Cybersecurity and other IT news aggregator

‘Black October’ shows how criminals use AI to cause real-world chaos — but here’s how you can protect yourself 2026-10-27 at 23:12 By Megan Palin The world has been plunged into a cyber-security crisis, known as “Black October,” which exposed how vulnerable much of the world’s online infrastructure is. This article is an excerpt from…

Feds probe whether Polymarket violated 2022 deal to block US traders: report 2026-10-27 at 21:57 By Ariel Zilber Polymarket is reportedly facing renewed scrutiny from federal regulators over whether it violated a 2022 settlement requiring the prediction market giant to block American traders from its offshore platform. This article is an excerpt from Latest Technology…

CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets 2026-10-27 at 20:26 By Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server…

Meta schemed ‘whisper strategy’ to discredit influential social media critic Jonathan Haidt: bombshell docs 2026-10-27 at 19:53 By Thomas Barrabi Meta employees schemed about how to “get the academic community to disavow” social media critic Jonathan Haidt — a ploy to tamp down claims that its apps were fueling a teen mental health crisis, according…

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption 2026-10-27 at 19:01 By The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use…

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads 2026-10-27 at 19:01 By Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary…

🎙️SECURITY.COM The Podcast: Behind the Scores 2026-10-27 at 18:09 By Dan Mellinger ISO standards, TCO quadrant math, and cutting through glossy vendor marketing claims This article is an excerpt from SECURITY.COM View Original Source

Microsoft Releases Emergency .NET Patches 2026-10-27 at 18:00 By Microsoft released emergency .NET patches for .NET 8, .NET 9, .NET 10, and .NET 11 Release Candidate 3.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

New Research Reveals Gaps in AI Safeguards, Cyber Experts Discuss 2026-10-27 at 17:00 By New research from METR reveals that OpenAI’s internal agent monitoring systems had safeguard gaps. This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key 2026-10-27 at 15:03 By An attacker who gained access to Keystone’s website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the…

AI-Generated Fake Login Pages Are Making Account Takeovers Easier 2026-10-27 at 15:03 By Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens, impersonate trusted brands and tailor phishing attempts to specific employees or organizations.  Some fake login pages go beyond…

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption 2026-10-27 at 15:03 By The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity company Kaspersky,…

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens 2026-10-27 at 14:09 By Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim’s work account. Microsoft tracks the…

I tried the viral $299 high-tech baby sock — I was startled by the results 2026-10-27 at 12:30 By Tracy Swartz The sock looks like a tiny gladiator sandal and fits snugly on a baby’s foot thanks to Velcro-like straps. This article is an excerpt from Latest Technology News | New York Post View Original…

OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections 2026-10-27 at 12:18 By OpenAI’s compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model’s hidden reasoning out in plain text, security firm Xint has shown. OpenAI’s reasoning models work through a problem before answering, and the service…

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers 2026-10-27 at 11:33 By A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency’s operators gained access to the criminal’s…