{ "month": "2026-10", "item_count": 279, "items": [ { "title": "Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer", "link": "https://blog.talosintelligence.com/appraisal-by-ai-model-driven-victim-prioritization-in-the-volta-infostealer", "canonical_url": "https://blog.talosintelligence.com/appraisal-by-ai-model-driven-victim-prioritization-in-the-volta-infostealer", "date": "2026-10-31T12:00:00Z", "source": "Cisco Talos", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims", "link": "https://wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware", "canonical_url": "https://wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware", "date": "2026-10-31T12:00:00Z", "source": "Wired Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Syrian Hacker Gets Prison Time in US After Over a Decade on the Run", "link": "https://securityweek.com/syrian-hacker-gets-prison-time-in-us-after-over-a-decade-on-the-run", "canonical_url": "https://securityweek.com/syrian-hacker-gets-prison-time-in-us-after-over-a-decade-on-the-run", "date": "2026-10-31T11:00:00Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%", "link": "https://thehackernews.com/2026/10/cloudflare-reports-182-million-network.html", "canonical_url": "https://thehackernews.com/2026/10/cloudflare-reports-182-million-network.html", "date": "2026-10-31T04:56:12Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Inside a malicious Claude Code-branded extension and its persistent SSH backdoor", "link": "https://microsoft.com/en-us/security/blog/2026/10/30/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor", "canonical_url": "https://microsoft.com/en-us/security/blog/2026/10/30/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor", "date": "2026-10-31T01:02:57Z", "source": "Microsoft Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices", "link": "https://wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems", "canonical_url": "https://wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems", "date": "2026-10-30T20:38:46Z", "source": "Wired Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Fashion retailer Resolve says hackers stole payment card information", "link": "https://therecord.media/resolve-fashion-retailer-data-breach-payment-cards", "canonical_url": "https://therecord.media/resolve-fashion-retailer-data-breach-payment-cards", "date": "2026-10-30T19:00:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "The Good, the Bad and the Ugly in Cybersecurity - Week 44 (2026)", "link": "https://sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-44-8", "canonical_url": "https://sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-44-8", "date": "2026-10-30T17:29:33Z", "source": "SentinelOne", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide", "link": "https://thehackernews.com/2026/10/chinese-hackers-use-ai-powered-artex-to.html", "canonical_url": "https://thehackernews.com/2026/10/chinese-hackers-use-ai-powered-artex-to.html", "date": "2026-10-30T16:58:44Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)", "link": "https://rapid7.com/blog/post/ra-rapid7-analysis-unauthenticated-file-upload-to-rce-in-beyondtrust-remote-support-cve-2026-102764", "canonical_url": "https://rapid7.com/blog/post/ra-rapid7-analysis-unauthenticated-file-upload-to-rce-in-beyondtrust-remote-support-cve-2026-102764", "date": "2026-10-30T16:01:53Z", "source": "Rapid7", "cves": [ "CVE-2026-102764" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach", "link": "https://therecord.media/florida-warns-5-million-affected-financial-aid-site-breach", "canonical_url": "https://therecord.media/florida-warns-5-million-affected-financial-aid-site-breach", "date": "2026-10-30T15:54:00Z", "source": "The Record", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Stopping Node2Shell: How SentinelOne Protects Customers From Brotli-Based Remote Code Execution", "link": "https://sentinelone.com/blog/stopping-node2shell-sentinelone-protects-customers-from-brotli-based-RCE", "canonical_url": "https://sentinelone.com/blog/stopping-node2shell-sentinelone-protects-customers-from-brotli-based-RCE", "date": "2026-10-30T15:06:45Z", "source": "SentinelOne", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak", "link": "https://securityweek.com/in-other-news-anthropic-breach-dispute-uefi-flaw-hits-most-servers-cloudflare-ai-data-leak", "canonical_url": "https://securityweek.com/in-other-news-anthropic-breach-dispute-uefi-flaw-hits-most-servers-cloudflare-ai-data-leak", "date": "2026-10-30T14:41:35Z", "source": "SecurityWeek", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Syrian Electronic Army hacker gets prison time for attacks on Western targets", "link": "https://therecord.media/syrian-electronic-army-hacker-sentenced-three-years", "canonical_url": "https://therecord.media/syrian-electronic-army-hacker-sentenced-three-years", "date": "2026-10-30T14:24:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ { "name": "Deadeye Jackal", "url": "/deadeye-jackal", "matched_alias": "syrianelectronicarmy" } ] }, { "title": "WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours", "link": "https://thehackernews.com/2026/10/wordpress-rce-flaw-draws-nearly-63000.html", "canonical_url": "https://thehackernews.com/2026/10/wordpress-rce-flaw-draws-nearly-63000.html", "date": "2026-10-30T14:08:14Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers steal $6.3 billion from Binance in record crypto heist", "link": "https://arstechnica.com/security/2026/10/hackers-steal-6-3-billion-from-binance-in-record-crypto-heist", "canonical_url": "https://arstechnica.com/security/2026/10/hackers-steal-6-3-billion-from-binance-in-record-crypto-heist", "date": "2026-10-30T13:46:39Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA says max severity GitLab flaw now exploited in the wild", "link": "https://bleepingcomputer.com/news/security/hackers-now-exploiting-max-severity-gitlab-flaw-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-now-exploiting-max-severity-gitlab-flaw-in-attacks", "date": "2026-10-30T13:00:32Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Fresh WordPress Vulnerability in Attackers’ Crosshairs", "link": "https://securityweek.com/fresh-wordpress-vulnerability-in-attackers-crosshairs", "canonical_url": "https://securityweek.com/fresh-wordpress-vulnerability-in-attackers-crosshairs", "date": "2026-10-30T12:04:13Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Adds Two Known Exploited Vulnerabilities to Catalog", "link": "https://cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog", "canonical_url": "https://cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog", "date": "2026-10-30T12:00:00Z", "source": "CISA Advisories", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers steal and publish data on 41,000 Homeland Security workers", "link": "https://malwarebytes.com/blog/data-breaches/2026/10/hackers-steal-and-publish-data-on-41000-homeland-security-workers", "canonical_url": "https://malwarebytes.com/blog/data-breaches/2026/10/hackers-steal-and-publish-data-on-41000-homeland-security-workers", "date": "2026-10-30T11:33:12Z", "source": "Malwarebytes", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Drupal Commerce Core Vulnerability Exploited Against Online Stores ", "link": "https://securityweek.com/drupal-commerce-core-vulnerability-exploited-against-online-stores", "canonical_url": "https://securityweek.com/drupal-commerce-core-vulnerability-exploited-against-online-stores", "date": "2026-10-30T11:07:11Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison", "link": "https://thehackernews.com/2026/10/syrian-hacker-behind-fake-tweet-that.html", "canonical_url": "https://thehackernews.com/2026/10/syrian-hacker-behind-fake-tweet-that.html", "date": "2026-10-30T10:40:45Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack", "link": "https://securityweek.com/2-million-drained-from-polymarket-traders-in-new-supply-chain-attack", "canonical_url": "https://securityweek.com/2-million-drained-from-polymarket-traders-in-new-supply-chain-attack", "date": "2026-10-30T09:41:36Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Binance links $6.3 billion crypto theft to compromised DevOps