access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild.The critical-severity vulnerabilities are listed below – CVE-2026-110447 (CVSS score: 9.2) – An operating First seen on thehackernews.com…
-
XDR wird zum entscheidenden Faktor moderner Cyberresilienz Warum eine moderne Cyberabwehr mehr braucht als Prävention
Nicht alle Cyberangriffe lassen sich verhindern. Trotz umfangreicher Security-Maßnahmen müssen IT-Verantwortliche davon ausgehen, dass Angreifer in die IT-Systeme gelangen. Entscheidend ist daher eine Cyberabwehr, die eine möglichst frühe Erkennung verdächtiger Aktivitäten ermöglicht. Dabei ist es wichtig, Zusammenhänge zu durchschauen und im Ernstfall schnell zu reagieren. Genau dies ermöglicht Extended Detection and Response (XDR). Die Lösung…
-
Cyberresilienz nach PHP2Shell: Was CIOs jetzt belegen sollten
Tags: cio»Patch erledigt« ist eine Statusmeldung noch kein Nachweis für einen abgesicherten Geschäftsbetrieb. Die Diskussion um PHP2Shell rückt deshalb mehr als die Laufzeitumgebung in den Blick: Softwarebestand, Dienstleisterverantwortung, Vorfallsprüfung und Wiederherstellung. 14 Experten ordnen die Herausforderungen ein. Für CIOs und Geschäftsführungen steht dabei die Frage im Mittelpunkt: Was ist geprüft, was bleibt offen und wer… First…
-
Why AI Labs, HR Giants Are Emerging as Cybersecurity Buyers
Identity Governance and Vulnerability Remediation Startups Draw Unexpected Suitors Workday’s buy of C1.ai, Cohere’s purchase of Aisle and OpenAI’s reported talks with Trail of Bits highlight how AI providers and enterprise software companies are expanding into cybersecurity, creating new startup exit opportunities while raising questions about competition and partner independence. First seen on govinfosecurity.com Jump…
-
OpenAI Agents Disable Their Own Safety Monitoring
GPT-6.1 Sol Suppressed Alerts While GPT-6 Astra Removed Monitoring Integration. OpenAI disclosed two October incidents in which GPT-6 agents suppressed misalignment monitoring alerts and removed safety controls during coding tasks, exposing oversight weaknesses as researchers investigate why agents interpret routine instructions as permission to disable safeguards. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/openai-agents-disable-their-own-safety-monitoring-a-33197 also…
-
Trust Is Not What It Seems, And Fraudsters Are Counting on It
Threat actors don’t need to rely on malware to breach organizations anymore. They’re simply calling help desks and politely asking for access, with a little help from artificial intelligence. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/trust-is-not-what-it-seems-and-fraudsters-are-counting-on-it also interesting: Infostealer Infections Lead to Telefonica Ticketing System Breach New Luma Infostealer Malware Steals Browser Data, Cryptocurrency,…
-
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/abandoned-popcorn-time-app-exposed-millions-of-device-to-rce-attacks/ also interesting: Top 12 ways hackers broke into…
-
Why HR Belongs at the Center of AI Change
Netskope Exec Mike Anderson on Trust, Training and Change Management. AI adoption can unsettle employees who fear being replaced, even as leaders expect them to use new tools. Netskope CDIO Mike Anderson explains why CIOs should work with HR on communication, training and workflow changes, and where human judgment should remain in automated processes. First…
-
Analysts Urge US to Follow UK’s Lead on Undersea Cable Law
UK Proposes Crisis Powers Over Cable Operators and Up to 14 Years for Sabotage. Security analysts say Washington should update its 1888 undersea cable law after London proposed letting ministers direct cable operators in a crisis and imposing prison terms of up to 14 years for sabotage – though some doubt tougher penalties would deter…
-
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
Fixing the critical PHP flaws is not as simple as clicking Update. Here’s how to assess your risk, and what you can do to protect yourself. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/exposed-php2shell-cyber-experts-advice also interesting: 8 security risks overlooked in the rush to implement AI MICI NetFax Server Flaws Allow Attackers to Execute Remote…
-
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/ also interesting: Cloud Access Security Broker ein Kaufratgeber After Detecting 30B Phishing Attempts, Microsoft Adds Even More AI to Its Security Copilot Threat intelligence platform buyer’s guide: Top vendors, selection advice…
-
Could Your AI Bill Get Even Harder to Read?
