2026

Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack 2026-10-23 at 15:56 By The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining initial access to […]

PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches 2026-10-23 at 14:25 By PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an […]

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image 2026-10-23 at 14:21 By Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in […]

Wall Street urging Anthropic, OpenAI to do their IPOs this year ‘before things get crazy’ — here’s why 2026-10-23 at 14:00 By Charles Gasparino The reasons go well beyond the risks of an AI bubble. This article is an excerpt from Latest Technology News | New York Post View Original Source

Tariffs and Supply Chain Security: An Emerging Security Challenge 2026-10-23 at 12:00 By Tariffs are typically viewed through an economic lens: higher prices, increased costs and impacts on consumers and corporate profitability. This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data 2026-10-23 at 11:40 By Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their “Node2Shell” proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no […]

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances 2026-10-23 at 11:35 By AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs’ default […]