laptop", "link": "https://bleepingcomputer.com/news/security/binance-links-63-billion-crypto-theft-to-compromised-devops-laptop", "canonical_url": "https://bleepingcomputer.com/news/security/binance-links-63-billion-crypto-theft-to-compromised-devops-laptop", "date": "2026-10-30T09:18:13Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor", "link": "https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html", "canonical_url": "https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html", "date": "2026-10-30T08:55:47Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw", "link": "https://thehackernews.com/2026/10/hackers-actively-exploit-highly.html", "canonical_url": "https://thehackernews.com/2026/10/hackers-actively-exploit-highly.html", "date": "2026-10-30T07:45:30Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV", "link": "https://thehackernews.com/2026/10/cisa-adds-actively-exploited-gitlab-rce.html", "canonical_url": "https://thehackernews.com/2026/10/cisa-adds-actively-exploited-gitlab-rce.html", "date": "2026-10-30T07:27:05Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical Remote Code Execution Vulnerability in the Linux Kernel TCP Stack (CVE-2026-98432)", "link": "https://labs.beazley.security/advisories/BSL-A1239", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1239", "date": "2026-10-30T06:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-98432" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen", "link": "https://thehackernews.com/2026/10/binance-suffers-security-breach.html", "canonical_url": "https://thehackernews.com/2026/10/binance-suffers-security-breach.html", "date": "2026-10-30T04:14:59Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Binance pauses withdrawals as hackers suspected of stealing billions in crypto", "link": "https://techcrunch.com/2026/10/29/binance-pauses-withdrawals-as-hackers-suspected-of-stealing-billions-in-crypto", "canonical_url": "https://techcrunch.com/2026/10/29/binance-pauses-withdrawals-as-hackers-suspected-of-stealing-billions-in-crypto", "date": "2026-10-29T22:27:23Z", "source": "TechCrunch", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hugging Face malware campaign returns to hijack GPUs for crypto mining", "link": "https://bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining", "canonical_url": "https://bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining", "date": "2026-10-29T22:09:24Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Japan Airlines suffers third-party data breach exposing passenger info", "link": "https://bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info", "canonical_url": "https://bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info", "date": "2026-10-29T22:08:04Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Polymarket halts trading after crypto-draining script breach, $2.5M traced", "link": "https://bleepingcomputer.com/news/security/polymarket-halts-trading-after-crypto-draining-script-breach-25m-traced", "canonical_url": "https://bleepingcomputer.com/news/security/polymarket-halts-trading-after-crypto-draining-script-breach-25m-traced", "date": "2026-10-29T21:47:25Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Anthropic-Themed Phishing Emails Bypass Top Security Tools", "link": "https://darkreading.com/cyberattacks-data-breaches/anthropic-phishing-emails-bypass-security-tools", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/anthropic-phishing-emails-bypass-security-tools", "date": "2026-10-29T21:21:56Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Rethinking Cybersecurity Awareness in the AI Era", "link": "https://darkreading.com/cyber-risk/rethinking-cybersecurity-awareness-ai-era", "canonical_url": "https://darkreading.com/cyber-risk/rethinking-cybersecurity-awareness-ai-era", "date": "2026-10-29T20:15:37Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Polymarket Halted International Trading After Hackers Drained Accounts", "link": "https://wired.com/story/polymarket-flagship-platform-hack-traders-lose-money", "canonical_url": "https://wired.com/story/polymarket-flagship-platform-hack-traders-lose-money", "date": "2026-10-29T19:51:56Z", "source": "Wired", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware", "link": "https://bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware", "date": "2026-10-29T18:38:26Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)", "link": "https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619", "canonical_url": "https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619", "date": "2026-10-29T18:00:34Z", "source": "Unit 42", "cves": [ "CVE-2026-109618", "CVE-2026-109619" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "A quiet week in infosec <.<", "link": "https://blog.talosintelligence.com/a-quiet-week-in-infosec", "canonical_url": "https://blog.talosintelligence.com/a-quiet-week-in-infosec", "date": "2026-10-29T18:00:00Z", "source": "Cisco Talos", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Tracking AI adoption in North Korean threat actor tradecraft", "link": "https://microsoft.com/en-us/security/blog/2026/10/29/tracking-ai-adoption-in-north-korean-threat-actor-tradecraft", "canonical_url": "https://microsoft.com/en-us/security/blog/2026/10/29/tracking-ai-adoption-in-north-korean-threat-actor-tradecraft", "date": "2026-10-29T16:00:00Z", "source": "Microsoft Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Threat Modeling With 4 Simple Questions on a White Board", "link": "https://darkreading.com/cyber-risk/threat-modeling-4-simple-questions", "canonical_url": "https://darkreading.com/cyber-risk/threat-modeling-4-simple-questions", "date": "2026-10-29T15:44:04Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Backdoor or Confused Agent? What We Learned Replaying the Qwen Incident", "link": "https://blog.checkpoint.com/ai-security/qwen-incident-backdoor-ai-agents", "canonical_url": "https://blog.checkpoint.com/ai-security/qwen-incident-backdoor-ai-agents", "date": "2026-10-29T14:09:53Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases", "link": "https://blog.talosintelligence.com/ir-trends-q3-2026", "canonical_url": "https://blog.talosintelligence.com/ir-trends-q3-2026", "date": "2026-10-29T14:00:00Z", "source": "Cisco Talos", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks", "link": "https://bleepingcomputer.com/news/security/cisa-warns-of-fragnesia-linux-flaw-chained-in-php2shell-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-warns-of-fragnesia-linux-flaw-chained-in-php2shell-attacks", "date": "2026-10-29T13:59:48Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities", "link": "https://thehackernews.com/2026/10/googles-gemini-4-carbon-leads.html", "canonical_url": "https://thehackernews.com/2026/10/googles-gemini-4-carbon-leads.html", "date": "2026-10-29T13:42:40Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants", "link": "https://blog.cloudflare.com/ddos-threat-report-2026-q3", "canonical_url": "https://blog.cloudflare.com/ddos-threat-report-2026-q3", "date": "2026-10-29T12:55:00Z", "source": "Cloudflare", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards", "link": "https://wired.com/story/a-hacker-targeted-high-stakes-poker-players-with-malware-that-exposed-their-cards", "canonical_url": "https://wired.com/story/a-hacker-targeted-high-stakes-poker-players-with-malware-that-exposed-their-cards", "date": "2026-10-29T10:30:00Z", "source": "Wired Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes", "link": "https://darkreading.com/threat-intelligence/ai-relay-service-openai-codex-claude-code-sandboxes", "canonical_url": "https://darkreading.com/threat-intelligence/ai-relay-service-openai-codex-claude-code-sandboxes", "date": "2026-10-29T10:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "NIK C2: The new AI-enabled command-and-control framework", "link": "https://blog.talosintelligence.com/nik-c2-new-ai-enabled-framework", "canonical_url": "https://blog.talosintelligence.com/nik-c2-new-ai-enabled-framework", "date": "2026-10-29T10:00:00Z", "source": "Cisco