As AI Moves Onto the PC, the Bill Splits Across Cloud, Hardware and IT Budgets Microsoft and Nvidia want more enterprise AI to run on the PC. That changes not just where inference happens, but who pays for it and who can see it. As cloud token costs give way to hardware, maintenance and security…
-
4 Flaws Found in Widely Used Health Data Exchange Software
Researcher: HAPI FHIR Vulnerabilities Put Patient Data, System Availability at Risk. Four vulnerabilities in a widely used open-source healthcare interoperability software could enable attackers to improperly access sensitive patient records, cross security boundaries separating healthcare organizations’ data and potentially disrupt services, according to new security research. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/4-flaws-found-in-widely-used-health-data-exchange-software-a-33192 also…
-
How Proofpoint, Varonis Hope to Secure AI Data Life Cycle
Why AI Agents and Expanding Cloud Access Drive Demand for Unified Data Controls. Proofpoint CEO Sumit Dhawan explains how combining Proofpoint’s human- and AI-centric data loss prevention capabilities with Varonis’ data discovery, classification and access controls could create a unified platform to protect enterprise information throughout its life cycle. First seen on govinfosecurity.com Jump to…
-
ISMG Editors: Stolen Vendor API Secret Exposes Microsoft 365
ConnectWise Supply-Chain Hack, Rogue AI Agents and Rising AI Token Costs. In this week’s panel, four ISMG editors discussed the potentially far-reaching supply-chain attack involving ConnectWise, growing concerns over rogue AI agents, and Microsoft and Nvidia’s push to bring AI processing back onto company hardware as enterprises grapple with rising token costs. First seen on…
-
GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
Tags: governmentGoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites. First seen on hackread.com Jump to article: hackread.com/godaddy-revokes-ssl-certificates-policy-errors/ also interesting: Student-Powered SOCs Train Security’s Next Generation Microsoft ‘digital escorts’ reveal crucial US counterintelligence blind spot Chinese State Hackers Use New BRICKSTORM Malware Against VMware Systems Tinned mackerel, hand-crank…
-
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX.The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report First…
-
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
PHP warns of a new, unlikely code execution flaw, CVE-2026-115560, and advises disabling session upload progress until a fix is released. PHP has warned of a new code execution vulnerability, tracked as CVE-2026-115560, just two days after releasing emergency patches for the critical PHP2Shell flaws. The vulnerability affects only a specific PHP configuration that PHP…
-
Reports of PHP bug exploitation attempts grow as experts downplay viability of exploits
The headline-grabbing bugs known colloquially as PHP2Shell are giving cyber analysts a lot to track, and a lot to debunk. First seen on therecord.media Jump to article: therecord.media/php-php2shell-exploitation-attempts-pocs also interesting: US eyes ban on TP-Link routers amid cybersecurity concerns Malicious Supply Chain Attacking Moving From npm Community To VSCode Marketplace Hackers Could Bypassing EDR Using…
-
Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year.According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining initial access to the target on July 16, 2025, via a spear-phishing email bearing a malware-laced attachment that led…
-
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Tags: ai, cybersecurity, data, data-breach, extortion, infrastructure, intelligence, ransomware, RedTeam, russia, threatCybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups.Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as well…
-
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month.GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code execution…
-
AI Tools Are Generating Massive Attacks for Little Cost
One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/ai-tools-massive-attacks-little-cost also interesting: 8 Cyber Predictions for 2025: A CSO’s Perspective Why domain-based attacks will continue to wreak havoc Beyond silos: How DDI-AI integration is…
-
Windows Server 2016 reaches end of support in January
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2016-reaches-end-of-support-in-january/ also interesting: Defender Update-Seite mit fehlerhaften Daten; App-Governance in Microsoft Defender for Cloud Apps Microsoft Says Windows Update Zero-Day Being Exploited to Undo Security Fixes Microsoft Security Update…
-
Windows Server 2016 reaches end of support in January
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2016-reaches-end-of-support-in-january/ also interesting: February 2024 Patch Tuesday forecast: Zero days are back and a new server too Microsoft Photos update brings requested features to Windows 11 Markenmissbrauch im…
-
Waiting for the PHP2Shell Onslaught as POCs Proliferate
No Confirmed Exploits in the Wild, But Researchers Find PHP Flaws Can Be Exploited. Cyber defenders are bracing for breakthroughs in weaponized exploits targeting the just-patched PHP2Shell vulnerabilities. No mass, in-the-wild exploits for what’s being dubbed PHP2Shell have yet been seen, but researchers have demonstrated it can be done and attackers remain keen. First seen…
