October 2026

UK sanctions three crypto exchanges tied to Russian illicit funds

UK sanctions three crypto exchanges tied to Russian illicit funds 2026-10-09 at 13:34 By Cointelegraph by Zoltan Vardai The UK sanctioned crypto exchanges and payment processors, some of which were tied to thousands of Russian entities and the sanctioned HTX exchange. This article is an excerpt from Cointelegraph.com News View Original Source

UK sanctions three crypto exchanges tied to Russian illicit funds Read More »

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild 2026-10-09 at 13:23 By Ionut Arghire The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild Read More »

French lawmakers back stablecoin swap tax in 2027 budget bill

French lawmakers back stablecoin swap tax in 2027 budget bill 2026-10-09 at 13:16 By Cointelegraph by Zoltan Vardai France’s Finance Committee backed taxes on stablecoin swaps, as well as unrealized crypto gains when households with more than 800,000 euros move abroad. This article is an excerpt from Cointelegraph.com News View Original Source

French lawmakers back stablecoin swap tax in 2027 budget bill Read More »

Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries

Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries 2026-10-09 at 12:55 By Kevin Townsend Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices. The post Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries appeared first on SecurityWeek. This article is an excerpt from […]

Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries Read More »

Anthropic offers free AI security scans to open-source maintainers

Anthropic offers free AI security scans to open-source maintainers 2026-10-09 at 12:55 By Anamarija Pogorelec Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when […]

Anthropic offers free AI security scans to open-source maintainers Read More »

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks 2026-10-09 at 12:44 By Sinisa Markovic The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure […]

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks Read More »

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys 2026-10-09 at 12:03 By A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site’s .onion address using only public information, and then take that address over. Searchlight Cyber, […]

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys Read More »

Product showcase: SimpleLogin keeps your email address private with aliases

Product showcase: SimpleLogin keeps your email address private with aliases 2026-10-09 at 11:51 By Anamarija Pogorelec SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and correspondence, giving them control over where their primary email address is shared. The service is open source […]

Product showcase: SimpleLogin keeps your email address private with aliases Read More »

US Disrupts Chinese State-Sponsored Hacking Tools

US Disrupts Chinese State-Sponsored Hacking Tools 2026-10-09 at 11:36 By Ionut Arghire Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. The post US Disrupts Chinese State-Sponsored Hacking Tools appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

US Disrupts Chinese State-Sponsored Hacking Tools Read More »

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own 2026-10-09 at 11:26 By Three research teams broke into Google’s Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes […]

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own Read More »

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security 2026-10-09 at 11:19 By Eduard Kovacs OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in. The post Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security appeared first on SecurityWeek. This […]

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security Read More »

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments 2026-10-09 at 11:11 By Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. “CVE-2026-107406 is a memory overflow vulnerability that may lead to […]

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments Read More »

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability 2026-10-09 at 09:53 By Ionut Arghire The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service. The post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability Read More »

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions 2026-10-09 at 09:39 By The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon. To that end, the agencies seized several […]

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions Read More »

October 2026 Patch Tuesday forecast: Time for an Office cleanup

October 2026 Patch Tuesday forecast: Time for an Office cleanup 2026-10-09 at 09:32 By Help Net Security September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs […]

October 2026 Patch Tuesday forecast: Time for an Office cleanup Read More »

What the BPFDoor backdoor tells us about attacks on the network edge

What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]

What the BPFDoor backdoor tells us about attacks on the network edge Read More »

Thousands of wind and solar park systems sit exposed on the internet across Europe

Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]

Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »

PCI SSC calls for human approval of AI agent actions involving cardholder data

PCI SSC calls for human approval of AI agent actions involving cardholder data 2026-10-09 at 08:00 By Anamarija Pogorelec The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. Developed with industry stakeholders, […]

PCI SSC calls for human approval of AI agent actions involving cardholder data Read More »

Companies want autonomous IT operations but hesitate to let AI act alone

Companies want autonomous IT operations but hesitate to let AI act alone 2026-10-09 at 07:30 By Anamarija Pogorelec Ninety percent of companies want to move toward autonomous IT operations over the next two years, with agentic AI, software that plans and carries out multi-step tasks on its own, doing the work. Yet 77 percent say […]

Companies want autonomous IT operations but hesitate to let AI act alone Read More »

Scroll to Top