Cybersecurity and other IT news aggregator

LATEST FEEDS

  • Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

    Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software 2026-10-20 at 21:48 By The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google’s Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate…

  • Strive closes $630M SATS IPO, leaves Bitcoin allocation unspecified

    Strive closes $630M SATS IPO, leaves Bitcoin allocation unspecified 2026-10-20 at 20:40 By Cointelegraph by Nate Kostar The Bitcoin treasury company could acquire an estimated 7,372 BTC with its net proceeds, potentially surpassing Metaplanet’s holdings if it allocates the full amount. This article is an excerpt from Cointelegraph.com News View Original Source

  • Waymo plans to boost self-driving fleet to 20K vehicles by next year: report

    Waymo plans to boost self-driving fleet to 20K vehicles by next year: report 2026-10-20 at 20:06 By Thomas Barrabi Waymo is reportedly planning to boost the size of its robotaxi fleet to 20,000 vehicles by the end of next year – an increase meant to fuel the Alphabet-owned firm’s nationwide expansion. This article is an…

  • Chrome flags malicious commands that scammers pass off as fixes

    Chrome flags malicious commands that scammers pass off as fixes 2026-10-20 at 20:00 By Anamarija Pogorelec Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The company introduced Enhanced Protection for Chrome’s Safe Browsing feature in 2020 to address online…

  • Injective, BDACS plan Korean won stablecoin settlement for tokenized assets

    Injective, BDACS plan Korean won stablecoin settlement for tokenized assets 2026-10-20 at 19:47 By Cointelegraph by Sam Bourgi Injective and BDACS plan to bring won-backed stablecoin KRW1 to tokenized asset markets as South Korea develops a regulatory framework for local currency stablecoins. This article is an excerpt from Cointelegraph.com News View Original Source

  • Stablecoin transfers quadruple to $891B as US banks expand adoption: Report

    Stablecoin transfers quadruple to $891B as US banks expand adoption: Report 2026-10-20 at 19:38 By Cointelegraph by Nate Kostar Coinbase reports growing adoption by banks and businesses, even as stablecoin market capitalization remains largely unchanged over the past year. This article is an excerpt from Cointelegraph.com News View Original Source

  • Only 7% of CISOs at Large Companies Own AI Governance

    Only 7% of CISOs at Large Companies Own AI Governance 2026-10-20 at 19:00 By How is AI responsibility being structured in organizations?  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

  • US Agencies Detail Incident Response Practices for Rogue AI Agents

    US Agencies Detail Incident Response Practices for Rogue AI Agents 2026-10-20 at 18:45 By Kevin Townsend NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents. The post US Agencies Detail Incident Response Practices for Rogue AI Agents appeared first on SecurityWeek. This…

  • Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

    Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution 2026-10-20 at 18:38 By Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw…

  • Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

    Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA 2026-10-20 at 18:32 By Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting  PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could…

  • Inside Wazza: A Newly Observed Device Code Phishing Kit Targeting Microsoft 365 Accounts

    Inside Wazza: A Newly Observed Device Code Phishing Kit Targeting Microsoft 365 Accounts 2026-10-20 at 18:26 By Cris Tomboc and Kevin Adriano LevelBlue SpiderLabs has been tracking multiple waves of Wazza, a newly observed multi-stage phishing kit that deploys device code phishing targeting Microsoft 365 accounts. In addition to recent reporting by The Hacker News, our analysis…

  • AOMEI Backupper servers hijacked for minutes at a time to push backdoor

    AOMEI Backupper servers hijacked for minutes at a time to push backdoor 2026-10-20 at 18:14 By Zeljka Zorz An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security researchers discovered. Between April and July 2026, attackers repeatedly altered configuration files on AOMEI’s own…

  • Sam Altman’s sister’s lawsuit accusing brother and OpenAI CEO of sexual abuse is tossed