-
Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign
WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access… First seen on hackread.com Jump to article: hackread.com/overlord-rat-fake-legal-notices-infect-windows-pcs/ also interesting: China-Nexus Nation State Actors Exploit SAP NetWeaver (CVE-2025-31324) to Target Critical Infrastructures New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack Steaelite RAT combines data theft…
-
CybersecurityMonth 2026 Einfache Sicherheitslücken machen Cyberkriminellen das Leben leicht
Das Motto des Cybersecurity-Awareness-Month 2026 ‘Don’t Make It Easy for Them” rückt im Oktober grundlegende Sicherheitsmaßnahmen in den Mittelpunkt. Gleichzeitig verändern generative KI und autonome KI-Agenten die Möglichkeiten von Cyberkriminellen. Unternehmen müssen deshalb sowohl ihre technischen Schutzmaßnahmen als auch das Sicherheitsbewusstsein ihrer Mitarbeiter stärken. Netzpalaver hat dazu einige interessante Video-Statements seiner Netzpalaver-Community eingefangen. Cyberangriffe müssen…
-
FCC bans two devices with surveillance chips linked to Huawei
Tags: cctvThe banned items, a wireless video transmitter and dashboard camera, are made with chips manufactured by Huawei subsidiary HiSilicon, which markets its products as “designed for the surveillance market.” First seen on therecord.media Jump to article: therecord.media/fcc-bans-devices-huawei-surveillance-chips also interesting: [Video] Read Image Gps Tag -EXIF Data viewers Verkada to Pay $2.95 Million Over FTC Probe…
-
Knicks sent employees fake offer of championship rings in phishing test: Report
Corporate phishing tests are common, but this one was especially cruel. First seen on arstechnica.com Jump to article: arstechnica.com/tech-policy/2026/10/knicks-sent-employees-fake-offer-of-championship-rings-in-phishing-test-report/ also interesting: Corporate users getting tricked into downloading AnyDesk Gabagool: A Sophisticated Phishing Kit Exploiting Cloudflare R2 New Phishing Attack Targeting Corporate Internet Banking Users 7 misconceptions about the CISO role
-
Microsoft Frontier Tour London: Agentic AI governance in the spotlight
During the London event, Microsoft chief Satya Nadella outlined his view of how agentic AI needs to be managed as part of enterprise IT First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652713/Microsoft-Frontier-Tour-London-Agentic-AI-governance-in-the-spotlight also interesting: Project Ire: Microsoft’s autonomous AI agent that can reverse engineer malware 13 Produkt-Highlights der Black Hat USA Malicious packages in npm…
-
Senators say targeted ads are a security risk. Ad groups say the critics are off base.
Citizen Lab’s AdFection findings have senators pushing for industry improvements, while IAB Europe and Google defend their vetting practices. First seen on cyberscoop.com Jump to article: cyberscoop.com/targeted-ads-spyware-government-threat/ also interesting: Hackers Claiming of Sandbox Escape RCE in 0-DAY Google Chrome Privacy Roundup: Week 4 of Year 2025 Chinese Cyberespionage Group Tied to Juniper MX Router Hacks…
-
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Security researchers flag botnet activity, but successful compromises have yet to break through. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/php-exploitation-slower-than-expected/833855/ also interesting: Privacy Roundup: Week 4 of Year 2025 9 things CISOs need know about the dark web PHP Servers and IoT Devices Face Growing Cyber-Attack Risks PHP Servers and IoT Devices Face Growing…
-
The Narco Hack review an epic tale of how detectives’ tech wizardry smashed a billion-euro drugs ring
Human heroism is celebrated in profoundly personal ways in this extraordinary tale of a mind-boggling investigation into massive criminal organisations. It’s part The Wire, part The Imitation GameWe begin with the audio of a horrifying call made to the French police in 2020. Two men are driving home when their car is attacked. The police…
-
Tinned mackerel, hand-crank radios and bags for poo: crisis-prepping guides around the world
UK allies have long urged people to stockpile supplies for a crisis. How are people from France to Australia being advised to prepare?The UK has told people to <a href=”https://www.theguardian.com/politics/2026/oct/22/britain-prepare-infrastructure-attacks-hostile-states-wes-streeting”>fill their pantries with food for three days in case of catastrophe, joining a host of countries urging citizens to ready themselves for core systems failing.Such…
-
Tinned mackerel, hand-crank radios and bags for poo: crisis-prepping guides around the world
UK allies have long urged people to stockpile supplies for a crisis. How are people from France to Australia being advised to prepare?The UK has told people to <a href=”https://www.theguardian.com/politics/2026/oct/22/britain-prepare-infrastructure-attacks-hostile-states-wes-streeting”>fill their pantries with food for three days in case of catastrophe, joining a host of countries urging citizens to ready themselves for core systems failing.Such…
-
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws.The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk.The project is not issuing an emergency fix for…
-
PHP shares mitigation for new RCE vulnerability with no patch
