Cybersecurity and other IT news aggregator

LATEST FEEDS

  • Google faces Senate grilling over education AI as fears over kids’ mental health mount

    Google faces Senate grilling over education AI as fears over kids’ mental health mount 2026-10-21 at 22:50 By Ariel Zilber Google is facing a bipartisan Senate grilling over its aggressive push to put artificial intelligence in American classrooms amid mounting concerns that the technology could harm students’ academic performance and mental health. This article is…

  • Mass layoffs rock California gaming giant as boss’ memo released

    Mass layoffs rock California gaming giant as boss’ memo released 2026-10-21 at 22:03 By Ross O'Keefe A famed Silicon Valley gaming company is laying off hundreds of employees and shuttering prominent video game studio BioWare. This article is an excerpt from Latest Technology News | New York Post View Original Source

  • The major bedtime mistake that’s wreaking havoc on teens’ sleep — and what to do instead

    The major bedtime mistake that’s wreaking havoc on teens’ sleep — and what to do instead 2026-10-21 at 22:02 By Allie Yang For teens, losing sleep night after night is more than a bad habit. It has major consequences as they grow into young adults. This article is an excerpt from Latest Technology News |…

  • Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

    Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases 2026-10-21 at 21:57 By GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014.…

  • CISO Burnout Isn’t a Personal Problem — It’s Organizational

    CISO Burnout Isn’t a Personal Problem — It’s Organizational 2026-10-21 at 21:31 By Security magazine tackles the issue of CISO burnout alongside Chris Bevil, global cyber resilience and AI leader at Commvault.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

  • LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

    LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor 2026-10-21 at 21:01 By The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through…

  • Cardano Foundation urges EU against expanding MiCA rules to DeFi and staking

    Cardano Foundation urges EU against expanding MiCA rules to DeFi and staking 2026-10-21 at 20:57 By Cointelegraph by Nate Kostar The foundation called for regulation based on financial risks rather than technology, warning that overlapping rules could create uncertainty for crypto businesses across the EU. This article is an excerpt from Cointelegraph.com News View Original…

  • Meta ordered to pay $25B to New Mexico in Cambridge Analytica scandal over user data in 2016 election

    Meta ordered to pay $25B to New Mexico in Cambridge Analytica scandal over user data in 2016 election 2026-10-21 at 20:53 By Reuters The state’s attorney general had sued Meta in 2021 following revelations that Cambridge Analytica, a British political consulting firm, had harvested personal data from as many as 87 million Facebook users through…

  • Nvidia’s Jensen Huang joined on stage by robot ducks as he hails Europe’s AI potential

    Nvidia’s Jensen Huang joined on stage by robot ducks as he hails Europe’s AI potential 2026-10-21 at 20:52 By Reuters “Every company in Europe will become an AI company,” Huang said at Nvidia’s GTC conference in Berlin, which caps a European tour that has already taken him through London, Paris, Stockholm and Dublin. This article…

  • UK financial watchdog opens consultations for DeFi guidance, crypto laws

    UK financial watchdog opens consultations for DeFi guidance, crypto laws 2026-10-21 at 20:25 By Cointelegraph by Turner Wright The UK Financial Conduct Authority consultations came just weeks after the agency opened applications for companies under its new crypto regulatory regime. This article is an excerpt from Cointelegraph.com News View Original Source

  • Treasury Secretary Bessent likens GENIUS Act to Lincoln-era banking reform

    Treasury Secretary Bessent likens GENIUS Act to Lincoln-era banking reform 2026-10-21 at 20:10 By Cointelegraph by Sam Bourgi The OCC has finalized rules for stablecoin reserves and redemptions, with Bessent calling the GENIUS Act a “watershed moment for American finance.” This article is an excerpt from Cointelegraph.com News View Original Source

  • Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

    Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections 2026-10-21 at 20:00 By Eduard Kovacs Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis. The post Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View…

  • PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

    PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors 2026-10-21 at 19:50 By Ionut Arghire Several cybersecurity companies saw exploitation attempts before PHP released the patches. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Speculation — and anxiety — growing that Mark Zuckerberg’s Meta will issue new stock to pay for lavish AI spending

    Speculation — and anxiety — growing that Mark Zuckerberg’s Meta will issue new stock to pay for lavish AI spending 2026-10-21 at 19:48 By Charles Gasparino Zuck may want to time the sale not only with the recent upswing in Meta stock but also euphoria that is likely to surround the upcoming Anthropic IPO. This…

  • OpenAI’s GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So

    OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So 2026-10-21 at 19:33 By OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks. The AI company said the incident took place on October…

  • Chainlink, Cardano, other blockchain groups push SEC for clearer crypto rules

    Chainlink, Cardano, other blockchain groups push SEC for clearer crypto rules 2026-10-21 at 19:09 By Cointelegraph by Nate Kostar Six major blockchain organizations urged the SEC to formally recognize digital commodities as non-securities in its proposed regulatory framework. This article is an excerpt from Cointelegraph.com News View Original Source

