Cybersecurity and other IT news aggregator

LATEST FEEDS

  • SentinelOne brings runtime threat detection and response to AI agents

    SentinelOne brings runtime threat detection and response to AI agents 2026-10-22 at 14:27 By Industry News SentinelOne has unveiled Singularity Agentic Detection and Response (ADR), a new offering that discovers AI agents, enforces what agents are allowed to do, monitors agent behavior in depth, and detects and stops unintended and malicious activity in real time.…

  • Broadcom adds real-time scam detection to 3-D Secure authentication

    Broadcom adds real-time scam detection to 3-D Secure authentication 2026-10-22 at 14:18 By Industry News Broadcom has announced the launch of Arcot Scam Defense, a new feature of Arcot by Broadcom, designed to block social engineering fraud during card-not-present (CNP) transactions. “Financial institutions are experiencing broad increases in fraud attempts driven by sophisticated, AI-enhanced social…

  • Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

    Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation 2026-10-22 at 14:15 By Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed “anomalous activity” related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases,…

  • Claude Security can now spot vulnerabilities that reappear in code

    Claude Security can now spot vulnerabilities that reappear in code 2026-10-22 at 14:02 By Anamarija Pogorelec Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams monitor vulnerabilities as software changes. The service scans codebases for vulnerabilities and suggests patches for review. It is powered by the company’s…

  • Attackers abuse legitimate platforms to deliver phishing emails that pass authentication checks

    Attackers abuse legitimate platforms to deliver phishing emails that pass authentication checks 2026-10-22 at 13:59 By Zeljka Zorz A Dell order confirmation lands in your inbox and it looks pretty legitimate: it comes from Dell’s order domain, passes DKIM and DMARC checks, uses Dell’s real template, and confirms a $736.09 purchase of Microsoft Project Standard…

  • CoinDCX pledges no user losses after $16M transfers draw scrutiny

    CoinDCX pledges no user losses after $16M transfers draw scrutiny 2026-10-22 at 13:53 By Cointelegraph by Zoltan Vardai CoinDCX tied the transfers to wallets compromised in July 2025, but investigators said the addresses remained linked to its operations. This article is an excerpt from Cointelegraph.com News View Original Source

  • Splunk, SolarWinds Release Fresh Security Updates

    Splunk, SolarWinds Release Fresh Security Updates 2026-10-22 at 13:45 By Ionut Arghire Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information. The post Splunk, SolarWinds Release Fresh Security Updates appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

    OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL 2026-10-22 at 13:44 By A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer’s Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol)…

  • Bitcoin corrects below $82K after Tesla Q3 results, KOSPI falls

    Bitcoin corrects below $82K after Tesla Q3 results, KOSPI falls 2026-10-22 at 13:38 By Cointelegraph by William Suberg Bitcoin reversed a run toward $85,000 after Tesla reported lower-than-expected capital expenditure in Q3. This article is an excerpt from Cointelegraph.com News View Original Source

  • What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

    What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers 2026-10-22 at 13:22 By Mirko Zorz Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities that let an attacker run code on a web server without logging in. Palo Alto has…

  • Cisco Patches 34 Vulnerabilities Across Multiple Products

    Cisco Patches 34 Vulnerabilities Across Multiple Products 2026-10-22 at 13:05 By Ionut Arghire Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks. The post Cisco Patches 34 Vulnerabilities Across Multiple Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • The Keys Are in the Browser: Secret Exposure Across AI-Built Websites

    The Keys Are in the Browser: Secret Exposure Across AI-Built Websites 2026-10-22 at 13:01 By rohansinhacyblecom Cyble scanned 1.3M+ newly registered domains and found AI-built sites leaking live secrets to the browser: OpenAI keys, Stripe keys, and database tokens. Spinning up a website no longer takes a developer. A prompt to an AI app-builder returns…

  • LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

    LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release 2026-10-22 at 13:01 By LiteLLM on Wednesday disclosed that threat actors compromised “multiple independent security controls” to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM’s release pipeline was compromised to…

  • Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

    Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions 2026-10-22 at 13:01 By Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow…

  • New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

    New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification 2026-10-22 at 13:01 By A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory…

  • Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

    Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed 2026-10-22 at 13:01 By Amazon’s Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following…

  • PHP2Shell Exploitation Started Days Before Patches

    PHP2Shell Exploitation Started Days Before Patches 2026-10-22 at 12:48 By Ionut Arghire Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Starknet voters back research into life beyond Ethereum

    Starknet voters back research into life beyond Ethereum 2026-10-22 at 12:37 By Cointelegraph by Ezra Reguerra StarkWare plans to release a draft whitepaper in November as it explores an independent, quantum-resistant blockchain. This article is an excerpt from Cointelegraph.com News View Original Source

  • (Noise) cancel culture: These are the very best headphones to survive the subway and more

    (Noise) cancel culture: These are the very best headphones to survive the subway and more 2026-10-22 at 12:30 By Angela Tricarico Which pair of headphones drowned out the sound of the city? This article is an excerpt from Latest Technology News | New York Post View Original Source