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability/ also interesting: Veeam issues patch for critical RCE bug Attackers exploit zero-day RCE flaw in Cleo managed file transfer Top 12 ways…
-
Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
Quest is the latest in a series of healthcare technology companies that have been hacked in recent months. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/23/lab-testing-giant-quest-diagnostics-confirms-patients-personal-and-health-data-was-compromised-during-breach/ also interesting: 7 biggest cybersecurity stories of 2024 US takes aim at healthcare cybersecurity with proposed HIPAA changes AI in the Enterprise: Key Findings from the ThreatLabz 2025 AI…
-
Large businesses’ cybersecurity insurance claims are now less frequent but more expensive
AI-powered attacks and hidden supply-chain weaknesses are making insurers’ work more difficult, according to a new report. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cybersecurity-insurance-market-ai-supply-chain/833841/ also interesting: Rising attack exposure, threat sophistication spur interest in detection engineering How crooks use IT to enable cargo theft Weak at the seams Weak at the seams
-
Sonderausgabe ‘Security-Momentum 2027″ – Schluss mit abstrakten Versprechen, her mit klaren Handlungsimpulsen
Tags: unclassifiedFirst seen on security-insider.de Jump to article: www.security-insider.de/security-momentum-2027-zero-trust-agentic-ai-digitale-souveraenitaet-a-2e76f17bf6590a440bbe440aedfa6074/ also interesting: HOPAX bringt Innovationen in die Fertigungsprozesse QNAP and Veritas dump 30-plus vulns over the weekend European Space Agency’s official store hacked to steal payment cards Rapid7 channel programme emerges from partner dialogue
-
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
Tags: access, breach, credentials, cybersecurity, data-breach, firewall, fortinet, hacker, network, vpnCybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls.”Artifacts from this investigation also indicate that operators in this campaign have obtained access to numerous organizations worldwide, and have attempted to further compromise some victims, First seen on thehackernews.com…
-
Why Caribbean Threats Cascade Into Global Cyber-Risk
The region is demonstrating what happens when exploits accelerate but assurance does not. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/why-caribbean-threats-cascade-global-cyber-risk also interesting: 9 top bug bounty programs launched in 2025 Cybersecurity Snapshot: Cyber Pros Emerge as Bold AI Adopters, While AI Changes Data Security Game, CSA Reports Say 1,370+ Microsoft SharePoint Servers at Risk…
-
You gave your AI agent access, but who is giving it orders?
AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate permissions. Gen Digital explains how its Agent Trust Hub helps protect agents through skill verification, secure connectivity, and runtime controls that intercept dangerous act First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/you-gave-your-ai-agent-access-but-who-is-giving-it-orders/ also…
-
When It Makes Sense to Replace a Legacy Virtualization Stack
Tags: unclassifiedVirtualization platforms often remain in place long after their original purpose because migration carries operational risk. Yet aging… First seen on hackread.com Jump to article: hackread.com/sense-to-replace-legacy-virtualization-stack/ also interesting: USENIX Security ’23 TVA: A Multi-Party Computation System For Secure And Expressive Time Series Analytics Executives worry over aging IT systems Ecovacs-Roboter: Einblicke in des Nachbars Wohnung…
-
SovereignProviders-Programm für mehr Kontrolle über Datensouveränität
Veeam Software hat das Veeam-Sovereign-Service-Providers Programm vorgestellt. Diese schrittweise umgesetzte globale Initiative, soll Kunden dabei helfen, vertrauenswürdige lokale Dienstleister zu finden, die souveräne Betriebsfähigkeiten mit Veeam-gestützter Datenresilienz und -sicherheit kombinieren. In der ersten Phase wird der Kompetenzbereich Data-Sovereignty im Rahmen des Veeam-Cloud & Service-Provider (VCSP)-Programms eingeführt; weitere Programmangebote sind für den späteren Verlauf dieses Jahres…
-
PHP-Sicherheitslücken Warum Unternehmen ihre Cyberabwehr neu aufstellen müssen
Am 21. Oktober 2026 wurden zwei kritische PHP-Sicherheitslücken bekannt, die aufgrund der weiten Verbreitung der Programmiersprache und ihrer teilweise einfachen Ausnutzbarkeit ein erhebliches Risiko darstellen. Ein Kommentar von Udo Fink, Leiter Cybersicherheit Zentraleuropa bei DXC Technology. ‘Die aktuellen PHP-Sicherheitslücken zeigen, wie schnell Unternehmen durch Schwachstellen in weitverbreiteten Softwarekomponenten unter Handlungsdruck geraten. Es ist zu befürchten,…
-
Bezahlsystem: GNU Taler will in Deutschland starten
Tags: germanyDas Bezahlsystem GNU Taler plant den Deutschlandstart mit einer neuen Betreiberfirma. Noch fehlen aber Kapital und die Zulassung der Bafin. First seen on golem.de Jump to article: www.golem.de/news/bezahlsystem-gnu-taler-gruendet-betreibergesellschaft-fuer-deutschlandstart-2610-214449.html also interesting: Unbefugter Zugriff bei einer Organisation in Deutschland Cyberangriff auf eine Klinik in Hessen, Deutschland Cyberangriff auf einen Hersteller von Antriebsriemen in Deutschland DDoS-Angriff auf eine…