1825
Swati KhandelwalOct 27, 2026Vulnerability / Mobile Security Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted…
adminSwati KhandelwalOct 27, 2026Artificial Intelligence / Data Security OpenAI’s compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model’s hidden…
Swati KhandelwalOct 27, 2026Malware / Cybercrime A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia,…
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. «Cases of compromising IP cameras and…
Ravie LakshmananOct 27, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to…
adminMás de un tercio de las infecciones por infostealers (un tipo de malware creado para robar contraseñas, cookies, datos bancarios y otra información sensible) empieza cuando los usuarios ejecutan archivos…
adminTodos los días las empresas e instituciones españolas son objetivo de ataques de ransomware. La última en ser víctima de este tipo de incidentes es Grupo Caliche. El grupo de…
adminLa Policía de Ucrania, en colaboración con el Servicio de Seguridad y la Fiscalía General nacional han llevado a cabo una operación a gran escala en varias regiones del país…
adminEl grupo de hackers JabaROOT DZ ha elevado un nuevo escalón su ofensiva contra Marruecos con la publicación de datos personales de supuestos miembros de los servicios de seguridad e…
Ravie LakshmananOct 26, 2026Malware / Web Security An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July…
Cybersecurity researchers are calling attention to what they say is a «recurring social engineering pattern» across hundreds of cases in which threat actors use Microsoft Teams’ external chat creation feature…
Swati KhandelwalOct 26, 2026Vulnerability / Web Security PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that…
This2Shell, That2Shell, Everything2Shell. That’s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws…
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the…
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository’s secrets into its GitHub Actions logs, which the attackers then download before deleting the runs.…
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection…
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches…
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into…
Swati KhandelwalOct 26, 2026Artificial Intelligence / Endpoint Security A malicious instruction file sitting in a developer’s Downloads folder tried to make their AI coding agent install a known-malicious npm package,…
adminThreat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. «In one case, the…
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings…
adminOpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models.…
Ravie LakshmananOct 24, 2026Privacy / Artificial Intelligence Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the…
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious…
A memory-corruption flaw in Google’s Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to…
Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater…
Ravie LakshmananOct 24, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator…
adminCybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an «Autonomous Red Team…
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan,…
Swati KhandelwalOct 23, 2026Vulnerability / Software Security Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The…
adminRavie LakshmananOct 23, 2026Vulnerability / Cyber Attack Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto…
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing…
Ravie LakshmananOct 23, 2026Malware / Cyber Espionage The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics…
Swati KhandelwalOct 23, 2026Vulnerability / Web Security PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for…
Swati KhandelwalOct 23, 2026Vulnerability / Web Security Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the…
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security…
Swati KhandelwalOct 23, 2026Vulnerability / Web Security Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their…
Swati KhandelwalOct 22, 2026Vulnerability / Linux Linux servers running KSMBD, the kernel’s built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro’s…
Swati KhandelwalOct 22, 2026Vulnerability / Enterprise Security Attackers are exploiting a zero-day SQL injection flaw in Arista’s VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company…
adminEl presidente de Ucrania, Volodímir Zelenski, ha designado a Ihor Klymenko, secretario del Consejo Nacional de Seguridad y Defensa (CNSD) del país, como responsable del Centro Nacional de Coordinación de…
adminEl caso del ciberataque sufrido por TuLotero da un nuevo giro. Apenas un mes después de que la plataforma de lotería online comunicara que un acceso no autorizado había dejado…
adminPuede resultar paradójico, pero dispositivos diseñados para brindar seguridad, como las cámaras de vigilancia o los vigilabebés, pueden ser una puerta de entrada para aquellos que se encargan precisamente de…
adminLos ciberdelincuentes no descansan nunca y ahora están aprovechando las quejas que los pasajeros publican en redes sociales para hacerse pasar por empleados de las aerolíneas, ofrecer compensaciones inexistentes y conseguir información…
adminEl grupo de ransomware Conti dejó de operar hace años, pero las consecuencias de su actividad siguen llegando a los tribunales. Lytvynenko se declaró culpable el pasado 10 de junio…
Ravie LakshmananOct 22, 2026Hacking News / Cybersecurity News This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a…
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the…
Ravie LakshmananOct 22, 2026Data Privacy / Regulatory Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a…
Amazon’s Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws…
The Hacker NewsOct 22, 2026Enterprise Security / Artificial Intelligence Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and…
Ravie LakshmananOct 22, 2026Cybercrime / Law Enforcement INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit…
Swati KhandelwalOct 22, 2026Vulnerability / Artificial Intelligence A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer’s Windows or…
adminPlatform-as-a-Service (PaaS) provider Railway on Wednesday disclosed «anomalous activity» related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have…
