access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
From Rules to AI and Back
Fraud prevention combines rules, AI and behavioral analytics to stop scams, reduce false declines and keep automated decisions explainable through human review. First seen on hackread.com Jump to article: hackread.com/from-rules-to-ai-and-back/ also interesting: Phishing in focus: Disinformation, election and identity fraud Google Warns of Rising Cloaking Scams, AI-Driven Fraud, and Crypto Schemes Cybersecurity Snapshot: Study Raises…
-
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the…
-
Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.” First seen on cyberscoop.com Jump to article: cyberscoop.com/patrick-byrne-dominion-defamation-lawsuit-actual-malice/ also interesting: What the cyber community should expect from the Trump transition AI disinformation didn’t upend 2024 elections, but the threat is…
-
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access.”First identified in late 2023, Silent Train uses rotating chains of compromised SOHO, IoT, and enterprise infrastructure,” Lumen Technologies Black Lotus Labs said…
-
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec today announced the release of a free, interactive hands-on lab in Proving Grounds Play (PG Play) to help security practitioners examine and defend against the critical >>PHP2Shell<< vulnerabilities (CVE-2026-109618 and…
-
Discord to let search engines index public server messages
Tags: unclassifiedDiscord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/discord-to-let-search-engines-index-public-server-messages/ also interesting: Your smartphones secret afterlife: A blue mat, a fine-tipped screwdriver, and a dozen itty bitty screws. This…
-
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff… First seen on hackread.com Jump to article: hackread.com/summit-public-schools-breach-student-staff-data/ also interesting: HealthEquity: 4.3 Million People Affected by Data Breach HackerOne Data Breach, Hackers Illegally Access Salesforce Environment We’ve crossed the security singularity – Impart Security Hackers claim Discord…
-
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff… First seen on hackread.com Jump to article: hackread.com/summit-public-schools-breach-student-staff-data/ also interesting: ATT paid a $370,000 ransom to prevent stolen data from being leaked Chess.com Confirms Data Breach After Hackers Exploit External System Breach Roundup: FTC Sues Sendit Over…
-
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff… First seen on hackread.com Jump to article: hackread.com/summit-public-schools-breach-student-staff-data/ also interesting: ATT paid a $370,000 ransom to prevent stolen data from being leaked Chess.com Confirms Data Breach After Hackers Exploit External System Breach Roundup: FTC Sues Sendit Over…
-
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the…
-
European digital rights nonprofit noyb sues Scale AI for ‘invasive’ worker surveillance
Tags: aiNoyb alleges the platform in some cases records freelancers’ mouse clicks and keystrokes every few seconds and claims the collected information can be used to generate video documenting freelancers’ entire workday. First seen on therecord.media Jump to article: therecord.media/noyb-sues-scale-ai-for-worker-surveillance also interesting: #Infosec24: Go Back to Basics With Risk Management to Tackle AI Risk Two WormGPT…
-
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox, a security researcher has shown.Orange Tsai of DEVCORE published the full method on October 28, five months after the chain won $175,000 at the Pwn2Own Berlin contest in May.…
-
Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android’s usual confirmation screens, and to update them in the background.To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and update, for ongoing malware scanning. Approved stores…
-
GitHub’s npm package firewall can block brand-new versions before they install
GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/github-package-firewall-npm/ also interesting: Blinded by Silence Top 7 zero-day exploitation trends of 2024 Cybersecurity Snapshot: CISA Highlights Vulnerability Management Importance in Breach Analysis, as…
-
Japan’s GMO Group Offers $1M Bounty for Hacker’s Identity
Extortion Group Holding to Ransom Data Stolen From Virtual Private Server Customers. Japan’s GMO Internet Group is offering a bounty of up to $1 million for information that helps unmask whoever hacked the company’s infrastructure, gaining access to over 25,000 virtual private servers and infecting customers’ home PCs with data-stealing malware when they remotely connected.…
