Cybersecurity and other IT news aggregator

LATEST FEEDS

  • Faster Every Time: Scaling Enterprise DLP Discovery

    Faster Every Time: Scaling Enterprise DLP Discovery 2026-10-28 at 18:03 By Dhananjay Dodke How Shared Incremental Index powers high-velocity repeat scans across multi-petabyte environments This article is an excerpt from SECURITY.COM View Original Source

  • Woman, 31, dies after ChatGPT convinced her it was a good idea to change medication dosage

    Woman, 31, dies after ChatGPT convinced her it was a good idea to change medication dosage 2026-10-28 at 17:25 By Allie Yang The parents of Bowen Wan are suing the ChatGPT maker OpenAI and its CEO, Sam Altman, in a wrongful death complaint. This article is an excerpt from Latest Technology News | New York…

  • I underestimated how fast security teams would trust AI to act in the SOC

    I underestimated how fast security teams would trust AI to act in the SOC 2026-10-28 at 17:25 By Help Net Security For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I assumed it would follow…

  • Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

    Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison 2026-10-28 at 17:24 By Ionut Arghire Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison appeared first on SecurityWeek. This…

  • Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

    Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers 2026-10-28 at 17:07 By A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the…

  • Wazuh and AI for Enhanced SOC Workflows

    Wazuh and AI for Enhanced SOC Workflows 2026-10-28 at 17:07 By Artificial Intelligence (AI) has become one of this decade’s defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making. Cybersecurity has experienced a similar transformation.…

  • Hackers Target US Federal Election Commission

    Hackers Target US Federal Election Commission 2026-10-28 at 17:00 By Hackers targeted the US Federal Election Commission, emphasizing that election security shouldn’t start and end with voting machines.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

  • ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls

    ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls 2026-10-28 at 16:46 By Industry News ControlUp has announced Pulse AI Resolve, the real-time investigative AI layer of the Pulse AI ecosystem. A major enhancement of ControlUp’s endpoint self-service capability, previously ControlUp Connect, Pulse Resolve brings AI-powered investigation and remediation, built-in governance controls,…

  • Compromised camera management software gives attackers a way into corporate networks

    Compromised camera management software gives attackers a way into corporate networks 2026-10-28 at 16:43 By Zeljka Zorz Attackers have been breaking into business networks through camera management software, according to new research from security firm Huntress, which traced several incidents in September and October back to a compromised application. An unidentified application The company’s analysts…

  • Digitate adds AI agents for patch planning, service desks, and SAP operations

    Digitate adds AI agents for patch planning, service desks, and SAP operations 2026-10-28 at 16:36 By Industry News Digitate has announced ignio Hummingbird, the latest release of its agentic AIOps platform. Hummingbird introduces AI agents that bring operational expertise to specific IT tasks, move from diagnosis through approved action and verification, and operate within enterprise…

  • 345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD

    345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD 2026-10-28 at 16:28 By Sinisa Markovic Over 345,000 unique email addresses were exposed in the September 2026 breach at German far-right political party Alternative für Deutschland (AfD). Breach notification service Have I Been Pwned (HIBP) added the data to its database on 27 October,…

  • Swimlane connects custom detections to AI-led investigation and response

    Swimlane connects custom detections to AI-led investigation and response 2026-10-28 at 16:26 By Industry News Swimlane has announced new capabilities in the Swimlane Turbine platform that allow security teams to run their own detection logic against large volumes of data and send resulting alerts directly into Swimlane AI SOC for investigation and response. The October…

  • LevelBlue TTP Briefing Q3 2026: Trusted Access Fuels Data Theft

    LevelBlue TTP Briefing Q3 2026: Trusted Access Fuels Data Theft 2026-10-28 at 16:00 By Explore the latest tactics, techniques, and procedures (TTPs) our incident response (IR) experts are actively facing in the quarterly TTP Briefing, a report built on frontline threat intelligence from our global incident response investigations across LevelBlue during Q3 2026. Download the…

  • Security Without Borders

    Security Without Borders 2026-10-28 at 16:00 By Listen to Assistant Secretary Todd Wilcox, who serves as Public Sector Chair at OSAC, talk about his career, the value of OSAC, and trends in the industry. This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

