Uncategorized

Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations 2026-10-22 at 19:12 By Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company’s Cambridge Analytica data scandal, which came to […]

Security Guard Killed in Hit-And-Run at GVSU’s Allendale Campus 2026-10-22 at 19:00 By Debra Smith, 69, was struck and killed in a hit-and-run incident.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

PHP Issues Patches for Two Critical Flaws, Security Leaders Discuss 2026-10-22 at 18:00 By PHP, which is used in most major operating systems, has issued fixes for two critical vulnerabilities. Security leaders discuss.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat 2026-10-22 at 17:55 By Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody […]

11M Impacted by Capcom Breach, Some Facing Unauthorized Changes 2026-10-22 at 17:00 By Capcom experienced a data breach impacting more than 11 million customer accounts.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown 2026-10-22 at 16:38 By INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects. Codenamed Operation […]

US Defense Department Faces Class Action Lawsuit for Data Breach 2026-10-22 at 16:00 By A data breach compromised sensitive, personally identifiable information for millions of current and former military. This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation 2026-10-22 at 14:15 By Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed “anomalous activity” related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases, […]

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL 2026-10-22 at 13:44 By A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer’s Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) […]

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release 2026-10-22 at 13:01 By LiteLLM on Wednesday disclosed that threat actors compromised “multiple independent security controls” to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM’s release pipeline was compromised to […]

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed 2026-10-22 at 13:01 By Amazon’s Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following […]

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification 2026-10-22 at 13:01 By A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory […]

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions 2026-10-22 at 13:01 By Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow […]

We tested 9 headphones in NYC —This is the pair that ‘made it here’ 2026-10-22 at 12:30 By Angela Tricarico This pair is completely NYC-proof. This article is an excerpt from Latest Technology News | New York Post View Original Source

Made It Here Awards 2026: Best Power Banks 2026-10-22 at 12:30 By Barret Wertz Which power bank has enough juice for the Big Apple? This article is an excerpt from Latest Technology News | New York Post View Original Source

Anker’s MagGo Power Bank 2 Pro ‘made it here’: The best power bank for daily life 2026-10-22 at 12:30 By Barret Wertz Can it keep a New Yorker’s phone alive from the first swipe of the day to the last train home?  This article is an excerpt from Latest Technology News | New York Post […]

(Noise) cancel culture: These are the very best headphones to survive the subway and more 2026-10-22 at 12:30 By Angela Tricarico Which pair of headphones drowned out the sound of the city? This article is an excerpt from Latest Technology News | New York Post View Original Source

PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution 2026-10-22 at 12:11 By Threat Hunter Team, Symantec Security Response Patch now: CVE-2026-109618 and CVE-2026-109619 let unauthenticated attackers run code on web servers running PHP, and details were public before fixes shipped. This article is an excerpt from SECURITY.COM View Original Source

Are You the Insider Threat? 2026-10-22 at 12:00 By A conference invitation can be easy to justify: new ideas, contacts, technology, and professional development. This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack 2026-10-22 at 07:21 By Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made […]