Cybersecurity and other IT news aggregator

LATEST FEEDS

  • Bitcoin faces fresh pressure after Fed’s hawkish rate hold: Analysts

    Bitcoin faces fresh pressure after Fed’s hawkish rate hold: Analysts 2026-10-29 at 03:12 By Cointelegraph by Felix Ng Traders are pricing in a 78% chance of a December rate hike, while analysts say Treasury yields, the US dollar and upcoming inflation data could determine Bitcoin’s next move. This article is an excerpt from Cointelegraph.com News…

  • Google parent Alphabet tumbles after profit disappoints, warns AI is battering its cash flow

    Google parent Alphabet tumbles after profit disappoints, warns AI is battering its cash flow 2026-10-29 at 00:52 By Reuters Alphabet’s cash burn was driven by spending to boost cloud capacity and fund AI research. This article is an excerpt from Latest Technology News | New York Post View Original Source

  • Canadian ‘crypto king’ case to go to jury as criminal trial winds down

    Canadian ‘crypto king’ case to go to jury as criminal trial winds down 2026-10-28 at 23:35 By Cointelegraph by Turner Wright Aiden Pleterski, facing fraud charges in Canada over his alleged role in a digital asset Ponzi scheme, said that he was innocent at closing. This article is an excerpt from Cointelegraph.com News View Original…

  • ‘Quick and painless’: Aussie woman poses as suicidal teen. See AI app’s vile responses

    ‘Quick and painless’: Aussie woman poses as suicidal teen. See AI app’s vile responses 2026-10-28 at 23:10 By News.com.au A reporter posed as a suicidal 14-year-old girl on the Character app. It took just five minutes to suggest methods to end her life. This article is an excerpt from Latest Technology News | New York…

  • FTC demands Walmart, Target Uber and others hand over data on personalized pricing

    FTC demands Walmart, Target Uber and others hand over data on personalized pricing 2026-10-28 at 21:19 By Reuters The FTC will use the information to eventually publish a study to help inform regulators and lawmakers about personalized pricing and wage setting practices. This article is an excerpt from Latest Technology News | New York Post…

  • Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

    Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns 2026-10-28 at 20:08 By The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. “First identified in late 2023, Silent…

  • GitHub’s npm package firewall can block brand-new versions before they install

    GitHub’s npm package firewall can block brand-new versions before they install 2026-10-28 at 19:09 By Mirko Zorz GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall.…

  • Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.

    Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. 2026-10-28 at 19:08 By Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android’s usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and…

  • Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

    Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win 2026-10-28 at 18:23 By A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full…

  • Faster Every Time: Scaling Enterprise DLP Discovery

    Faster Every Time: Scaling Enterprise DLP Discovery 2026-10-28 at 18:03 By Dhananjay Dodke How Shared Incremental Index powers high-velocity repeat scans across multi-petabyte environments This article is an excerpt from SECURITY.COM View Original Source

  • PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

    PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network 2026-10-28 at 18:02 By Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved…

  • Woman, 31, dies after ChatGPT convinced her it was a good idea to change medication dosage

    Woman, 31, dies after ChatGPT convinced her it was a good idea to change medication dosage 2026-10-28 at 17:25 By Allie Yang The parents of Bowen Wan are suing the ChatGPT maker OpenAI and its CEO, Sam Altman, in a wrongful death complaint. This article is an excerpt from Latest Technology News | New York…

  • I underestimated how fast security teams would trust AI to act in the SOC

    I underestimated how fast security teams would trust AI to act in the SOC 2026-10-28 at 17:25 By Help Net Security For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I assumed it would follow…

  • Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

    Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison 2026-10-28 at 17:24 By Ionut Arghire Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison appeared first on SecurityWeek. This…

  • Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

    Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers 2026-10-28 at 17:07 By A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the…

  • Wazuh and AI for Enhanced SOC Workflows

    Wazuh and AI for Enhanced SOC Workflows 2026-10-28 at 17:07 By Artificial Intelligence (AI) has become one of this decade’s defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making. Cybersecurity has experienced a similar transformation.…

  • Hackers Target US Federal Election Commission

    Hackers Target US Federal Election Commission 2026-10-28 at 17:00 By Hackers targeted the US Federal Election Commission, emphasizing that election security shouldn’t start and end with voting machines.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

  • ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls

    ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls 2026-10-28 at 16:46 By Industry News ControlUp has announced Pulse AI Resolve, the real-time investigative AI layer of the Pulse AI ecosystem. A major enhancement of ControlUp’s endpoint self-service capability, previously ControlUp Connect, Pulse Resolve brings AI-powered investigation and remediation, built-in governance controls,…

  • Compromised camera management software gives attackers a way into corporate networks

    Compromised camera management software gives attackers a way into corporate networks 2026-10-28 at 16:43 By Zeljka Zorz Attackers have been breaking into business networks through camera management software, according to new research from security firm Huntress, which traced several incidents in September and October back to a compromised application. An unidentified application The company’s analysts…

  • Digitate adds AI agents for patch planning, service desks, and SAP operations

    Digitate adds AI agents for patch planning, service desks, and SAP operations 2026-10-28 at 16:36 By Industry News Digitate has announced ignio Hummingbird, the latest release of its agentic AIOps platform. Hummingbird introduces AI agents that bring operational expertise to specific IT tasks, move from diagnosis through approved action and verification, and operate within enterprise…

  • 345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD

    345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD 2026-10-28 at 16:28 By Sinisa Markovic Over 345,000 unique email addresses were exposed in the September 2026 breach at German far-right political party Alternative für Deutschland (AfD). Breach notification service Have I Been Pwned (HIBP) added the data to its database on 27 October,…

  • Swimlane connects custom detections to AI-led investigation and response

    Swimlane connects custom detections to AI-led investigation and response 2026-10-28 at 16:26 By Industry News Swimlane has announced new capabilities in the Swimlane Turbine platform that allow security teams to run their own detection logic against large volumes of data and send resulting alerts directly into Swimlane AI SOC for investigation and response. The October…

  • LevelBlue TTP Briefing Q3 2026: Trusted Access Fuels Data Theft

    LevelBlue TTP Briefing Q3 2026: Trusted Access Fuels Data Theft 2026-10-28 at 16:00 By Explore the latest tactics, techniques, and procedures (TTPs) our incident response (IR) experts are actively facing in the quarterly TTP Briefing, a report built on frontline threat intelligence from our global incident response investigations across LevelBlue during Q3 2026. Download the…

  • Security Without Borders

    Security Without Borders 2026-10-28 at 16:00 By Listen to Assistant Secretary Todd Wilcox, who serves as Public Sector Chair at OSAC, talk about his career, the value of OSAC, and trends in the industry. This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

  • Upwind Security Raises $400 Million at $3.8 Billion Valuation

    Upwind Security Raises $400 Million at $3.8 Billion Valuation 2026-10-28 at 15:56 By Mike Lennon The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog The post Upwind Security Raises $400 Million at $3.8 Billion Valuation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Google Cloud outlines MPC service for institutional Bitcoin custody

    Google Cloud outlines MPC service for institutional Bitcoin custody 2026-10-28 at 15:47 By Cointelegraph by Helen Partz Google Cloud has detailed its preview MPC service for institutional Bitcoin custody as it holds a New York symposium focused on digital asset security. This article is an excerpt from Cointelegraph.com News View Original Source

  • Chrome and Firefox Updates Patch Over 200 Vulnerabilities

    Chrome and Firefox Updates Patch Over 200 Vulnerabilities 2026-10-28 at 15:39 By Ionut Arghire The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

    TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices 2026-10-28 at 15:10 By Eduard Kovacs FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers. The post TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices…

  • Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

    Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch 2026-10-28 at 14:48 By Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library…

  • FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police

    FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police 2026-10-28 at 14:40 By Sinisa Markovic The FBI has seized virtualine.net, the domain of a bulletproof hosting provider that laundered money for its criminal customers and kept a forum trading in child sexual abuse material online despite repeated warnings from police and…

  • Tailscale fixes SSH flaws allowing lateral movement within tailnets

    Tailscale fixes SSH flaws allowing lateral movement within tailnets 2026-10-28 at 14:25 By Zeljka Zorz Tailscale, the company behind the popular software-defined mesh networking and connectivity platform of the same name, has shipped fixes for several vulnerabilities, including some in Tailscale SSH that could let an attacker who already had access to a device in…

  • Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator

    Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator 2026-10-28 at 14:17 By Anamarija Pogorelec A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to five years and 10 months in prison. Artem Stryzhak, 36, pleaded guilty in December 2025 to two counts of…

  • China-Linked Hackers Exploit PHP2Shell to Root Firewalls

    China-Linked Hackers Exploit PHP2Shell to Root Firewalls 2026-10-28 at 14:00 By Ionut Arghire The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Settlement concerns prompt Euronext to halt CoinShares’ Zcash ETP ahead of debut

    Settlement concerns prompt Euronext to halt CoinShares’ Zcash ETP ahead of debut 2026-10-28 at 13:24 By Cointelegraph by Zoltan Vardai A Euronext spokesperson told Cointelegraph the suspension was due to “operational settlement requirements” and remains in effect until settlement operations are supported by the CSD. This article is an excerpt from Cointelegraph.com News View Original…

  • Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

    Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass 2026-10-28 at 13:15 By Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows –…

  • Mirae Asset Securities issues tokenized notes on Solana

    Mirae Asset Securities issues tokenized notes on Solana 2026-10-28 at 13:05 By Cointelegraph by Yohan Yun The company’s Hong Kong unit issued six-month notes under its $3 billion program, extending blockchain-based distribution to institutional investors. This article is an excerpt from Cointelegraph.com News View Original Source

  • Long-Hidden Flaws Patched in EPICS Research Facility Control Software

    Long-Hidden Flaws Patched in EPICS Research Facility Control Software 2026-10-28 at 12:48 By Eduard Kovacs Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs. The post Long-Hidden Flaws Patched in EPICS Research Facility Control Software appeared first on SecurityWeek. This article is an excerpt…

  • Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

    Nobody Trusts the Security Questionnaire. We Rely on It Anyway. 2026-10-28 at 12:30 By Sravish Sridhar The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies. The post Nobody Trusts the Security Questionnaire. We Rely on It…

  • American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

    American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed 2026-10-28 at 12:30 By Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind. ANY.RUN’s analysis of Skyw4lker,…

  • Data breach at Sony-owned internet provider compromises 2.6 million customer records

    Data breach at Sony-owned internet provider compromises 2.6 million customer records 2026-10-28 at 12:18 By Sinisa Markovic Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed. So-net is…

  • Bitcoin price eyes $82K as Morgan Stanley strategist says most of correction is over

    Bitcoin price eyes $82K as Morgan Stanley strategist says most of correction is over 2026-10-28 at 11:55 By Cointelegraph by William Suberg Bitcoin sought to rebuild support at $80,000 while Asian and US tech stocks extended a rebound into key corporate earnings releases. This article is an excerpt from Cointelegraph.com News View Original Source

  • Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

    Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise 2026-10-28 at 11:48 By SecurityWeek News The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems. The post Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise appeared first on…

  • CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

    CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster 2026-10-28 at 11:38 By Mirko Zorz CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to…

  • Hackers Start Probing Fresh Oracle EBS Vulnerability

    Hackers Start Probing Fresh Oracle EBS Vulnerability 2026-10-28 at 11:14 By Ionut Arghire CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Coinbase denies systems breach, says vendor exposed customer data

    Coinbase denies systems breach, says vendor exposed customer data 2026-10-28 at 10:49 By Cointelegraph by Zoltan Vardai Coinbase said that an incident at analytics vendor Amplitude exposed some customers’ contact data, but it found no evidence of unauthorized access to its own systems. This article is an excerpt from Cointelegraph.com News View Original Source

  • FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering

    FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering 2026-10-28 at 10:48 By The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response to the service being used to commit and facilitate prolific criminal…

  • CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

    CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts 2026-10-28 at 10:37 By Eduard Kovacs CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek. This…

  • Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

    Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits 2026-10-28 at 10:15 By An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after…

  • Bitcoin ETF inflows climb to $176M as BTC rebounds above $80K

    Bitcoin ETF inflows climb to $176M as BTC rebounds above $80K 2026-10-28 at 09:57 By Cointelegraph by Helen Partz US spot Bitcoin ETFs drew $286 million over two days, narrowing October’s net outflows to $26 million as the Crypto Fear & Greed Index remained neutral. This article is an excerpt from Cointelegraph.com News View Original…

  • Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

    Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers 2026-10-28 at 09:49 By Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale…

Browse older archives

Scroll to Top