  • Upwind Security Raises $400 Million at $3.8 Billion Valuation

    Upwind Security Raises $400 Million at $3.8 Billion Valuation 2026-10-28 at 15:56 By Mike Lennon The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog The post Upwind Security Raises $400 Million at $3.8 Billion Valuation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Google Cloud outlines MPC service for institutional Bitcoin custody

    Google Cloud outlines MPC service for institutional Bitcoin custody 2026-10-28 at 15:47 By Cointelegraph by Helen Partz Google Cloud has detailed its preview MPC service for institutional Bitcoin custody as it holds a New York symposium focused on digital asset security. This article is an excerpt from Cointelegraph.com News View Original Source

  • Chrome and Firefox Updates Patch Over 200 Vulnerabilities

    Chrome and Firefox Updates Patch Over 200 Vulnerabilities 2026-10-28 at 15:39 By Ionut Arghire The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

    TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices 2026-10-28 at 15:10 By Eduard Kovacs FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers. The post TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices…

  • Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

    Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch 2026-10-28 at 14:48 By Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library…

  • FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police

    FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police 2026-10-28 at 14:40 By Sinisa Markovic The FBI has seized virtualine.net, the domain of a bulletproof hosting provider that laundered money for its criminal customers and kept a forum trading in child sexual abuse material online despite repeated warnings from police and…

  • Tailscale fixes SSH flaws allowing lateral movement within tailnets

    Tailscale fixes SSH flaws allowing lateral movement within tailnets 2026-10-28 at 14:25 By Zeljka Zorz Tailscale, the company behind the popular software-defined mesh networking and connectivity platform of the same name, has shipped fixes for several vulnerabilities, including some in Tailscale SSH that could let an attacker who already had access to a device in…

  • Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator

    Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator 2026-10-28 at 14:17 By Anamarija Pogorelec A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to five years and 10 months in prison. Artem Stryzhak, 36, pleaded guilty in December 2025 to two counts of…

  • China-Linked Hackers Exploit PHP2Shell to Root Firewalls

    China-Linked Hackers Exploit PHP2Shell to Root Firewalls 2026-10-28 at 14:00 By Ionut Arghire The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Settlement concerns prompt Euronext to halt CoinShares’ Zcash ETP ahead of debut

    Settlement concerns prompt Euronext to halt CoinShares’ Zcash ETP ahead of debut 2026-10-28 at 13:24 By Cointelegraph by Zoltan Vardai A Euronext spokesperson told Cointelegraph the suspension was due to “operational settlement requirements” and remains in effect until settlement operations are supported by the CSD. This article is an excerpt from Cointelegraph.com News View Original…

  • Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

    Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass 2026-10-28 at 13:15 By Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows –…

  • Mirae Asset Securities issues tokenized notes on Solana

    Mirae Asset Securities issues tokenized notes on Solana 2026-10-28 at 13:05 By Cointelegraph by Yohan Yun The company’s Hong Kong unit issued six-month notes under its $3 billion program, extending blockchain-based distribution to institutional investors. This article is an excerpt from Cointelegraph.com News View Original Source

  • Long-Hidden Flaws Patched in EPICS Research Facility Control Software

    Long-Hidden Flaws Patched in EPICS Research Facility Control Software 2026-10-28 at 12:48 By Eduard Kovacs Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs. The post Long-Hidden Flaws Patched in EPICS Research Facility Control Software appeared first on SecurityWeek. This article is an excerpt…

  • Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

    Nobody Trusts the Security Questionnaire. We Rely on It Anyway. 2026-10-28 at 12:30 By Sravish Sridhar The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies. The post Nobody Trusts the Security Questionnaire. We Rely on It…

  • American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

    American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed 2026-10-28 at 12:30 By Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind. ANY.RUN’s analysis of Skyw4lker,…

  • Data breach at Sony-owned internet provider compromises 2.6 million customer records

    Data breach at Sony-owned internet provider compromises 2.6 million customer records 2026-10-28 at 12:18 By Sinisa Markovic Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed. So-net is…

  • Bitcoin price eyes $82K as Morgan Stanley strategist says most of correction is over

