banking customers since July 2025. Researchers identified at least 17,960 compromised devices and 7,611,443 intercepted SMS messages, exposing a campaign that combines banking credential theft, remote device control, and cryptocurrency mining. Although their technical implementations differ, Group-IB clusters them together because of overlapping distribution methods, phishing…
-
WordPress 7.1.4 Security Update Patches 22 Vulnerabilities Affecting Millions of Websites
WordPress has released version 7.1.4 to address 22 vulnerabilities, including issues related to remote code execution, stored cross-site scripting, information disclosure, and authorization weaknesses. This security update was published on October 28, 2026, and it is recommended that users upgrade immediately. The fixes encompass core functionality, including content blocks, administrative screens, the Customizer, and the…
-
WordPress 7.1.4 Security Update Patches 22 Vulnerabilities Affecting Millions of Websites
WordPress has released version 7.1.4 to address 22 vulnerabilities, including issues related to remote code execution, stored cross-site scripting, information disclosure, and authorization weaknesses. This security update was published on October 28, 2026, and it is recommended that users upgrade immediately. The fixes encompass core functionality, including content blocks, administrative screens, the Customizer, and the…
-
Hackers Turn Compromised Websites Into Fake Cloudflare Verification Traps for Windows and Mac Users
Attackers are using compromised websites to present fake Cloudflare verification pages that steer Windows and macOS users toward executing malicious commands. The findings establish a delivery attempt, not a confirmed infection or identified malware family. The activity exploits the familiarity of browser security checks. Instead of completing a legitimate verification, visitors receive instructions intended to…
-
Security Researchers Demonstrate Chrome Sandbox Escapes, Telegram Zero-Click Attacks and iOS Zero-Day Research
Security researchers at OffensiveCon Japan 2026 explored topics including Chrome sandbox escapes, zero-click attack surfaces in Telegram, and newly discovered iOS zero-day vulnerabilities. This two-day program took place on October 2728. The published agenda also covered hypervisor exploitation, Windows privilege escalation, Linux kernel techniques, and AI-assisted security research. However, session titles alone do not indicate…
-
Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/police-seize-virtualine-bulletproof-service-tied-to-ransowmare-cybercrime/ also interesting: Authorities Claim LockBit Admin LockBitSupp Has Engaged with Law Enforcement 8 Cyber Predictions for 2025: A CSO’s Perspective LockBit, DragonForce, and Qilin form…
-
Massive Leak Exposes 41,000 Homeland Security Workers”, Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot. First seen on wired.com Jump to article: www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/ also interesting: Privacy Roundup: Week 4 of Year 2025 Top 7 zero-day exploitation trends of 2024 7…
-
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
The critical flaw in UEFI firmware”, used by most server vendors and data centers”, allows attackers to execute code early in the boot process. First seen on wired.com Jump to article: www.wired.com/story/most-servers-on-the-planet-are-vulnerable-to-a-code-execution-flaw-in-uefi-firmware/ also interesting: Critical vulnerability in AMI MegaRAC BMC allows server’ takeover Some Brother printers have a remote code execution vulnerability, and they can’t…
-
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains people’s contact information, shared without their authorization. First seen on wired.com Jump to article: www.wired.com/story/bluesky-blocks-links-to-major-leak-of-dhs-data/ also interesting: Trump Leak Likely a Harbinger of More Interference to Come New ransomware group Funksec is…
-
Stolen staff logins are spreading attacks between K-12 school districts
Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their staff accounts or … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/29/cis-k-12-cybersecurity/ also interesting: New family of data-stealing malware leverages Microsoft Outlook DeepSeek Lure Using CAPTCHAs To Spread Malware Wiz’s Security GraphDB vs.…
-
Shame and sleepless nights haunt scam victims long after the money is gone
Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report. Scam … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/29/itrc-identity-theft-recovery-report/ also interesting: Scammers file first, Get your IRS Identity Protection PIN now AI gives superpowers to BEC attackers Cybersecurity Snapshot:…
-
IT bosses are confident they’ve found the certificates they don’t know about
Tags: unclassifiedForty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/29/tls-certificate-automation-report/ also interesting: Crowdfunding: Indiegogo sammelt nun auch Euro… [Video] Metasploitable 2 Series – Episode 4 – DRuby Distributed Ruby Code Execution…
-
Wine Fraud’s Next Frontier Is the Data, Not the Bottle
Compromised Provenance Platforms Could Let Counterfeiters Rewrite a Wine’s Identity Counterfeiters may not need a perfect forgery plan if they can alter the digital records that prove a wine is genuine. As provenance moves online, cybersecurity teams have a growing role in protecting the data that markets rely on to trust physical products. First seen…
-
Cybersecurity Training Must Catch Up With AI
Job Data Shows AI Skills Are Becoming Part of Everyday Security Work AI is changing cybersecurity jobs faster than traditional training programs can adapt. Security professionals now need practical experience with AI workflows, automation and the human judgment that machines can’t replace. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/cybersecurity-training-must-catch-up-ai-p-4233 also interesting: Is AI here…
-
Asian Submarine Cables at Risk from China
Report Finds Beijing Building Tools to Sabotage Cables Without Open Conflict. A report for the U.S.-China Economic and Security Review Commission warns that China is building the means to sabotage trans-Pacific undersea cables short of war and that losing one line could overwhelm direct U.S. routes to Taiwan, Japan or the Philippines – with repair…
-
Feds, South Carolina Launch Rural Hospital Cyber Pilot
Free 6-Month Program Aims to Bolster Cyber Resilience, Protect Patient Services. A new federal, state and private-sector pilot will provide free cybersecurity assistance to rural South Carolina hospitals. Experts say the initiative could offer a model for nationwide efforts, but funding, aging technology and clinical resilience remain major challenges. First seen on govinfosecurity.com Jump to…
-
Anthropic Finds AI Agents Sway Human Experts’ Decisions
Tags: aiStudy Finds Analysts Followed AI Agents’ Preferences in 86% of Decisions. When enterprises need to make decisions on more open-ended matters, they usually turn to human experts for the final call. But new research from Anthropic suggests human experts often rely on AI agents’ recommendations even when the agent has a distinct point of view.…
-
Fortinet Sees AI Security Boom Outlasting Past Cycles
CEO Ken Xie Says AI Infrastructure Expansion and New Threats Are Fueling Demand. Fortinet executives say AI infrastructure expansion and emerging threats are driving a cybersecurity spending cycle larger and more durable than past booms, lifting third-quarter revenue 20% and prompting the network security vendor to raise its annual outlook for the third time. First…
-
Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
Artem Stryzhak gets 70 months in prison for Hive and Nefilim ransomware attacks, while the FBI offers $11 million for his alleged co-conspirator. A federal court in Brooklyn has sentenced Artem Stryzhak, a Ukrainian national, to 70 months in prison for using ransomware to extort millions of dollars from victims. The U.S. Attorney’s Office for…
-
Next-gen privacy protocols: WireGuard vs OpenVPN vs Shadowsocks
Compare WireGuard, OpenVPN and Shadowsocks for speed, privacy, enterprise access and censorship resistance, including VPN tunnels differ from encrypted proxies. First seen on hackread.com Jump to article: hackread.com/next-gen-privacy-protocols-wireguard-openvpn-shadowsocks/ also interesting: Featured Chrome extension FreeVPN.One caught capturing and transmitting user data Faster Than Real-Time: Why Your Security Fails and What to Do Next CASB buyer’s guide:…
-
Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook
Tags: unclassifiedUnderstand APNIC IPv4 transfer rules, buyer requirements, fees and approval steps, with helpful checks to assess address blocks before completing a transaction. First seen on hackread.com Jump to article: hackread.com/transferring-ipv4-addresses-asia-pacific-apnic-playbook/ also interesting: Viele Cookies verderben den Brei How to use your Robots.txt to (even partially) block Bots from crawling your site 2025 SC Awards Finalists:…
-