  • Anker’s MagGo Power Bank 2 Pro ‘made it here’: The best power bank for daily life

    Anker’s MagGo Power Bank 2 Pro ‘made it here’: The best power bank for daily life 2026-10-22 at 12:30 By Barret Wertz Can it keep a New Yorker’s phone alive from the first swipe of the day to the last train home?  This article is an excerpt from Latest Technology News | New York Post…

  • Made It Here Awards 2026: Best Power Banks

    Made It Here Awards 2026: Best Power Banks 2026-10-22 at 12:30 By Barret Wertz Which power bank has enough juice for the Big Apple? This article is an excerpt from Latest Technology News | New York Post View Original Source

  • We tested 9 headphones in NYC —This is the pair that ‘made it here’

    We tested 9 headphones in NYC —This is the pair that ‘made it here’ 2026-10-22 at 12:30 By Angela Tricarico This pair is completely NYC-proof. This article is an excerpt from Latest Technology News | New York Post View Original Source

  • PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution

    PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution 2026-10-22 at 12:11 By Threat Hunter Team, Symantec Security Response Patch now: CVE-2026-109618 and CVE-2026-109619 let unauthenticated attackers run code on web servers running PHP, and details were public before fixes shipped. This article is an excerpt from SECURITY.COM View Original Source

  • Anthropic finds 94 cases where open-source projects drop security controls without warning

    Anthropic finds 94 cases where open-source projects drop security controls without warning 2026-10-22 at 12:10 By Anamarija Pogorelec Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and…

  • PHP flaw draws millions of exploit attempts, Cloudflare CEO warns

    PHP flaw draws millions of exploit attempts, Cloudflare CEO warns 2026-10-22 at 12:06 By Cointelegraph by Zoltan Vardai Cloudflare’s Matthew Prince said the network saw thousands of exploit attempts even before the PHP vulnerability was publicly disclosed. This article is an excerpt from Cointelegraph.com News View Original Source

  • Are You the Insider Threat?

    Are You the Insider Threat? 2026-10-22 at 12:00 By A conference invitation can be easy to justify: new ideas, contacts, technology, and professional development. This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

  • Signal flaw could expose audio and video even after users hang up

    Signal flaw could expose audio and video even after users hang up 2026-10-22 at 11:39 By Sinisa Markovic A flaw in Signal’s calling library could let the other person on a call keep receiving a user’s audio, and possibly video, after that user hangs up. Tracked as CVE-2026-113380, the vulnerability affects RingRTC versions before 2.72.0.…

  • Africa cybercrime crackdown nets 1,462 arrests and over $105 million

    Africa cybercrime crackdown nets 1,462 arrests and over $105 million 2026-10-22 at 11:17 By Anamarija Pogorelec Police in 21 countries arrested 1,462 suspects and took down 10,909 malicious networks in Operation Serengeti III, an INTERPOL-coordinated cybercrime sweep across Africa that ran from June 29 to August 31, 2026. Investigators recovered more than $105 million in…

  • Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

    Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU 2026-10-22 at 10:38 By Eduard Kovacs Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View…

  • Bitcoin ETFs bag another $528M, taking 3-day haul past $1B

    Bitcoin ETFs bag another $528M, taking 3-day haul past $1B 2026-10-22 at 10:37 By Cointelegraph by Helen Partz US spot Bitcoin ETFs drew $1.08 billion over three trading sessions to push October flows back above water. This article is an excerpt from Cointelegraph.com News View Original Source

  • AI-found bugs are expected to rise, and OpenAI has a five-stage response plan

    AI-found bugs are expected to rise, and OpenAI has a five-stage response plan 2026-10-22 at 10:35 By Mirko Zorz OpenAI has proposed a five-stage process for handling critical vulnerabilities in widely used software. The process grew out of a two-month response to flaws in PHP, the open-source language that runs websites and web applications. Calif…

  • Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook

    Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook 2026-10-22 at 10:26 By Associated Press The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy…

  • Delinea gives AI assistants read-only access to governance data

    Delinea gives AI assistants read-only access to governance data 2026-10-22 at 10:17 By Industry News Delinea has announced Delinea Fastpath MCP Server, a new capability that connects access governance data to the AI assistants teams already use. Using the Model Context Protocol (MCP), finance, IT, audit, and compliance teams can ask natural-language questions and get…

  • Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question

    Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question 2026-10-22 at 10:02 By Mirko Zorz In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to detect and stop…

  • AI agent permissions are outrunning security

    AI agent permissions are outrunning security 2026-10-22 at 09:02 By Mirko Zorz Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make decisions and take actions that would have required human approval a year ago.…

  • Say a few words, and a rigged AI asks for $5,000

    Say a few words, and a rigged AI asks for $5,000 2026-10-22 at 08:00 By Mirko Zorz Researchers at Imperial College London tampered with speech-to-text models so they transcribed most speakers accurately and misbehaved for one chosen person. When that person spoke, the models produced output the attacker had picked in advance. In one test,…