-
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
Tags: vulnerabilityNew York, United States, 28th October 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/offsec-launches-free-php2shell-lab-following-critical-vulnerability-discovery/ also interesting: Microsoft 365 Vulnerability Let Hackers Bypass Anti-phishing Feature Schwachstellen in Intels Sicherheitstechnologie TDX entdeckt‹ NIST Clears Backlog of Known Security Flaws but Not All Vulnerabilities Apache InLong JDBC Vulnerability Enables Deserialization of Untrusted Data
-
US sanctions Russians, North Koreans for laundering IT worker earnings
The U.S. Treasury Department sanctioned Russian and North Korean nationals for allegedly laundering the earnings of illicit IT workers on behalf of Pyongyang. First seen on therecord.media Jump to article: therecord.media/north-korea-russia-sanctions also interesting: Let’s Unroll Some Questions About Russia’s Role In North Korea’s Rocket Program Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers The…
-
US sanctions Russians, North Koreans for laundering IT worker earnings
The U.S. Treasury Department sanctioned Russian and North Korean nationals for allegedly laundering the earnings of illicit IT workers on behalf of Pyongyang. First seen on therecord.media Jump to article: therecord.media/north-korea-russia-sanctions also interesting: Let’s Unroll Some Questions About Russia’s Role In North Korea’s Rocket Program Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers The…
-
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Tags: ai, attack, breach, china, cybersecurity, data-breach, exploit, government, intelligence, network, threat, vulnerabilityCybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems.The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root First seen…
-
Goodbye Streamed: Millionenfach genutzter, illegaler Streamingdienst schließt
Tags: unclassifiedMehr als 400 Millionen illegale Livestreams von Sportveranstaltungen sind allein im Juli über Streamed abgewickelt worden. Doch damit ist jetzt Schluss. First seen on golem.de Jump to article: www.golem.de/news/goodbye-streamed-millionenfach-genutzter-illegaler-streamingdienst-gibt-auf-2610-214597.html also interesting: German Authorities Reopen Proceedings Against Facebook’s Facial Recognition FBI official sheds more light on Scattered Spider operation MLSecOps: The foundation of AI/ML security Illegale…
-
Volt Typhoon hides zero-day attacks using ‘Silent Train’ framework
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/volt-typhoon-hides-zero-day-attacks-using-silent-train-framework/ also interesting: The 2024 cyberwar playbook: Tricks used by nation-state actors Chinese hacking group Salt Typhoon expansion prompts…
-
Sony ISP subsidiary data breach exposes 2.5 million customer records
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sony-isp-subsidiary-data-breach-exposes-25-million-customer-records/ also interesting: Ransomware goes postal: US healthcare firms receive fake extortion letters Why can’t enterprises get a handle on the cloud misconfiguration problem? Recognizing and responding…
-
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files. First seen on hackread.com Jump to article: hackread.com/hackers-impersonate-ai-bots-hunt-exposed-credentials/ also interesting: 2025 Year of Browser Bugs Recap: Top 5 real-world AI security threats revealed in 2025 Supply Chain Attacks Surge in March 2026…
-
Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. First seen on cyberscoop.com Jump to article: cyberscoop.com/volt-typhoon-silent-train-covert-ephemeral-network-black-lotus-labs/ also interesting: More telecom firms were breached by Chinese hackers than previously reported Chinese hackers breached critical infrastructure globally using enterprise…
-
Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. First seen on cyberscoop.com Jump to article: cyberscoop.com/volt-typhoon-silent-train-covert-ephemeral-network-black-lotus-labs/ also interesting: 8 biggest cybersecurity threats manufacturers face US military allocated about $30 billion to spend on cybersecurity in 2025 Cybersecurity…
-
Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. First seen on cyberscoop.com Jump to article: cyberscoop.com/volt-typhoon-silent-train-covert-ephemeral-network-black-lotus-labs/ also interesting: More telecom firms were breached by Chinese hackers than previously reported Why cyber attackers are targeting your solar energy…
-
Moldova investigates possible foreign involvement in major government cyberattack
Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens’ personal data and government digital infrastructure, according to local media reports. First seen on therecord.media Jump to article: therecord.media/moldova-investigates-possible-foreign-involvement-cyberattacks also interesting: China-linked hackers target Japan’s national security and high-tech industries Phishing Season 2025: The Latest Predictions Unveiled CISO’s…
-
Insurance industry fears potential impacts from PHP2Shell
A systemic cyber event could lead to billions of dollars in claims that exceed current risk models. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/insurance-industry-risk-php2shell/873044/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks Your passwordless future may never fully arrive IDOR Attacks…
-
GitHub-Repositories – Offengelegte Zugangsdaten bleiben jahrelang nutzbar
Tags: githubFirst seen on security-insider.de Jump to article: www.security-insider.de/gueltige-zugangsdaten-oeffentliche-github-repositories-truffle-security-a-a993995a1f06592b8c2192376196aed5/ also interesting: 16 Billion Passwords Stolen From 320 Million+ Computers Leaked Online Attackers Use Phony GitHub Pages to Deliver Mac Malware Attackers Exploit LMDeploy Flaw in the Wild Within 12 Hours of Advisory OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack
-
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/attackers-hide-malware-behind/ also interesting: Grok und Mixtral ohne Grenzen: Neue KI-Tools erzeugen Phishing-Mails und Malware Browser Wars, Continued: Why Everyone Is Building Their Own AI Browser When AI safety constrains defenders more than attackers Fake ChatGPT Invites…
-
Japan’s GMO Internet Urges Customers to Disconnect PCs
GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/japan-gmo-internet-disconnect/ also interesting: SAP systems increasingly targeted by cyber attackers Top 12 ways hackers broke into your systems in 2024 Ransomware on ESXi: The mechanization of virtualized attacks Japan’s GMO urges customers…
-
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/attacker-impersonates-ai-bots-scans-credentials also interesting: Microsoft sues overseas threat actor group over abuse of OpenAI service 6 ways hackers hide their tracks 6 ways hackers hide their tracks 13 cybersecurity myths…
-
I underestimated how fast security teams would trust AI to act in the SOC
For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/exaforce-trust-in-ai-security/ also interesting: How to Build Your Autonomous SOC Strategy From reactive to proactive: Redefining incident response…
-
Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users
Discover-Tech allegedly targeted Starlink users with digital ads to track their locations, according to sources cited in a new Reuters report. Digital defense firm TrendAI found that an Israeli ad tech company was heavily targeting users of satellite internet service Starlink, probably to spy on them. That’s according to six people familiar with the matter,…
-
South Korea’s financial industry hit by fresh wave of cyberattacks
South Korea’s financial institutions have been hit by another wave of cyberattacks, highlighting the growing risk of AI-driven hacking in Asia. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/28/south-koreas-financial-industry-hit-by-fresh-wave-of-cyberattacks/ also interesting: Top 10 Cybersecurity Predictions for 2026 Top 10 Cybersecurity Predictions for 2026 Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies…
-
Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during the COVID-19 pandemic, has been sentenced to 70 months in a US prison. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/hive-ransomware-jailed-fbi-infiltrated also interesting: Time of Reckoning Reviewing My 2024 Cybersecurity…
-
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
Tags: scamThe scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said. First seen on cyberscoop.com Jump to article: cyberscoop.com/madagascar-nft-dating-scam-charges/ also interesting: Fake Online Stores Scam Over 850,000 Shoppers AI-driven scams are about to get a lot more convincing North Korea’s fake tech workers now targeting…
-
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
Tags: scamThe scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said. First seen on cyberscoop.com Jump to article: cyberscoop.com/madagascar-nft-dating-scam-charges/ also interesting: Business email compromise, romance scammer sentenced to 10 years [News] FBI Warns of New Twist to Reveton, Citadel Malware Scams Telegram rises to top…
-
Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine