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/28/hacker-stole-personnel-data-about-thousands-of-homeland-security-employees-including-cbp-and-ice-agents/ also interesting: Neiman Marcus Data Breach Exposed As Hacker Offers To Sell Stolen Info Hacker Leaks 8.5M U.S. Environmental Protection Agency (EPA) Contact Data (UPDATED) Deploying AI Agents?…
-
Upwind raises $400M after walking away from Datadog acquisition offer
The cloud security startup raised a Series C at a $3.8B valuation, instead of selling itself for the same price. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/28/upwind-raises-400m-after-walking-away-from-datadog-acquisition-offer/ also interesting: Fortinet Acquires Unicorn Lacework to Enhance Cloud Security (g+) Raus aus der Cloud: Ein Start-up auf EU-Infrastruktur? Schwieriger als gedacht! WatchGuard Strengthens Cloud Detection With…
-
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President’s son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets? First seen on grahamcluley.com Jump…
-
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
The Department of Peace group shared it with Swiss hacker/journalist maia arson crimew and DDoSecrets put it online. First seen on cyberscoop.com Jump to article: cyberscoop.com/dhs-employee-data-leak-ddosecrets/ also interesting: Helldown Ransomware Attacking VMware ESX And Linux Servers Ransomware Gang Leaks Data Allegedly Stolen From Microchip Technology Online Extortion Gang Clop Threatens Cleo Hacking Victims 8 Cyber…
-
Officials seize domain of top bulletproof hosting provider Virtualine
The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all illicit-attributed inflow tracked by researchers. First seen on cyberscoop.com Jump to article: cyberscoop.com/virtualine-bulletproof-hosting-provider-seized/ also interesting: Shopping The Russian Cybercrime Underground Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals Russia-linked APT28 and crooks…
-
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers. First seen on therecord.media Jump to article: therecord.media/japan-airlines-warns-of-breach-country-grapples-with-incidents also interesting: TDL 007 – Cyber Warriors Digital Shadows: Insights from Canada’s Cybersecurity Leader TDL 007 – Cyber Warriors Digital Shadows: Insights from Canada’s Cybersecurity Leader TDL 007 – Cyber Warriors…
-
Court strikes down West Virginia law barring disclosure of public officials’ personal data
A federal appellate court panel said West Virginia’s version of Daniel’s Law, meant to shield the personal data of police and other officials, is unconstitutional. First seen on therecord.media Jump to article: therecord.media/west-virginia-daniels-law-struck-down-appellate-court also interesting: Certain Telegram user data to be given upon law enforcement request Firewalls may soon need an upgrade as legacy tools…
-
From Rules to AI and Back
Fraud prevention combines rules, AI and behavioral analytics to stop scams, reduce false declines and keep automated decisions explainable through human review. First seen on hackread.com Jump to article: hackread.com/from-rules-to-ai-and-back/ also interesting: Phishing in focus: Disinformation, election and identity fraud Google Warns of Rising Cloaking Scams, AI-Driven Fraud, and Crypto Schemes Cybersecurity Snapshot: Study Raises…
-
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the…
-
Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.” First seen on cyberscoop.com Jump to article: cyberscoop.com/patrick-byrne-dominion-defamation-lawsuit-actual-malice/ also interesting: What the cyber community should expect from the Trump transition AI disinformation didn’t upend 2024 elections, but the threat is…
-
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access.”First identified in late 2023, Silent Train uses rotating chains of compromised SOHO, IoT, and enterprise infrastructure,” Lumen Technologies Black Lotus Labs said…
-
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec today announced the release of a free, interactive hands-on lab in Proving Grounds Play (PG Play) to help security practitioners examine and defend against the critical >>PHP2Shell<< vulnerabilities (CVE-2026-109618 and…
-
Discord to let search engines index public server messages
Tags: unclassifiedDiscord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/discord-to-let-search-engines-index-public-server-messages/ also interesting: Your smartphones secret afterlife: A blue mat, a fine-tipped screwdriver, and a dozen itty bitty screws. This…