adminSwati KhandelwalOct 22, 2026Vulnerability / Web Security A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing…
Swati KhandelwalOct 22, 2026Vulnerability / Web Security Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious…
LiteLLM on Wednesday disclosed that threat actors compromised «multiple independent security controls» to push a malicious version of the Python package containing a credential stealer and a backdoor. On October…
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX,…
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian cybersecurity firm Solar, the activity has been…
Swati KhandelwalOct 21, 2026Artificial Intelligence / National Security U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services «developed using…
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software…
adminEl grupo de ciberdelincuentes Aur0ra ha añadido a Estrategias BigMat SLU, la franquicia máster en España del gigante de la distribución de materiales de construcción BigMat International, a su página…
adminEl pasado fin de semana un aparatoso ciberataque sorprendía a las principales cadenas de supermercados francesas. Compañías como Intermarché, Carrefour o Auchan vivían como decenas de sus establecimientos tenían problemas…
adminUna filtración masiva ha dejado al descubierto más de 200 GB de archivos internos relacionados con la producción de series de animación de Cartoon Network. El material incluye storyboards, diseños…
adminLos hackers están empleando la película La Odisea como cebo para infectar ordenadores. La amenaza ya ha dejado varios cientos de víctimas en Europa, con España entre los países más perjudicados.…
adminEl grupo de ciberdelincuentes The Seven Deadly Sins ha reivindicado un ataque contra Canva, la plataforma australiana de diseño y comunicación visual, y asegura haber obtenido información procedente de sus…
adminAttackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found. Exit…
Ravie LakshmananOct 21, 2026Malware / Artificial Intelligence The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a…
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks.…
adminGenerative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now arrive fluent, personalized, and unique…
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in…
Ravie LakshmananOct 21, 2026Cyber Espionage / Malware Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in…
Google on Tuesday said it’s rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social engineering…
The Hacker NewsOct 21, 2026AI Penetration Testing / Web Security An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little…
You cannot fully block the two critical PHP flaws called PHP2Shell before today’s fix, and the one setting being passed around as a workaround is not enough on its own,…
Unknown threat actors breached TeamUpdraft’s website and potentially gained unauthorized access to customers’ connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites. TeamUpdraft is the developer…
Ravie LakshmananOct 21, 2026Vulnerability / Malware The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting…
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know…
Swati KhandelwalOct 21, 2026Vulnerability / Web Security PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated…
Ravie LakshmananOct 20, 2026Cloud Security / Incident Response ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing application credentials, as it…
The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization…
Swati KhandelwalOct 20, 2026Encryption / Software Security Go 1.27.3 and Go 1.26.10, released on October 20, make Go’s certificate verifier reject any certificate chain that passes through one of eight…
adminThe private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google’s Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that…
A sales manager builds an AI-assisted workflow to route leads. It connects to customer records, summarizes inbound requests, and posts updates to a shared channel. The workflow saves time, reduces…
Ravie LakshmananOct 20, 2026Vulnerability / Network Security Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware…
Ravie LakshmananOct 20, 2026Vulnerability / Enterprise Security Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary…
adminA Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left…
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia’s student protest movement, was infected with NSO Group’s Pegasus spyware in 2026, the…
WhatsApp’s help pages carried hidden instructions for its support chatbot that told it not to recommend a data protection authority or regulator to users who could no longer delete their…
adminAn attacker used a contributor’s GitHub account to replace the download archives on five existing releases of OVHcloud’s command-line tool on Monday, October 19. The account had been hijacked, and…
Ravie LakshmananOct 20, 2026Vulnerability / Endpoint Security Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability,…
Swati KhandelwalOct 20, 2026Cyber Espionage / Data Security A U.S. court on Monday granted the U.S. government’s request to detain a former OpenAI engineer accused of planting a recording device…
Ravie LakshmananOct 20, 2026Artificial Intelligence / Cybercrime Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that’s being used to distribute malware such as Legion Loader. According…
Ravie LakshmananOct 19, 2026Vulnerability / Web Security Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a…
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October…
The Hacker NewsOct 19, 2026Artificial Intelligence / Enterprise Security In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or…
The worst problems don’t always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the…
adminThe threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised…
adminA fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI)…
Swati KhandelwalOct 19, 2026Data Breach / Artificial Intelligence An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider…
A flaw in Broadcom’s Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher…
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application…