Belarus-linked hackers are increasingly aligning their cyber operations with Russia’s interests in Ukraine, researchers said Wednesday. First seen on therecord.media Jump to article: therecord.media/belarus-russia-hackers-ukraine-war also interesting: How Ukraine’s cyber police fights back against Russia’s hackers After helping Russia on the ground North Korea targets Ukraine with cyberespionage Russian Hackers Exploit Email and VPN Vulnerabilities to…
-
UK to look at making software companies liable for cyber breaches
The new U.K. budget says the government will “consider where liability for cyber breaches should sit,” potentially a landmark shift for a country that has relied on voluntary codes to encourage software vendors to improve security. First seen on therecord.media Jump to article: therecord.media/uk-budget-proposal-software-companies-liable-cyber-breaches also interesting: Unusual attack linked to Chinese APT group combines espionage…
-
Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
Known vulnerabilities with available patches are by far the biggest risk facing connected devices, a new report found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/internet-of-things-vulnerabilities-proxies-netgear-bitdefender/873033/ also interesting: Top 16 OffSec, pen-testing, and ethical hacking certifications Cybersecurity Snapshot: CISA’s Best Cyber Advice on Securing Cloud, OT, Apps and More Don’t trust that email: It could…
-
Energy Giant Engie Notifies Customers of Supply Chain Breach
An undisclosed number of Engie customers have had their data compromised after a supply chain incident First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/energy-giant-engie-supply-chain/ also interesting: ‘NullBulge’ threat actor targets software supply chain, AI tech Palo Alto Networks disclose a data breach linked to Salesloft Drift incident Modern supply-chain attacks and their real-world impact Cybersecurity…
-
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with security controls First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-is-turning-cisos-into/ also interesting: 8 Cyber Predictions for 2025: A CSO’s Perspective CISOs embrace rise in prominence, with broader business authority AI development pipeline attacks expand CISOs’…
-
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network.UEFI firmware is the software that runs first when a computer is…
-
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Tags: business, cve, flaw, hacker, intelligence, oracle, rce, remote-code-execution, threat, update, vulnerabilityThreat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber.The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library of Oracle E-Business Suite. It was patched by Oracle last week as part of its Critical Patch…
-
Even after PHP2Shell, blast radius matters more than a CVSS score
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/even-after-php2shell-blast-radius-matters-more-than-a-cvss-score/ also interesting:…
-
InfraTrust report warns of exploited flaws in critical network infrastructure
Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as “PHP2Shell” put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/infratrust-report-warns-of-exploited-flaws-in-critical-network-infrastructure/ also interesting: Cisco Firewall and VPN Zero Day Attacks: CVE-2025-20333 and CVE-2025-20362 Zero-day exploits hit enterprises…
-
Microsoft urges Entra ID admins to migrate users to passkeys
Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-reminds-entra-id-admins-to-migrate-users-to-passkeys/ also interesting: Void Blizzard nimmt NATO-Organisationen ins Visier Microsoft brings phishing-resistant Windows sign-ins via Entra passkeys Microsoft to roll out Entra…
-
345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD
Over 345,000 unique email addresses were exposed in the September 2026 breach at German far-right political party Alternative für Deutschland (AfD). Breach notification … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/afd-data-breach-email-leak/ also interesting: The biggest data breach fines, penalties, and settlements so far UK blames Russia’s infamous ‘Fancy Bear’ group for Microsoft cloud hacks…
-
Compromised camera management software gives attackers a way into corporate networks
Attackers have been breaking into business networks through camera management software, according to new research from security firm Huntress, which traced several incidents … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/compromised-camera-management-software-initial-access/ also interesting: TDL 019 – The Psychology Behind a Cyber Breach and the Leaders Who Survive It – Nim Nadarajah TDL 019 –…