Talos", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js", "link": "https://blog.checkpoint.com/security/http2shell-the-brotli-vulnerability-that-extends-beyond-node-js", "canonical_url": "https://blog.checkpoint.com/security/http2shell-the-brotli-vulnerability-that-extends-beyond-node-js", "date": "2026-10-29T09:17:50Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open", "link": "https://thehackernews.com/2026/10/attacker-tried-to-exploit-alpine-linuxs.html", "canonical_url": "https://thehackernews.com/2026/10/attacker-tried-to-exploit-alpine-linuxs.html", "date": "2026-10-29T09:05:39Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys", "link": "https://thehackernews.com/2026/10/hackers-exploited-cisco-sd-wan-flaw-to.html", "canonical_url": "https://thehackernews.com/2026/10/hackers-exploited-cisco-sd-wan-flaw-to.html", "date": "2026-10-29T08:24:22Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia", "link": "https://securelist.com/netamloader/121676", "canonical_url": "https://securelist.com/netamloader/121676", "date": "2026-10-29T08:00:15Z", "source": "Securelist", "cves": [ ], "tags": [ "apt" ], "actors": [ ] }, { "title": "Cyber Vulnerabilities Besiege Italy, Absent Clear Cause", "link": "https://darkreading.com/cybersecurity-analytics/cyber-vulnerabilities-besiege-italy", "canonical_url": "https://darkreading.com/cybersecurity-analytics/cyber-vulnerabilities-besiege-italy", "date": "2026-10-29T08:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility", "link": "https://thehackernews.com/2026/10/china-linked-hackers-exploited-vmware.html", "canonical_url": "https://thehackernews.com/2026/10/china-linked-hackers-exploited-vmware.html", "date": "2026-10-29T06:22:33Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces", "link": "https://thehackernews.com/2026/10/attackers-exploit-php2shell-flaws-in.html", "canonical_url": "https://thehackernews.com/2026/10/attackers-exploit-php2shell-flaws-in.html", "date": "2026-10-29T05:50:17Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Denial of Service Vulnerability in Cisco Secure Firewall ASA Under Active Exploitation (CVE-2026-76418)", "link": "https://labs.beazley.security/advisories/BSL-A1238", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1238", "date": "2026-10-29T05:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-76418" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents", "link": "https://techcrunch.com/2026/10/28/hacker-stole-personnel-data-about-thousands-of-homeland-security-employees-including-cbp-and-ice-agents", "canonical_url": "https://techcrunch.com/2026/10/28/hacker-stole-personnel-data-about-thousands-of-homeland-security-employees-including-cbp-and-ice-agents", "date": "2026-10-28T20:01:00Z", "source": "TechCrunch", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub", "link": "https://darkreading.com/application-security/ghostaction-hacking-wave-fizzles-attackers-github", "canonical_url": "https://darkreading.com/application-security/ghostaction-hacking-wave-fizzles-attackers-github", "date": "2026-10-28T19:39:00Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ { "name": "GhostAction", "url": "/ghostaction", "matched_alias": "ghostaction" } ] }, { "title": "Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns", "link": "https://thehackernews.com/2026/10/volt-typhoon-used-covert-silent-train.html", "canonical_url": "https://thehackernews.com/2026/10/volt-typhoon-used-covert-silent-train.html", "date": "2026-10-28T18:08:33Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "Volt Typhoon", "url": "/apt1017", "matched_alias": "volt typhoon" } ] }, { "title": "Volt Typhoon hides zero-day attacks using 'Silent Train' framework", "link": "https://bleepingcomputer.com/news/security/volt-typhoon-hides-zero-day-attacks-using-silent-train-framework", "canonical_url": "https://bleepingcomputer.com/news/security/volt-typhoon-hides-zero-day-attacks-using-silent-train-framework", "date": "2026-10-28T16:00:00Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ { "name": "Volt Typhoon", "url": "/apt1017", "matched_alias": "volt typhoon" } ] }, { "title": "CISA warns of hackers now exploiting critical Node2Shell flaw", "link": "https://bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw", "date": "2026-10-28T10:46:23Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Millions of security cameras at risk: DoS vulnerability in Intelbras devices", "link": "https://securelist.com/intelbras-camera-vulnerability/121131", "canonical_url": "https://securelist.com/intelbras-camera-vulnerability/121131", "date": "2026-10-28T10:00:18Z", "source": "Securelist", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Nefilim and Hive ransomware affiliate gets 70 months in prison", "link": "https://bleepingcomputer.com/news/security/nefilim-and-hive-ransomware-affiliate-gets-70-months-in-prison", "canonical_url": "https://bleepingcomputer.com/news/security/nefilim-and-hive-ransomware-affiliate-gets-70-months-in-prison", "date": "2026-10-28T09:43:15Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Nefilim", "url": "/nefilim", "matched_alias": "nefilim" } ] }, { "title": "Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach", "link": "https://thehackernews.com/2026/10/japans-gmo-offers-1-million-bounty-to.html", "canonical_url": "https://thehackernews.com/2026/10/japans-gmo-offers-1-million-bounty-to.html", "date": "2026-10-28T07:13:21Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws", "link": "https://thehackernews.com/2026/10/shinyhunters-exploited-oracle.html", "canonical_url": "https://thehackernews.com/2026/10/shinyhunters-exploited-oracle.html", "date": "2026-10-28T06:04:58Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges", "link": "https://thehackernews.com/2026/10/adobe-commerce-polyshell-attacks-breach.html", "canonical_url": "https://thehackernews.com/2026/10/adobe-commerce-polyshell-attacks-breach.html", "date": "2026-10-28T05:42:26Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Hackers hijack Convertr analytics script to steal payment card data", "link": "https://bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data", "date": "2026-10-27T20:57:25Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack", "link": "https://darkreading.com/cyber-risk/sboms-alone-scope-supply-chain-attack", "canonical_url": "https://darkreading.com/cyber-risk/sboms-alone-scope-supply-chain-attack", "date": "2026-10-27T19:58:06Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets", "link": "https://thehackernews.com/2026/10/cyberstrikeai-uses-44-ai-agents-to.html", "canonical_url": "https://thehackernews.com/2026/10/cyberstrikeai-uses-44-ai-agents-to.html", "date": "2026-10-27T18:26:46Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Tailscale warns of SSH flaws allowing root privilege escalation", "link": "https://bleepingcomputer.com/news/security/tailscale-warns-of-serious-ssh-flaws-allowing-root-privilege-escalation", "canonical_url": "https://bleepingcomputer.com/news/security/tailscale-warns-of-serious-ssh-flaws-allowing-root-privilege-escalation", "date": "2026-10-27T14:09:46Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Japan internet giant GMO says hackers posted stolen customer data", "link": "https://techcrunch.com/2026/10/27/japan-internet-giant-gmo-says-hackers-posted-stolen-customer-data", "canonical_url": "https://techcrunch.com/2026/10/27/japan-internet-giant-gmo-says-hackers-posted-stolen-customer-data", "date": "2026-10-27T13:32:57Z", "source": "TechCrunch", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users", "link": "https://blog.checkpoint.com/research/yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users", "canonical_url": "https://blog.checkpoint.com/research/yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users", "date": "2026-10-27T13:00:10Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure", "link": "https://securelist.com/cloud-infrastructure-isolation-bypass/121609", "canonical_url": "https://securelist.com/cloud-infrastructure-isolation-bypass/121609", "date": "2026-10-27T12:00:19Z", "source": "Securelist", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key", "link": "https://thehackernews.com/2026/10/keystone-to-destroy-18835-hardware.html", "canonical_url": "https://thehackernews.com/2026/10/keystone-to-destroy-18835-hardware.html", "date": "2026-10-27T11:46:00Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption", "link": "https://thehackernews.com/2026/10/lazarus-abuses-south-korean-security.html", "canonical_url": "https://thehackernews.com/2026/10/lazarus-abuses-south-korean-security.html", "date": "2026-10-27T11:32:31Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "Lazarus