  • EBay to ax 9% of workforce — 1,000 jobs — in second round of cuts this year

    EBay to ax 9% of workforce — 1,000 jobs — in second round of cuts this year 2026-10-21 at 19:07 By Reuters The online marketplace looks to simplify operations and shift resources to its fastest-growing areas, CEO Jamie Iannone told staff. This article is an excerpt from Latest Technology News | New York Post View…

  • ‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

    ‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets 2026-10-21 at 19:04 By Kevin Townsend Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold. The post ‘Context Bombs’ Cut AI Attack Success by…

  • PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

    PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge 2026-10-21 at 19:04 By PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and…

  • Bitcoin price tags $84.6K as US stocks head higher on SpaceX Q3 earnings beat

    Bitcoin price tags $84.6K as US stocks head higher on SpaceX Q3 earnings beat 2026-10-21 at 18:13 By Cointelegraph by William Suberg Bitcoin extended gains to approach $85,000 after US stock markets reacted to higher-than-expected SpaceX earnings. This article is an excerpt from Cointelegraph.com News View Original Source

  • High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

    High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 2026-10-21 at 18:00 By Kevin Townsend Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents. The post High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 appeared first on SecurityWeek.…

  • Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports

    Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports 2026-10-21 at 17:12 By Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now arrive fluent, personalized, and unique to each recipient, and the behavioral signals email filters have…

  • eMudhra security blunder left trusted CA signing keys exposed to anyone

    eMudhra security blunder left trusted CA signing keys exposed to anyone 2026-10-21 at 17:11 By Sinisa Markovic Eight intermediate certificates issued by Indian certificate authority eMudhra were secured with private keys so weak that anyone could recover them from the public certificates in under a second. On its website, the company highlights that it has…

  • Meta’s Muse AI leaves users vulnerable to identity theft through simple security flaw — with over 6,800 links exposed: report

    Meta’s Muse AI leaves users vulnerable to identity theft through simple security flaw — with over 6,800 links exposed: report 2026-10-21 at 17:08 By Ben Cost Leaked links included loan applications with the requested amount, bank transaction details, a real estate investor’s internal performance report and a corporate revenue doc intended for the CEO. This…

  • Solana’s Alpenglow launches on mainnet, targets 99% faster finality

    Solana’s Alpenglow launches on mainnet, targets 99% faster finality 2026-10-21 at 16:57 By Cointelegraph by Zoltan Vardai Solana’s first major consensus upgrade is targeting 99% finality reduction, seeking to offer users near-immediate transaction settlement and more responsive applications. This article is an excerpt from Cointelegraph.com News View Original Source

  • NVIDIA unveils security architecture that can stop AI agents crossing set boundaries

    NVIDIA unveils security architecture that can stop AI agents crossing set boundaries 2026-10-21 at 16:52 By Anamarija Pogorelec NVIDIA’s OpenShell Reference Architecture is designed to help businesses control AI agents operating across enterprise infrastructure and local computing systems. It builds on NVIDIA’s existing OpenShell security software, combining it with hardware for running AI models, managing…

  • PHP2Shell: Critical PHP vulnerabilities patched, update now!

    PHP2Shell: Critical PHP vulnerabilities patched, update now! 2026-10-21 at 16:51 By Mirko Zorz The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and…

  • Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security

    Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security 2026-10-21 at 16:17 By SecurityWeek News Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform. The post Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security appeared first on SecurityWeek. This article…

  • Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands

    Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands 2026-10-21 at 16:15 By Google on Tuesday said it’s rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social engineering technique in which bad actors trick users into copying…

  • Human Expertise at the Speed of AI: SentinelOne Names LevelBlue its Global Exclusive Delivery Partner for Wayfinder

    Human Expertise at the Speed of AI: SentinelOne Names LevelBlue its Global Exclusive Delivery Partner for Wayfinder 2026-10-21 at 16:15 By Today, SentinelOne named LevelBlue its global exclusive delivery partner for Wayfinder, SentinelOne’s suite of AI-powered managed security and threat detection services. This article is an excerpt from LevelBlue Blog View Original Source

  • Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

    Memory Bugs Account for Most of Chrome’s 353 New Security Fixes 2026-10-21 at 15:57 By Ionut Arghire The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities. The post Memory Bugs Account for Most of Chrome’s 353 New Security Fixes appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View…

  • OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

    OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor 2026-10-21 at 15:34 By Eduard Kovacs In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it. The post OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor appeared first on SecurityWeek. This article is…

  • China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

    China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors 2026-10-21 at 15:05 By Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. “The most distinctive technical marker for Bronze Sandcastle is its consistent use of…

  • Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys

    Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys 2026-10-21 at 14:22 By Ionut Arghire The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them. The post Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys appeared first on SecurityWeek. This article is an excerpt from SecurityWeek…

  • Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June

    Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June 2026-10-21 at 14:13 By Sinisa Markovic Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in sectors ranging from healthcare and education to government and energy. CVE-2026-0257 stems from the…

  • China Defends DeepSeek After US Ban of Its AI From Government Systems

    China Defends DeepSeek After US Ban of Its AI From Government Systems 2026-10-21 at 13:54 By Associated Press The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems. The post China Defends DeepSeek After US Ban of Its AI From Government Systems appeared…

  • PancakeSwap TVL tops $380M as major fee overhaul heads to vote

    PancakeSwap TVL tops $380M as major fee overhaul heads to vote 2026-10-21 at 13:50 By Cointelegraph by Ezra Reguerra PancakeSwap’s proposed fee-sharing overhaul would give liquidity providers 88% of swap fees and cut CAKE emissions by 69%, as BNB Chain’s DeFi activity expands. This article is an excerpt from Cointelegraph.com News View Original Source

  • France proposes liability for crypto exchanges offering DeFi access

    France proposes liability for crypto exchanges offering DeFi access 2026-10-21 at 13:46 By Cointelegraph by Helen Partz French authorities want crypto exchanges to conduct checks on DeFi protocols and face liability for certain customer losses under proposed changes to EU crypto rules. This article is an excerpt from Cointelegraph.com News View Original Source

  • Bitcoin ‘top buyers’ halt BTC price upside with $87.7K now key: Glassnode

    Bitcoin ‘top buyers’ halt BTC price upside with $87.7K now key: Glassnode 2026-10-21 at 13:39 By Cointelegraph by William Suberg Bitcoin price current resistance near $87,000 was reinforced by investors who bought BTC in late 2025, per new research. This article is an excerpt from Cointelegraph.com News View Original Source

  • PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t

    PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't 2026-10-21 at 13:36 By You cannot fully block the two critical PHP flaws called PHP2Shell before today’s fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggested it…

  • The Harness Is the Hard Part of Agentic Pentesting

    The Harness Is the Hard Part of Agentic Pentesting 2026-10-21 at 13:32 By An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on…

  • Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections

    Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections 2026-10-21 at 13:30 By Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found. Exit relays are the last hop in a Tor circuit, where…

  • Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

    Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor 2026-10-21 at 13:03 By Ionut Arghire Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable. The post Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor…

  • Autonomous LLMjacking: ‘Skynet’ Agent Hijacks Exposed AI Models to Run Attacks

    Autonomous LLMjacking: ‘Skynet’ Agent Hijacks Exposed AI Models to Run Attacks 2026-10-21 at 13:00 By Priti More, Susmit Yenkar Offensive agent is using unprotected AI models to scan the web, exploit frameworks, steal credentials and mine cryptocurrency for up to 100,000 steps without human input. The model’s owner pays for every step. This article is…

  • In HyperArmor, Three Pillars Uphold A Layered Defense

    In HyperArmor, Three Pillars Uphold A Layered Defense 2026-10-21 at 13:00 By Tim Smith It’s time to secure your hypervisor against AI-accelerated attacks This article is an excerpt from SECURITY.COM View Original Source

  • U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases

    U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases 2026-10-21 at 12:49 By U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services “developed using DeepSeek implementations,” under a Department of Homeland Security order. They may also no longer buy information technology products…

  • Grafana Labs connects observability and incident response with Knowledge Graph

    Grafana Labs connects observability and incident response with Knowledge Graph 2026-10-21 at 12:30 By Industry News Grafana Labs has announced a Knowledge Graph in every Grafana Cloud stack, alongside new Digital Experience Monitoring capabilities and updates to Grafana Cloud Incident Response Management (IRM). The releases connect infrastructure and application dependencies with user experience and incident…

  • ThreatLocker adds external controls for AI agent access and execution

    ThreatLocker adds external controls for AI agent access and execution 2026-10-21 at 12:07 By Industry News ThreatLocker has announced the launch of Zero Trust AI Control (ZTAIC), giving organizations a tool to deploy agentic AI without surrendering control of their environments. ZTAIC enables security teams to give AI agents exactly what they need to perform…

  • PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

    PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert 2026-10-21 at 12:05 By This story is developing and was written before PHP’s scheduled 14:00 UTC release on October 21. Once the release is out, the affected and fixed versions below are confirmed by the official advisory. PHP will ship an out-of-cycle…

  • Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

    Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites 2026-10-21 at 12:01 By Unknown threat actors breached TeamUpdraft’s website and potentially gained unauthorized access to customers’ connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites. TeamUpdraft is the developer behind UpdraftPlus, a popular WordPress backup plugin with over four million…

Browse older archives

Scroll to Top