  • AI coding boom exposes cracks in cloud development

    AI coding boom exposes cracks in cloud development 2026-10-22 at 07:30 By Anamarija Pogorelec Developers are encountering bugs, testing delays and disruptions in shared cloud environments as AI increases the volume of code they produce, according to LocalStack’s 2026 State of AI in Cloud Development report. More code adds to the testing workload Sixty-five percent…

  • China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack

    China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack 2026-10-22 at 07:21 By Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made…

  • AI agent observability is struggling to keep up with hallucinations

    AI agent observability is struggling to keep up with hallucinations 2026-10-22 at 07:00 By Anamarija Pogorelec Sixty-two percent of IT and engineering professionals now rely on AI agents frequently to work out why their systems broke, and more than half have no way to measure whether the agents get it right. Splunk surveyed 2,050 of…

  • PHP Foundation admits ‘structural failure’ delayed critical security fix

    PHP Foundation admits ‘structural failure’ delayed critical security fix 2026-10-22 at 03:44 By Cointelegraph by Felix Ng Government websites and online services were disrupted after concerns about a PHP bug that could allow attackers to take control of vulnerable servers. This article is an excerpt from Cointelegraph.com News View Original Source

  • Mark Zuckerberg threatened to dump $110M California home over billionaire tax, Meta reveals in filing

    Mark Zuckerberg threatened to dump $110M California home over billionaire tax, Meta reveals in filing 2026-10-22 at 02:08 By Annie Gaus He’s not Zucking around. Meta CEO Mark Zuckerberg held detailed negotiations with the tech giant’s board of directors about moving out of California if the state passes Prop. 40, a 5% wealth tax on…

  • Chrome puts insecure sites behind a permission prompt

    Chrome puts insecure sites behind a permission prompt 2026-10-22 at 01:30 By Anamarija Pogorelec Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by default for all users, following its introduction earlier this year for users of Safe Browsing’s Enhanced…

  • Meta stock surges on strong earnings report; tech giant unveils new shares to bankroll AI spending

    Meta stock surges on strong earnings report; tech giant unveils new shares to bankroll AI spending 2026-10-22 at 01:12 By Ariel Zilber The Mark Zuckerberg-led tech giant unveiled plans for a new class of stock designed to bankroll its massive artificial intelligence spending. This article is an excerpt from Latest Technology News | New York…

  • American Bankers Association: OCC’s GENIUS rules ‘undermine’ US Congress

    American Bankers Association: OCC’s GENIUS rules ‘undermine’ US Congress 2026-10-22 at 00:53 By Cointelegraph by Turner Wright Banking advocacy organizations are pushing back against the OCC’s finalized rules on a stablecoin law, arguing against changes to provisions on yield. This article is an excerpt from Cointelegraph.com News View Original Source

  • Cali judge blasts Meta’s ‘attorney-client privilege’ swag hats, rejects company’s request to use AI for document review

    Cali judge blasts Meta’s ‘attorney-client privilege’ swag hats, rejects company’s request to use AI for document review 2026-10-21 at 23:56 By Thomas Barrabi A federal judge blasted Mark Zuckerberg’s Meta for using attorney-client privilege to conceal thousands of potentially explosive legal documents related to kids’ social media addiction. This article is an excerpt from Latest Technology…

  • Tesla surprises Wall Street with lower-than-expected AI spending as SpaceX merger talks heat up

    Tesla surprises Wall Street with lower-than-expected AI spending as SpaceX merger talks heat up 2026-10-21 at 23:41 By Reuters The unexpected cash flow could bolster Tesla’s case as investors weigh its value in a potential merger. This article is an excerpt from Latest Technology News | New York Post View Original Source

  • Tether backs Bolivian fintech bringing USDT payments to food delivery and banking

    Tether backs Bolivian fintech bringing USDT payments to food delivery and banking 2026-10-21 at 23:26 By Cointelegraph by Nate Kostar The investment will support Peso’s expansion across four Latin American markets, where it connects stablecoin payments to merchant services and local banking networks. This article is an excerpt from Cointelegraph.com News View Original Source

  • Trump didn‘t mention ‘crypto’ once in White House cybercrime roundtable

    Trump didn‘t mention ‘crypto’ once in White House cybercrime roundtable 2026-10-21 at 23:19 By Cointelegraph by Turner Wright The US President detailed many schemes defrauding Americans, but referred only to “cybercurrency“ related to scams. This article is an excerpt from Cointelegraph.com News View Original Source

  • Google faces Senate grilling over education AI as fears over kids’ mental health mount

    Google faces Senate grilling over education AI as fears over kids’ mental health mount 2026-10-21 at 22:50 By Ariel Zilber Google is facing a bipartisan Senate grilling over its aggressive push to put artificial intelligence in American classrooms amid mounting concerns that the technology could harm students’ academic performance and mental health. This article is…

  • Mass layoffs rock California gaming giant as boss’ memo released

    Mass layoffs rock California gaming giant as boss’ memo released 2026-10-21 at 22:03 By Ross O'Keefe A famed Silicon Valley gaming company is laying off hundreds of employees and shuttering prominent video game studio BioWare. This article is an excerpt from Latest Technology News | New York Post View Original Source

Browse older archives

Scroll to Top