    Bitcoin price eyes $82K as Morgan Stanley strategist says most of correction is over 2026-10-28 at 11:55 By Cointelegraph by William Suberg Bitcoin sought to rebuild support at $80,000 while Asian and US tech stocks extended a rebound into key corporate earnings releases. This article is an excerpt from Cointelegraph.com News View Original Source

  • Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

    Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise 2026-10-28 at 11:48 By SecurityWeek News The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems. The post Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise appeared first on…

  • CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

    CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster 2026-10-28 at 11:38 By Mirko Zorz CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to…

  • Hackers Start Probing Fresh Oracle EBS Vulnerability

    Hackers Start Probing Fresh Oracle EBS Vulnerability 2026-10-28 at 11:14 By Ionut Arghire CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Coinbase denies systems breach, says vendor exposed customer data

    Coinbase denies systems breach, says vendor exposed customer data 2026-10-28 at 10:49 By Cointelegraph by Zoltan Vardai Coinbase said that an incident at analytics vendor Amplitude exposed some customers’ contact data, but it found no evidence of unauthorized access to its own systems. This article is an excerpt from Cointelegraph.com News View Original Source

  • FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering

    FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering 2026-10-28 at 10:48 By The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response to the service being used to commit and facilitate prolific criminal…

  • CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

    CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts 2026-10-28 at 10:37 By Eduard Kovacs CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek. This…

  • Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

    Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits 2026-10-28 at 10:15 By An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after…

  • Bitcoin ETF inflows climb to $176M as BTC rebounds above $80K

    Bitcoin ETF inflows climb to $176M as BTC rebounds above $80K 2026-10-28 at 09:57 By Cointelegraph by Helen Partz US spot Bitcoin ETFs drew $286 million over two days, narrowing October’s net outflows to $26 million as the Crypto Fear & Greed Index remained neutral. This article is an excerpt from Cointelegraph.com News View Original…

  • Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

    Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers 2026-10-28 at 09:49 By Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale…

  • ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

    ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws 2026-10-28 at 09:49 By The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is…

  • Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

    Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges 2026-10-28 at 09:49 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google’s Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are…

  • Japan’s GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach

    Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach 2026-10-28 at 09:13 By Japan’s GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October…

  • Bellini Capital CISO on AI security governance and the limits of patching faster

    Bellini Capital CISO on AI security governance and the limits of patching faster 2026-10-28 at 08:30 By Mirko Zorz In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams…

  • AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records

    AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records 2026-10-28 at 08:00 By Anamarija Pogorelec AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and email-authentication records, and sends an alert when something changes. A DNS blacklist, or DNSBL,…

  • NIST starts the countdown to retire quantum-vulnerable encryption

    NIST starts the countdown to retire quantum-vulnerable encryption 2026-10-28 at 07:30 By Anamarija Pogorelec The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains which cryptographic methods need…

  • From Hijacked PBX to Stolen Trunk: INJ3CTOR3’s Campaign Evolves

    From Hijacked PBX to Stolen Trunk: INJ3CTOR3’s Campaign Evolves 2026-10-28 at 07:02 By rohansinhacyblecom Executive Summary In May, Cyble Research & Intelligence Labs (CRIL) documented JOMANGY, a PHP webshell generation deployed by INJ3CTOR3 with self-healing persistence channels and a built-in toll-fraud dialer. Back then, the fraud ran through the victim’s own PBX, so removing the…

  • Breach victims discover their data was held by companies they’ve never heard of

    Breach victims discover their data was held by companies they’ve never heard of 2026-10-28 at 07:00 By Anamarija Pogorelec Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026. Businesses rely on outside providers to store information, process transactions and…

  • Bithumb discloses data leak after internal system breach: Report

    Bithumb discloses data leak after internal system breach: Report 2026-10-28 at 04:18 By Cointelegraph by Felix Ng The breach impacted its in-house mobile system, used by employees for work and information sharing. This article is an excerpt from Cointelegraph.com News View Original Source

  • Discord is making public chats searchable on Google: How to opt out

    Discord is making public chats searchable on Google: How to opt out 2026-10-28 at 02:47 By Cointelegraph by Felix Ng Discord conversations on large public servers will soon reach audiences far beyond their communities, raising privacy concerns. This article is an excerpt from Cointelegraph.com News View Original Source

Browse older archives

Scroll to Top