    Sam Altman’s sister’s lawsuit accusing brother and OpenAI CEO of sexual abuse is tossed 2026-10-20 at 18:06 By Reuters Annie Altman accused her brother of sexually abusing and raping her between 1997 and 2006 at the family home in suburban Clayton, Mo., starting when she was 3 and he was 12. This article is an…

  • Incomplete security patches show hackers where to look next

    Incomplete security patches show hackers where to look next 2026-10-20 at 17:13 By Sinisa Markovic Security patches are turning into roadmaps for attackers, with a growing share of fixes later found incomplete or open to bypass. Oren Yomtov, a security researcher at Terra Security, began tracking broken fixes after the team kept running into them…

  • Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites

    Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites 2026-10-20 at 17:07 By A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left their control panels open on the internet. The…

  • Pegasus Spyware Infection Confirmed on Serbian University Rector’s iPhone Days Before Election

    Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election 2026-10-20 at 17:04 By The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia’s student protest movement, was infected with NSO Group’s Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days…

  • ‘We’re toast’: Nobel-winning ‘Godfather of AI’ warns that humans must befriend bots — or face extermination

    ‘We’re toast’: Nobel-winning ‘Godfather of AI’ warns that humans must befriend bots — or face extermination 2026-10-20 at 17:01 By Ben Cost An artificial intelligence expert has claimed that humans must befriend bots or face extinction — because the tech has apparently developed signs of “consciousness.” This article is an excerpt from Latest Technology News…

  • Security Leaders Share Concerns About California Student Data Breach

    Security Leaders Share Concerns About California Student Data Breach 2026-10-20 at 17:00 By California students and families were recently notified of a data security incident, and security leaders are sharing their concerns.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

  • AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

    AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign 2026-10-20 at 16:51 By Ionut Arghire Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework. The post AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • The Key to AI Software Security Isn’t Speed, It’s Maturity

    The Key to AI Software Security Isn’t Speed, It’s Maturity 2026-10-20 at 16:34 By Matias Madou Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk. The post The Key to AI Software Security Isn’t Speed, It’s Maturity appeared first on SecurityWeek. This article is…

  • AppGate gives OT supervisors live monitoring and session termination controls

    AppGate gives OT supervisors live monitoring and session termination controls 2026-10-20 at 16:33 By Industry News AppGate has expanded its zero trust offering for operational technology (OT) with Session Governance capabilities that help critical infrastructure operators reduce third-party access risk, simplify compliance audits and protect operational uptime. The expansion builds on the ZTNA for OT…

  • Agents can trade 24/7 — but Yat Siu warns you could lose access at any time

    Agents can trade 24/7 — but Yat Siu warns you could lose access at any time 2026-10-20 at 16:30 By Cointelegraph by Yohan Yun The Animoca Brands chairman explains that AI agents can make trades while you sleep, but users need to plan for the day they lose access to the bots. This article is…

  • Abstract links automated response actions directly to SIEM detection rules

    Abstract links automated response actions directly to SIEM detection rules 2026-10-20 at 16:26 By Industry News Abstract has announced new AI SOC capabilities in its agentic SIEM: investigation, hunt, and triage powered by a combination of Abstract’s own trained and tuned models and frontier foundation models, and SOAR response capabilities with actions assigned directly to…

  • ThreatModeler NexusAI tracks architectural changes and proposes security updates

    ThreatModeler NexusAI tracks architectural changes and proposes security updates 2026-10-20 at 16:17 By Industry News ThreatModeler has announced the launch of NexusAI, its new AI-powered threat modeling partner within the ThreatModeler Nexus platform. NexusAI helps enterprises automate more of the work involved in creating, analyzing, and maintaining threat models, enabling security teams to scale their…

  • IDENTOS PolicyArc gives AI agents task-specific, time-limited access

    IDENTOS PolicyArc gives AI agents task-specific, time-limited access 2026-10-20 at 16:09 By Industry News IDENTOS has announced that PolicyArc is now generally available. The new solution gives security, platform, and compliance teams a single place to define, enforce, and audit access policy across their applications. PolicyArc is built to solve how to safely extend access…

