Uncategorized

Meta schemed ‘whisper strategy’ to discredit influential social media critic Jonathan Haidt: bombshell docs 2026-10-27 at 19:53 By Thomas Barrabi Meta employees schemed about how to “get the academic community to disavow” social media critic Jonathan Haidt — a ploy to tamp down claims that its apps were fueling a teen mental health crisis, according […]

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads 2026-10-27 at 19:01 By Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary […]

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption 2026-10-27 at 19:01 By The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use […]

🎙️SECURITY.COM The Podcast: Behind the Scores 2026-10-27 at 18:09 By Dan Mellinger ISO standards, TCO quadrant math, and cutting through glossy vendor marketing claims This article is an excerpt from SECURITY.COM View Original Source

Microsoft Releases Emergency .NET Patches 2026-10-27 at 18:00 By Microsoft released emergency .NET patches for .NET 8, .NET 9, .NET 10, and .NET 11 Release Candidate 3.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

New Research Reveals Gaps in AI Safeguards, Cyber Experts Discuss 2026-10-27 at 17:00 By New research from METR reveals that OpenAI’s internal agent monitoring systems had safeguard gaps. This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption 2026-10-27 at 15:03 By The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity company Kaspersky, […]

AI-Generated Fake Login Pages Are Making Account Takeovers Easier 2026-10-27 at 15:03 By Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens, impersonate trusted brands and tailor phishing attempts to specific employees or organizations.  Some fake login pages go beyond […]

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key 2026-10-27 at 15:03 By An attacker who gained access to Keystone’s website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the […]

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens 2026-10-27 at 14:09 By Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim’s work account. Microsoft tracks the […]

I tried the viral $299 high-tech baby sock — I was startled by the results 2026-10-27 at 12:30 By Tracy Swartz The sock looks like a tiny gladiator sandal and fits snugly on a baby’s foot thanks to Velcro-like straps. This article is an excerpt from Latest Technology News | New York Post View Original […]

OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections 2026-10-27 at 12:18 By OpenAI’s compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model’s hidden reasoning out in plain text, security firm Xint has shown. OpenAI’s reasoning models work through a problem before answering, and the service […]

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers 2026-10-27 at 11:33 By A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency’s operators gained access to the criminal’s […]

Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses 2026-10-27 at 10:27 By The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. “Cases of compromising IP cameras and DVRs with access to the video stream, changing […]

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution 2026-10-27 at 06:37 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring […]

Anthropic files for blockbuster IPO that could value AI giant at $2 trillion 2026-10-27 at 02:35 By Annie Gaus, Josh Koehn Anthropic formally filed paperwork Monday to go public at a valuation of up to $2 trillion — and the public offering is expected to mint a new crop of California mega-billionaires. The Claude maker’s […]

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento 2026-10-27 at 01:40 By An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece […]

DoorDash in talks to buy delivery rival Instacart in $17B deal: report 2026-10-27 at 01:18 By Reuters Instacart’s deal talks with Uber are no longer active, a source told rivals. This article is an excerpt from Latest Technology News | New York Post View Original Source

Anthropic’s delay in reporting ‘rogue agent’ Georgia vote hack alarms government officials  2026-10-27 at 00:32 By Lydia Moynihan Both the incident and Anthropic’s handling of it are raising alarm bells, just days before the midterm elections. This article is an excerpt from Latest Technology News | New York Post View Original Source

Apple addresses reports of cracked screens on $2K iPhone Duo just days after frenzied launch 2026-10-26 at 23:10 By Ariel Zilber Apple has acknowledged a problem with the inner screens of its new $1,999 foldable iPhone Duo after customers reported cracks and bright lines appearing near the hinge. This article is an excerpt from Latest […]