Uncategorized

Conservative groups warn letting AI giants ‘recklessly crawl the internet’ would jeopardize news outlets, national security: court filing 2026-10-29 at 18:13 By Thomas Barrabi Conservative groups are urging a Manhattan federal court not to allow AI giants to ‘recklessly crawl the internet’ without compensating news outlets and other content providers — warning that it could […]

Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners 2026-10-29 at 17:20 By Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that […]

Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities 2026-10-29 at 16:36 By Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. “It shows significant gains across coding and agentic tasks as well as across key capabilities critical for cybersecurity defense, […]

Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls 2026-10-29 at 15:35 By A flaw in Telegram for Android allowed an attacker to run code on a victim’s phone via a voice call once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed […]

Webinar: How to Build AI Threat Readiness Into Your Security Operations 2026-10-29 at 15:35 By Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models can now help attackers discover vulnerabilities, generate exploit code, and move through weaknesses […]

26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories 2026-10-29 at 15:35 By 26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code could have used it. Independent researcher Ben Zimmermann found them by […]

The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers 2026-10-29 at 15:35 By AI is beginning to take over much of the work that has traditionally defined the security analyst’s job. Investigating alerts, collecting evidence, correlating activity across tools, and executing response actions are becoming tasks that AI systems can […]

42M Records Exposed by Government Technology Platform 2026-10-29 at 15:15 By 42 million documents, many containing personally identifiable information (PII) in plaintext, were leaked.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

GitHub Launches npm Firewall to Block Malicious Packages Before Installation 2026-10-29 at 13:17 By GitHub has announced that it’s introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. “The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time […]

Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open 2026-10-29 at 13:17 By An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project’s own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October. The flaw, CVE-2026-97229 (CVSS score: 10.0), can let an […]

Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls 2026-10-29 at 12:44 By Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild. The vulnerability, tracked as […]

Sandbox Flipped to ‘Danger-Full-Access’: Unauthorized AI Relays Create Risk for Organizations 2026-10-29 at 12:00 By Threat Hunter Team A grey market relay service installs the real OpenAI Codex and Anthropic Claude Code CLIs, then reconfigures them to route every prompt and credential through third-party servers with sandboxing switched off. This article is an excerpt from […]

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys 2026-10-29 at 11:04 By Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization’s SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between […]

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility 2026-10-29 at 09:56 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as […]

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces 2026-10-29 at 09:56 By Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. “Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet,” the network security company […]

Google parent Alphabet tumbles after profit disappoints, warns AI is battering its cash flow 2026-10-29 at 00:52 By Reuters Alphabet’s cash burn was driven by spending to boost cloud capacity and fund AI research. This article is an excerpt from Latest Technology News | New York Post View Original Source

‘Quick and painless’: Aussie woman poses as suicidal teen. See AI app’s vile responses 2026-10-28 at 23:10 By News.com.au A reporter posed as a suicidal 14-year-old girl on the Character app. It took just five minutes to suggest methods to end her life. This article is an excerpt from Latest Technology News | New York […]

FTC demands Walmart, Target Uber and others hand over data on personalized pricing 2026-10-28 at 21:19 By Reuters The FTC will use the information to eventually publish a study to help inform regulators and lawmakers about personalized pricing and wage setting practices. This article is an excerpt from Latest Technology News | New York Post […]

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns 2026-10-28 at 20:08 By The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. “First identified in late 2023, Silent […]

Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. 2026-10-28 at 19:08 By Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android’s usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and […]