  • FINMA approves Switzerland’s first Bitcoin ETF for retail investors

    FINMA approves Switzerland’s first Bitcoin ETF for retail investors 2026-10-20 at 16:04 By Cointelegraph by Zoltan Vardai The Swiss regulator cited a growing appetite for cryptocurrency investments and said that multiple fund providers have submitted Bitcoin ETF applications. This article is an excerpt from Cointelegraph.com News View Original Source

  • Ahold Delhaize Restoring Services Disrupted by Cyberattack

    Ahold Delhaize Restoring Services Disrupted by Cyberattack 2026-10-20 at 16:02 By Ionut Arghire The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. The post Ahold Delhaize Restoring Services Disrupted by Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek…

  • AI Platform Cairn Abused to Hack Over 100 Organizations

    AI Platform Cairn Abused to Hack Over 100 Organizations 2026-10-20 at 15:47 By Ionut Arghire At least three threat actors have been abusing Cairn for persistent access and financial theft. The post AI Platform Cairn Abused to Hack Over 100 Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Drift exploiter sends $61M ETH to Tornado Cash, holds $194M

    Drift exploiter sends $61M ETH to Tornado Cash, holds $194M 2026-10-20 at 15:38 By Cointelegraph by Zoltan Vardai The April 1 hack caused about $295 million in losses and was later attributed to a North Korean threat group in a Mandiant investigation. This article is an excerpt from Cointelegraph.com News View Original Source

  • Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say

    Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say 2026-10-20 at 15:33 By Associated Press Abdulrahman Alfozan’s wife and young son also left the country the day after the 35-year-old Saudi national’s arrest. The post Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors…

  • Tx launches USTX stablecoin to pull RWA liquidity onto its chain

    Tx launches USTX stablecoin to pull RWA liquidity onto its chain 2026-10-20 at 15:30 By Cointelegraph by Yohan Yun The Brale-issued token can be minted with USDC from eight networks and is designed to settle tokenized stocks and other assets on tx. This article is an excerpt from Cointelegraph.com News View Original Source

  • Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign

    Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign 2026-10-20 at 15:23 By Sinisa Markovic Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for downloading, installing and managing its software. Siemens first published its security advisory on 15 October 2026, giving the…

  • Quarantined, but still on your calendar: The explosion of invite-based attacks

    Quarantined, but still on your calendar: The explosion of invite-based attacks 2026-10-20 at 15:18 By Zeljka Zorz There has been a sharp escalation in attacks that use malicious calendar invites to reach targets, email security providers Check Point and Sublime Security have warned. Sublime recorded a 1,216% month-over-month increase in August 2026, and the first…

  • Lloyds and Barclays among UK banks named in crypto transfer complaints, advocacy group says

    Lloyds and Barclays among UK banks named in crypto transfer complaints, advocacy group says 2026-10-20 at 15:13 By Cointelegraph by Helen Partz UK banks are facing scrutiny over crypto transfer limits and bans as Stand With Crypto reports thousands of complaints ahead of the country’s 2027 regulatory regime. This article is an excerpt from Cointelegraph.com…

  • WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators

    WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators 2026-10-20 at 14:41 By WhatsApp’s help pages carried hidden instructions for its support chatbot that told it not to recommend a data protection authority or regulator to users who could no longer delete their accounts, even though WhatsApp’s own privacy…

  • What Security Teams Can Do To Tame Wild Code

    What Security Teams Can Do To Tame Wild Code 2026-10-20 at 14:33 By A sales manager builds an AI-assisted workflow to route leads. It connects to customer records, summarizes inbound requests, and posts updates to a shared channel. The workflow saves time, reduces manual work, and soon becomes part of the team’s daily routine. Across…

  • Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns

    Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns 2026-10-20 at 14:32 By Go 1.27.3 and Go 1.26.10, released on October 20, make Go’s certificate verifier reject any certificate chain that passes through one of eight intermediate certificate authority keys. Programs built on the new release will refuse connections to sites and services…

  • Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring

    Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring 2026-10-20 at 14:30 By Eduard Kovacs Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as an agent’s risk rises. The post Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring appeared…

  • Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader

    Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader 2026-10-20 at 14:06 By The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO). The Symantec Threat Hunter Team, which is…

  • ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident

    ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident 2026-10-20 at 13:56 By ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing application credentials, as it continues to respond to a security incident that led to unauthorized access to application identities associated with Cloud…

  • Teradata expands AI data security with post-quantum protection and immutable backups

    Teradata expands AI data security with post-quantum protection and immutable backups 2026-10-20 at 13:47 By Industry News Teradata has announced new privacy, security, and resiliency capabilities designed to address one of the defining challenges of enterprise AI: how sensitive data is protected, who and what can access it, and whether it remains available and recoverable…

  • Hackers Steal 1.8 Million Records From Nikkei

    Hackers Steal 1.8 Million Records From Nikkei 2026-10-20 at 13:35 By Ionut Arghire The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth. The post Hackers Steal 1.8 Million Records From Nikkei appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

    Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware 2026-10-20 at 13:23 By An attacker used a contributor’s GitHub account to replace the download archives on five existing releases of OVHcloud’s command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored…

  • Extend Verify helps AI agents flag suspicious documents before acting

    Extend Verify helps AI agents flag suspicious documents before acting 2026-10-20 at 13:08 By Industry News Extend has announced Extend Verify, a document fraud detection API that helps developers and AI agents assess the integrity of documents before using them to make decisions. Much of the work businesses want AI agents to perform begins with…

  • US Army is developing AI agents that could strike enemy networks and vanish without a trace

    US Army is developing AI agents that could strike enemy networks and vanish without a trace 2026-10-20 at 13:03 By Sinisa Markovic The US Army is looking for AI agents that can slip into an adversary’s network, find their target, copy themselves onto nearby tablets and computers, and then erase themselves before anyone notices. Over…

  • Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries

    Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries 2026-10-20 at 13:00 By Threat Hunter Team Russian group stole credentials and tunneled into the network during a two-month intrusion at a naval shipbuilder. This article is an excerpt from SECURITY.COM View Original Source

  • Bitget plans Thai crypto exchange acquisition weeks after $388M hack

    Bitget plans Thai crypto exchange acquisition weeks after $388M hack 2026-10-20 at 13:00 By Cointelegraph by Felix Ng The proposed acquisition would give Bitget a route into Thailand’s crypto market through a locally licensed operator. This article is an excerpt from Cointelegraph.com News View Original Source

  • Microsoft wants to limit AI agents’ permissions when they stray from the job

    Microsoft wants to limit AI agents’ permissions when they stray from the job 2026-10-20 at 12:55 By Anamarija Pogorelec Microsoft’s Guardian Agents in Project Perception adapt as agent activity, risk, security context and organizational policy change. They help security teams understand why risk changed, investigate relevant evidence, recommend or apply containment measures and use what…

  • 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

    970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach 2026-10-20 at 12:33 By Eduard Kovacs Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals. The post 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach appeared first on SecurityWeek. This article is an excerpt…

  • JPMorgan projects Bitcoin to outperform US stocks and gold over next decade

    JPMorgan projects Bitcoin to outperform US stocks and gold over next decade 2026-10-20 at 11:54 By Cointelegraph by Ezra Reguerra JPMorgan included Bitcoin in its long-term capital market outlook for the first time but warned that volatility and unstable correlations limit its role in investment portfolios. This article is an excerpt from Cointelegraph.com News View…

Browse older archives

Scroll to Top