Group", "url": "/lazarus", "matched_alias": "lazarus" } ] }, { "title": "Apple backports CoreGraphics zero-day patches to older iPhones", "link": "https://bleepingcomputer.com/news/apple/apple-backports-coregraphics-zero-day-patches-to-older-iphones", "canonical_url": "https://bleepingcomputer.com/news/apple/apple-backports-coregraphics-zero-day-patches-to-older-iphones", "date": "2026-10-27T10:36:12Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA confirms PHP2Shell vulnerabilities now exploited in attacks", "link": "https://bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks", "date": "2026-10-27T08:20:54Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution", "link": "https://thehackernews.com/2026/10/cisa-confirms-active-exploitation-of.html", "canonical_url": "https://thehackernews.com/2026/10/cisa-confirms-active-exploitation-of.html", "date": "2026-10-27T04:37:59Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento", "link": "https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html", "canonical_url": "https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html", "date": "2026-10-26T18:12:22Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder", "link": "https://rapid7.com/blog/post/etr-cve-2026-111497-critical-out-of-bounds-write-in-the-node-js-brotli-decoder", "canonical_url": "https://rapid7.com/blog/post/etr-cve-2026-111497-critical-out-of-bounds-write-in-the-node-js-brotli-decoder", "date": "2026-10-26T17:32:46Z", "source": "Rapid7", "cves": [ "CVE-2026-111497" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware", "link": "https://thehackernews.com/2026/10/attackers-use-microsoft-teams-it.html", "canonical_url": "https://thehackernews.com/2026/10/attackers-use-microsoft-teams-it.html", "date": "2026-10-26T15:52:40Z", "source": "The Hacker News", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes", "link": "https://thehackernews.com/2026/10/two-critical-wasmtime-flaws-could-let.html", "canonical_url": "https://thehackernews.com/2026/10/two-critical-wasmtime-flaws-could-let.html", "date": "2026-10-26T11:52:41Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Patient records exposed in Quest breach: What you need to know", "link": "https://malwarebytes.com/blog/data-breaches/2026/10/patient-records-exposed-in-quest-breach-what-you-need-to-know", "canonical_url": "https://malwarebytes.com/blog/data-breaches/2026/10/patient-records-exposed-in-quest-breach-what-you-need-to-know", "date": "2026-10-26T11:34:00Z", "source": "Malwarebytes", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts", "link": "https://thehackernews.com/2026/10/ucreator-android-spyware-can-steal.html", "canonical_url": "https://thehackernews.com/2026/10/ucreator-android-spyware-can-steal.html", "date": "2026-10-26T09:54:02Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication", "link": "https://thehackernews.com/2026/10/openai-ai-agents-demonstrate-vm-escapes.html", "canonical_url": "https://thehackernews.com/2026/10/openai-ai-agents-demonstrate-vm-escapes.html", "date": "2026-10-25T06:54:29Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software", "link": "https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html", "canonical_url": "https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html", "date": "2026-10-24T11:09:29Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet", "link": "https://thehackernews.com/2026/10/researchers-push-over-2-million-updates.html", "canonical_url": "https://thehackernews.com/2026/10/researchers-push-over-2-million-updates.html", "date": "2026-10-24T09:04:24Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "PopCornTime", "url": "/popcorntime", "matched_alias": "popcorntime" } ] }, { "title": "CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud", "link": "https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html", "canonical_url": "https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html", "date": "2026-10-24T06:25:57Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Abandoned Popcorn Time app exposed millions of devices to RCE attacks", "link": "https://bleepingcomputer.com/news/security/abandoned-popcorn-time-app-exposed-millions-of-device-to-rce-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/abandoned-popcorn-time-app-exposed-millions-of-device-to-rce-attacks", "date": "2026-10-23T20:55:05Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ { "name": "PopCornTime", "url": "/popcorntime", "matched_alias": "popcorntime" } ] }, { "title": "Microsoft Teams to get AI-powered, context-aware phishing detection", "link": "https://bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection", "canonical_url": "https://bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection", "date": "2026-10-23T18:54:41Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks", "link": "https://microsoft.com/en-us/security/blog/2026/10/23/inside-the-litellm-1-107-0-supply-chain-compromise-credential-theft-through-python-startup-hooks", "canonical_url": "https://microsoft.com/en-us/security/blog/2026/10/23/inside-the-litellm-1-107-0-supply-chain-compromise-credential-theft-through-python-startup-hooks", "date": "2026-10-23T18:12:19Z", "source": "Microsoft Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws", "link": "https://thehackernews.com/2026/10/ruby-fixes-three-regex-engine-bugs.html", "canonical_url": "https://thehackernews.com/2026/10/ruby-fixes-three-regex-engine-bugs.html", "date": "2026-10-23T17:54:08Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions", "link": "https://thehackernews.com/2026/10/exposed-infrastructure-reveals-how.html", "canonical_url": "https://thehackernews.com/2026/10/exposed-infrastructure-reveals-how.html", "date": "2026-10-23T17:50:47Z", "source": "The Hacker News", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)", "link": "https://sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-43-8", "canonical_url": "https://sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-43-8", "date": "2026-10-23T17:18:43Z", "source": "SentinelOne", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Knicks sent employees fake offer of championship rings in phishing test: Report", "link": "https://arstechnica.com/tech-policy/2026/10/knicks-sent-employees-fake-offer-of-championship-rings-in-phishing-test-report", "canonical_url": "https://arstechnica.com/tech-policy/2026/10/knicks-sent-employees-fake-offer-of-championship-rings-in-phishing-test-report", "date": "2026-10-23T16:51:59Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PHP shares mitigation for new RCE vulnerability with no patch", "link": "https://bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability", "canonical_url": "https://bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability", "date": "2026-10-23T15:38:05Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface", "link": "https://blog.checkpoint.com/ai-security/infostealers-are-targeting-ai-what-aokigahara-infostealer-reveals-about-the-new-developer-attack-surface", "canonical_url": "https://blog.checkpoint.com/ai-security/infostealers-are-targeting-ai-what-aokigahara-infostealer-reveals-about-the-new-developer-attack-surface", "date": "2026-10-23T13:00:08Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches", "link": "https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html", "canonical_url": "https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html", "date": "2026-10-23T11:25:43Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data", "link": "https://thehackernews.com/2026/10/researchers-demonstrate-node2shell-rce.html", "canonical_url": "https://thehackernews.com/2026/10/researchers-demonstrate-node2shell-rce.html", "date": "2026-10-23T08:40:43Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware", "link": "https://thehackernews.com/2026/10/php2shell-exploit-attempts-hit-millions.html", "canonical_url": "https://thehackernews.com/2026/10/php2shell-exploit-attempts-hit-millions.html", "date": "2026-10-23T07:40:45Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "State Bank of India Suffers a Customer PII Data Leak", "link": "https://darkreading.com/cyberattacks-data-breaches/state-bank-india-customer-pii-data-leak", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/state-bank-india-customer-pii-data-leak", "date": "2026-10-23T03:30:00Z", "source": "DarkReading", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "How CVE-2026-73570 turns a Zimbra log file into remote code execution", "link": "https://elastic.co/security-labs/threat-command/command-injection-zimbra-cve-2026-73570", "canonical_url": "https://elastic.co/security-labs/threat-command/command-injection-zimbra-cve-2026-73570", "date": "2026-10-23T00:00:00Z", "source": "Elastic Security", "cves": [ "CVE-2026-73570" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Critical Authentication Bypass Vulnerability in HPE Aruba Networking AOS-10 (CVE-2026-79844)", "link": "https://labs.beazley.security/advisories/BSL-A1237", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1237", "date": "2026-10-22T22:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-79844" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Railway warns devs to rotate secrets after potential breach", "link": "https://bleepingcomputer.com/news/security/railway-warns-devs-to-rotate-secrets-after-potential-breach", "canonical_url": "https://bleepingcomputer.com/news/security/railway-warns-devs-to-rotate-secrets-after-potential-breach", "date": "2026-10-22T21:25:31Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack", "link": "https://darkreading.com/cyberattacks-data-breaches/microsoft-storm-0940-connectwise-supply-chain-attack", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/microsoft-storm-0940-connectwise-supply-chain-attack", "date": "2026-10-22T20:42:17Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ { "name": "Storm-0940", "url": "/storm-0940", "matched_alias": "storm-0940" } ] }, { "title": "LiteLLM release pipeline hacked to distribute info-stealer malware", "link": "https://bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware", "canonical_url": "https://bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware", "date": "2026-10-22T19:12:51Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat", "link": "https://thehackernews.com/2026/10/the-ai-agent-nobody-owns-watch-expert.html", "canonical_url": "https://thehackernews.com/2026/10/the-ai-agent-nobody-owns-watch-expert.html", "date": "2026-10-22T19:05:35Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks", "link": "https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html", "canonical_url": "https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html", "date": "2026-10-22T19:05:17Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "EMudhra Intermediate CA Certificates Compromised", "link": "https://unit42.paloaltonetworks.com/emudhra-certificate-compromise", "canonical_url": "https://unit42.paloaltonetworks.com/emudhra-certificate-compromise", "date": "2026-10-22T17:15:32Z", "source": "Unit 42", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers got a four-day head start on epic PHP2Shell vulnerability", "link": "https://arstechnica.com/security/2026/10/hackers-got-a-four-day-head-start-on-epic-php2shell-vulnerability", "canonical_url": "https://arstechnica.com/security/2026/10/hackers-got-a-four-day-head-start-on-epic-php2shell-vulnerability", "date": "2026-10-22T15:25:02Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "GitLab warns of new max severity code execution vulnerability", "link": "https://bleepingcomputer.com/news/security/gitlab-warns-of-new-max-severity-code-execution-vulnerability", "canonical_url": "https://bleepingcomputer.com/news/security/gitlab-warns-of-new-max-severity-code-execution-vulnerability", "date": "2026-10-22T11:41:48Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "High-Severity Remote Code Execution Vulnerability in Brotli Decoder (CVE-2026-111497)", "link": "https://labs.beazley.security/advisories/BSL-A1236", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1236", "date": "2026-10-22T07:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-111497" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed", "link": "https://thehackernews.com/2026/10/someone-tried-to-exploit-php2shell-4.html", "canonical_url": "https://thehackernews.com/2026/10/someone-tried-to-exploit-php2shell-4.html", "date": "2026-10-22T06:34:10Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia", "link": "https://securelist.com/uefi-bootkit-blackx/121539", "canonical_url": "https://securelist.com/uefi-bootkit-blackx/121539", "date": "2026-10-22T06:00:48Z", "source": "Securelist", "cves": [ ], "tags": [ "apt" ], "actors": [ { "name": "APT41", "url": "/apt41", "matched_alias": "apt41" } ] }, { "title": "China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack", "link": "https://thehackernews.com/2026/10/china-linked-hackers-use-artex-ai.html", "canonical_url": "https://thehackernews.com/2026/10/china-linked-hackers-use-artex-ai.html", "date": "2026-10-22T04:21:26Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched", "link": "https://wired.com/story/hackers-exploited-the-php-vulnerabilities-days-before-they-were-patched", "canonical_url": "https://wired.com/story/hackers-exploited-the-php-vulnerabilities-days-before-they-were-patched", "date": "2026-10-22T02:24:17Z", "source": "Wired Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Compromised eMudhra intermediate certificates", "link": "https://blog.talosintelligence.com/compromised-intermediate-certificates", "canonical_url": "https://blog.talosintelligence.com/compromised-intermediate-certificates", "date": "2026-10-21T20:43:29Z", "source": "Cisco Talos", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Lazarus hackers use post-quantum cryptography for malware delivery", "link": "https://bleepingcomputer.com/news/security/lazarus-hackers-use-post-quantum-cryptography-for-malware-delivery", "canonical_url": "https://bleepingcomputer.com/news/security/lazarus-hackers-use-post-quantum-cryptography-for-malware-delivery", "date": "2026-10-21T20:31:48Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ { "name": "Lazarus Group", "url": "/lazarus", "matched_alias": "lazarus" } ] }, { "title": "Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases", "link": "https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html", "canonical_url": "https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html", "date": "2026-10-21T18:57:34Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise", "link": "https://microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise", "canonical_url": "https://microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise", "date": "2026-10-21T18:23:55Z", "source": "Microsoft Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor", "link": "https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html", "canonical_url": "https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html", "date": "2026-10-21T18:01:57Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Optiv Launches CyberBOT Cybersecurity Awareness Training Program", "link": "https://darkreading.com/cybersecurity-operations/optiv-launches-cyberbot-cybersecurity-awareness-training-program", "canonical_url": "https://darkreading.com/cybersecurity-operations/optiv-launches-cyberbot-cybersecurity-awareness-training-program", "date": "2026-10-21T15:44:48Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP", "link": "https://rapid7.com/blog/post/etr-cve-2026-109618-and-cve-2026-109619-critical-unauthenticated-remote-code-execution-in-php", "canonical_url": "https://rapid7.com/blog/post/etr-cve-2026-109618-and-cve-2026-109619-critical-unauthenticated-remote-code-execution-in-php", "date": "2026-10-21T15:22:52Z", "source": "Rapid7", "cves": [ "CVE-2026-109618", "CVE-2026-109619" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)", "link": "https://securelist.com/tr/php2shell-critical-vulnerabilities-in-php/121596", "canonical_url": "https://securelist.com/tr/php2shell-critical-vulnerabilities-in-php/121596", "date": "2026-10-21T15:18:04Z", "source": "Securelist", "cves": [ "CVE-2026-109618", "CVE-2026-109619" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire", "link": "https://wired.com/story/this-is-not-a-drill-2-php-vulnerabilities-are-setting-the-internet-on-fire", "canonical_url": "https://wired.com/story/this-is-not-a-drill-2-php-vulnerabilities-are-setting-the-internet-on-fire", "date": "2026-10-21T14:26:19Z", "source": "Wired Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities", "link": "https://unit42.paloaltonetworks.com/ai-assisted-cybercrime-analysis", "canonical_url": "https://unit42.paloaltonetworks.com/ai-assisted-cybercrime-analysis", "date": "2026-10-21T14:00:24Z", "source": "Unit 42", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "AI Guardrails Aren’t Stopping Criminal Hackers", "link": "https://wired.com/story/ai-guardrails-arent-stopping-criminal-hackers", "canonical_url": "https://wired.com/story/ai-guardrails-arent-stopping-criminal-hackers", "date": "2026-10-21T14:00:00Z", "source": "Wired Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge", "link": "https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html", "canonical_url": "https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html", "date": "2026-10-21T14:00:00Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cloudflare deploys protections against php2shell vulnerability", "link": "https://blog.cloudflare.com/php-vulnerabilities-waf-protection", "canonical_url": "https://blog.cloudflare.com/php-vulnerabilities-waf-protection", "date": "2026-10-21T13:56:45Z", "source": "Cloudflare", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "How Fraudulent Airline Support Numbers Exploit Search Results and AI-Generated Answers", "link": "https://blog.checkpoint.com/research/how-fraudulent-airline-support-numbers-exploit-search-results-and-ai-generated-answers", "canonical_url": "https://blog.checkpoint.com/research/how-fraudulent-airline-support-numbers-exploit-search-results-and-ai-generated-answers", "date": "2026-10-21T13:00:48Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days", "link": "https://rapid7.com/blog/post/tr-q3-2026-threat-update-attackers-exploiting-vulnerabilities-within-3-days", "canonical_url": "https://rapid7.com/blog/post/tr-q3-2026-threat-update-attackers-exploiting-vulnerabilities-within-3-days", "date": "2026-10-21T13:00:00Z", "source": "Rapid7", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA: SafePay ransomware hit over 600 critical infrastructure orgs", "link": "https://bleepingcomputer.com/news/security/cisa-and-fbi-safepay-ransomware-has-hit-over-600-critical-infrastructure-organizations", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-and-fbi-safepay-ransomware-has-hit-over-600-critical-infrastructure-organizations", "date": "2026-10-21T08:36:24Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "SafePay", "url": "/safepay", "matched_alias": "safepay" } ] }, { "title": "State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web", "link": "https://thehackernews.com/2026/10/state-bank-of-india-confirms-data-leak.html", "canonical_url": "https://thehackernews.com/2026/10/state-bank-of-india-confirms-data-leak.html", "date": "2026-10-21T07:44:22Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Critical Remote Code Execution Vulnerability in Cisco Expressway Series (CVE-2026-76466)", "link": "https://labs.beazley.security/advisories/BSL-A1234", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1234", "date": "2026-10-21T07:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-76466" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Critical Unauthenticated Remote Code Execution in GitLab CE and EE (CVE-2026-110264)", "link": "https://labs.beazley.security/advisories/BSL-A1235", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1235", "date": "2026-10-21T07:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-110264" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert", "link": "https://thehackernews.com/2026/10/php2shell-two-unpatched-critical-php.html", "canonical_url": "https://thehackernews.com/2026/10/php2shell-two-unpatched-critical-php.html", "date": "2026-10-21T04:57:50Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Mozilla, Google, Apple block compromised eMudhra CA certificates", "link": "https://bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates", "canonical_url": "https://bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates", "date": "2026-10-21T00:46:42Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619", "link": "https://elastic.co/security-labs/threat-command/php2shell-php-rce-detection", "canonical_url": "https://elastic.co/security-labs/threat-command/php2shell-php-rce-detection", "date": "2026-10-21T00:00:00Z", "source": "Elastic Security", "cves": [ "CVE-2026-109618", "CVE-2026-109619" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "8 eMudhra certificates are compromised. Here's what you need to know", "link": "https://blog.cloudflare.com/emudhra-certificate-compromise", "canonical_url": "https://blog.cloudflare.com/emudhra-certificate-compromise", "date": "2026-10-20T22:20:16Z", "source": "Cloudflare", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys", "link": "https://darkreading.com/cyber-risk/tech-giants-emudhra-certificates-compromised-keys", "canonical_url": "https://darkreading.com/cyber-risk/tech-giants-emudhra-certificates-compromised-keys", "date": "2026-10-20T21:45:47Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)", "link": "https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257", "canonical_url": "https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257", "date": "2026-10-20T20:30:42Z", "source": "Unit 42", "cves": [ "CVE-2026-0257" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "The Internet goes on high alert after discovery of 8 compromised TLS certs", "link": "https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs", "canonical_url": "https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs", "date": "2026-10-20T19:47:35Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software", "link": "https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html", "canonical_url": "https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html", "date": "2026-10-20T17:09:53Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution", "link": "https://thehackernews.com/2026/10/critical-fortisiem-flaw-gets-public.html", "canonical_url": "https://thehackernews.com/2026/10/critical-fortisiem-flaw-gets-public.html", "date": "2026-10-20T15:38:52Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA", "link": "https://thehackernews.com/2026/10/qilin-and-inc-ransomware-groups-exploit.html", "canonical_url": "https://thehackernews.com/2026/10/qilin-and-inc-ransomware-groups-exploit.html", "date": "2026-10-20T15:32:27Z", "source": "The Hacker News", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "INC Ransom", "url": "/apt1032", "matched_alias": "inc ransomware" } ] }, { "title": "There's only so much code: the rise in vulnerability numbers", "link": "https://blog.talosintelligence.com/theres-only-so-much-code-the-rise-in-vulnerability-numbers", "canonical_url": "https://blog.talosintelligence.com/theres-only-so-much-code-the-rise-in-vulnerability-numbers", "date": "2026-10-20T15:31:22Z", "source": "Cisco Talos", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election", "link": "https://thehackernews.com/2026/10/pegasus-spyware-infection-confirmed-on.html", "canonical_url": "https://thehackernews.com/2026/10/pegasus-spyware-infection-confirmed-on.html", "date": "2026-10-20T12:59:44Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Ahold Delhaize: Cyberattack affects services across US and Europe", "link": "https://bleepingcomputer.com/news/security/ahold-delhaize-cyberattack-affects-services-across-us-and-europe", "canonical_url": "https://bleepingcomputer.com/news/security/ahold-delhaize-cyberattack-affects-services-across-us-and-europe", "date": "2026-10-20T11:18:35Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader", "link": "https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html", "canonical_url": "https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html", "date": "2026-10-20T11:06:25Z", "source": "The Hacker News", "cves": [ ], "tags": [ "apt", "breach" ], "actors": [ { "name": "APT28", "url": "/apt28", "matched_alias": "apt28" } ] }, { "title": "ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan", "link": "https://thehackernews.com/2026/10/clickfix-attackers-exploit-siemens.html", "canonical_url": "https://thehackernews.com/2026/10/clickfix-attackers-exploit-siemens.html", "date": "2026-10-20T07:11:45Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PHP2SHELL: Critical PHP RCE Flaws Threaten Web Infrastructure Amid Active Exploitation (CVE-2026-109618 & CVE-2026-109619)", "link": "https://labs.beazley.security/advisories/BSL-A1233", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1233", "date": "2026-10-20T07:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-109618", "CVE-2026-109619" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware", "link": "https://thehackernews.com/2026/10/romulus-clickfix-platform-tricks-users.html", "canonical_url": "https://thehackernews.com/2026/10/romulus-clickfix-platform-tricks-users.html", "date": "2026-10-20T04:05:58Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "WordPress SEO plugin Rank Math compromised to backdoor websites", "link": "https://bleepingcomputer.com/news/security/wordpress-seo-plugin-rank-math-compromised-to-backdoor-websites", "canonical_url": "https://bleepingcomputer.com/news/security/wordpress-seo-plugin-rank-math-compromised-to-backdoor-websites", "date": "2026-10-19T21:24:51Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery", "link": "https://darkreading.com/data-privacy/adfection-online-ads-spyware-delivery", "canonical_url": "https://darkreading.com/data-privacy/adfection-online-ads-spyware-delivery", "date": "2026-10-19T19:55:01Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PSA: Patch your Plex media server before someone hacks it", "link": "https://arstechnica.com/security/2026/10/recently-fixed-plex-media-vulnerabilities-are-being-exploited-to-install-malware", "canonical_url": "https://arstechnica.com/security/2026/10/recently-fixed-plex-media-vulnerabilities-are-being-exploited-to-install-malware", "date": "2026-10-19T19:39:19Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor", "link": "https://thehackernews.com/2026/10/hackers-exploit-plex2shell-flaws-to.html", "canonical_url": "https://thehackernews.com/2026/10/hackers-exploit-plex2shell-flaws-to.html", "date": "2026-10-19T17:32:13Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in", "link": "https://rapid7.com/blog/post/ai-inhuman-insider-threats-securing-agents", "canonical_url": "https://rapid7.com/blog/post/ai-inhuman-insider-threats-securing-agents", "date": "2026-10-19T16:34:43Z", "source": "Rapid7", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor", "link": "https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html", "canonical_url": "https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html", "date": "2026-10-19T16:28:47Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)", "link": "https://rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed", "canonical_url": "https://rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed", "date": "2026-10-19T15:57:43Z", "source": "Rapid7", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779", "link": "https://rapid7.com/blog/post/ra-netscaler-intrusions-chaining-cve-2026-88771-and-cve-2026-88779", "canonical_url": "https://rapid7.com/blog/post/ra-netscaler-intrusions-chaining-cve-2026-88771-and-cve-2026-88779", "date": "2026-10-19T15:11:57Z", "source": "Rapid7", "cves": [ "CVE-2026-88771", "CVE-2026-88779" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild", "link": "https://rapid7.com/blog/post/etr-cve-2026-102764-critical-beyondtrust-remote-support-authentication-bypass-exploited-in-the-wild", "canonical_url": "https://rapid7.com/blog/post/etr-cve-2026-102764-critical-beyondtrust-remote-support-authentication-bypass-exploited-in-the-wild", "date": "2026-10-19T14:34:04Z", "source": "Rapid7", "cves": [ "CVE-2026-102764" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience", "link": "https://darkreading.com/vulnerabilities-threats/cybersecurity-lexicon-vulnerability-discovery-resilience", "canonical_url": "https://darkreading.com/vulnerabilities-threats/cybersecurity-lexicon-vulnerability-discovery-resilience", "date": "2026-10-19T14:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site", "link": "https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site", "canonical_url": "https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site", "date": "2026-10-19T13:48:56Z", "source": "KrebsOnSecurity", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories", "link": "https://thehackernews.com/2026/10/ghostaction-attackers-plant-credential.html", "canonical_url": "https://thehackernews.com/2026/10/ghostaction-attackers-plant-credential.html", "date": "2026-10-19T13:05:45Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "GhostAction", "url": "/ghostaction", "matched_alias": "ghostaction" } ] }, { "title": "Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic", "link": "https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html", "canonical_url": "https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html", "date": "2026-10-19T10:06:40Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers exploit SiteGuard WAF flaw to run commands as admins", "link": "https://bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root", "date": "2026-10-18T14:23:16Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack", "link": "https://bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack", "date": "2026-10-17T15:18:51Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Drupal patches critical RCE flaws, warns exploits may emerge soon", "link": "https://bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon", "canonical_url": "https://bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon", "date": "2026-10-17T14:32:48Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs", "link": "https://darkreading.com/endpoint-security/beyondtrust-remote-support-exploited-edge-bugs", "canonical_url": "https://darkreading.com/endpoint-security/beyondtrust-remote-support-exploited-edge-bugs", "date": "2026-10-16T20:34:37Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical BlockStrap flaw lets hackers run code on Magento servers", "link": "https://bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers", "canonical_url": "https://bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers", "date": "2026-10-16T20:00:59Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "How SentinelOne Blocked APT29's CaptiveCrunch Campaign", "link": "https://sentinelone.com/blog/how-sentinelone-blocked-apt29-s-captivecrunch-campaign", "canonical_url": "https://sentinelone.com/blog/how-sentinelone-blocked-apt29-s-captivecrunch-campaign", "date": "2026-10-16T18:01:06Z", "source": "SentinelOne", "cves": [ ], "tags": [ "apt" ], "actors": [ { "name": "APT29", "url": "/apt29", "matched_alias": "apt29" } ] }, { "title": "Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug", "link": "https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html", "canonical_url": "https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html", "date": "2026-10-16T17:48:45Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026", "link": "https://unit42.paloaltonetworks.com/top-5-initial-access-vectors-september-2026", "canonical_url": "https://unit42.paloaltonetworks.com/top-5-initial-access-vectors-september-2026", "date": "2026-10-16T17:47:54Z", "source": "Unit 42", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Targeted ads installed Candiru spyware in zero-click attacks", "link": "https://bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware", "canonical_url": "https://bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware", "date": "2026-10-16T17:20:03Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ { "name": "Caramel Tsunami", "url": "/caramel-tsunami", "matched_alias": "candiru" } ] }, { "title": "Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor", "link": "https://thehackernews.com/2026/10/attackers-tampered-with-aomei.html", "canonical_url": "https://thehackernews.com/2026/10/attackers-tampered-with-aomei.html", "date": "2026-10-16T16:43:39Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing", "link": "https://thehackernews.com/2026/10/uat-11985-uses-fake-event-invites-to.html", "canonical_url": "https://thehackernews.com/2026/10/uat-11985-uses-fake-event-invites-to.html", "date": "2026-10-16T16:16:44Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)", "link": "https://rapid7.com/blog/post/ra-gitlab-ci-cd-regex-integer-overflow-technical-analysis-cve-2026-97229", "canonical_url": "https://rapid7.com/blog/post/ra-gitlab-ci-cd-regex-integer-overflow-technical-analysis-cve-2026-97229", "date": "2026-10-16T13:31:56Z", "source": "Rapid7", "cves": [ "CVE-2026-97229" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Inside the Q3 2026 Brand Phishing Report: Microsoft Now Accounts for One in Three Brand Impersonation", "link": "https://blog.checkpoint.com/security/inside-the-q3-2026-brand-phishing-report-microsoft-now-accounts-for-one-in-three-brand-impersonation", "canonical_url": "https://blog.checkpoint.com/security/inside-the-q3-2026-brand-phishing-report-microsoft-now-accounts-for-one-in-three-brand-impersonation", "date": "2026-10-16T13:00:47Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "BeyondTrust patches zero-day exploited in attacks since August", "link": "https://bleepingcomputer.com/news/security/beyondtrust-patches-zero-day-exploited-in-attacks-since-august", "canonical_url": "https://bleepingcomputer.com/news/security/beyondtrust-patches-zero-day-exploited-in-attacks-since-august", "date": "2026-10-16T06:18:08Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions", "link": "https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.html", "canonical_url": "https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.html", "date": "2026-10-16T04:59:36Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape", "link": "https://darkreading.com/cybersecurity-operations/sector-2026-reveals-a-rapidly-shifting-cybersecurity-landscape", "canonical_url": "https://darkreading.com/cybersecurity-operations/sector-2026-reveals-a-rapidly-shifting-cybersecurity-landscape", "date": "2026-10-15T22:10:08Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Targeted ads delivered 0-click exploits to install mercenary malware", "link": "https://arstechnica.com/security/2026/10/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware", "canonical_url": "https://arstechnica.com/security/2026/10/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware", "date": "2026-10-15T20:32:41Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory", "link": "https://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html", "canonical_url": "https://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html", "date": "2026-10-15T20:24:36Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More", "link": "https://thehackernews.com/2026/10/threatsday-adobe-rce-dns-wallet-theft.html", "canonical_url": "https://thehackernews.com/2026/10/threatsday-adobe-rce-dns-wallet-theft.html", "date": "2026-10-15T18:49:33Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Fake Arch Linux packages push malware with root privileges", "link": "https://bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges", "canonical_url": "https://bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges", "date": "2026-10-15T17:12:31Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Fake Calendar Invites Target Thousands of Organizations in Microsoft Credential-Phishing Campaign", "link": "https://blog.checkpoint.com/securing-user-and-access/fake-calendar-invites-target-thousands-of-organizations-in-microsoft-credential-phishing-campaign", "canonical_url": "https://blog.checkpoint.com/securing-user-and-access/fake-calendar-invites-target-thousands-of-organizations-in-microsoft-credential-phishing-campaign", "date": "2026-10-15T16:05:29Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads", "link": "https://thehackernews.com/2026/10/citizen-lab-traces-zero-click-candiru.html", "canonical_url": "https://thehackernews.com/2026/10/citizen-lab-traces-zero-click-candiru.html", "date": "2026-10-15T16:01:57Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "Caramel Tsunami", "url": "/caramel-tsunami", "matched_alias": "candiru" } ] }, { "title": "Vulnerability Management Isn't About the Score — It's About How It Applies to You", "link": "https://darkreading.com/cybersecurity-operations/vulnerability-management-isnt-about-the-score-its-about-how-it-applies-to-you", "canonical_url": "https://darkreading.com/cybersecurity-operations/vulnerability-management-isnt-about-the-score-its-about-how-it-applies-to-you", "date": "2026-10-15T15:17:18Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Researchers Uncover Thousands of Phishing Domains Hiding Behind Inactive Pages", "link": "https://blog.checkpoint.com/security/researchers-uncover-thousands-of-phishing-domains-hiding-behind-inactive-pages", "canonical_url": "https://blog.checkpoint.com/security/researchers-uncover-thousands-of-phishing-domains-hiding-behind-inactive-pages", "date": "2026-10-15T13:00:30Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads", "link": "https://wired.com/story/nightmare-scenario-zero-click-spyware-is-infecting-phones-via-targeted-ads", "canonical_url": "https://wired.com/story/nightmare-scenario-zero-click-spyware-is-infecting-phones-via-targeted-ads", "date": "2026-10-15T10:00:00Z", "source": "Wired", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts", "link": "https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html", "canonical_url": "https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html", "date": "2026-10-15T07:07:05Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation", "link": "https://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.html", "canonical_url": "https://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.html", "date": "2026-10-15T06:17:58Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks", "link": "https://bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks", "date": "2026-10-14T22:56:47Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical Authentication Bypass in Juniper Junos OS J-Web (CVE-2026-101956, CVE-2026-101986)", "link": "https://labs.beazley.security/advisories/BSL-A1230", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1230", "date": "2026-10-14T22:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-101956", "CVE-2026-101986" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles", "link": "https://darkreading.com/vulnerabilities-threats/ivanti-ics-zero-day-attacks-vendor-patching", "canonical_url": "https://darkreading.com/vulnerabilities-threats/ivanti-ics-zero-day-attacks-vendor-patching", "date": "2026-10-14T21:20:13Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat", "link": "https://darkreading.com/threat-intelligence/new-anthropic-sneakpeek-silent-zero-click-threat", "canonical_url": "https://darkreading.com/threat-intelligence/new-anthropic-sneakpeek-silent-zero-click-threat", "date": "2026-10-14T20:09:42Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability", "link": "https://thehackernews.com/2026/10/cisco-warns-of-active-attacks.html", "canonical_url": "https://thehackernews.com/2026/10/cisco-warns-of-active-attacks.html", "date": "2026-10-14T18:38:56Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App", "link": "https://thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.html", "canonical_url": "https://thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.html", "date": "2026-10-14T17:38:31Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Global takedown hits network behind 1 billion phishing messages", "link": "https://bleepingcomputer.com/news/security/global-takedown-hits-network-behind-1-billion-phishing-messages", "canonical_url": "https://bleepingcomputer.com/news/security/global-takedown-hits-network-behind-1-billion-phishing-messages", "date": "2026-10-14T13:12:52Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA warns admins to immediately fix Ivanti flaw exploited as zero-day", "link": "https://bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day", "date": "2026-10-14T12:58:07Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts", "link": "https://thehackernews.com/2026/10/cisa-urges-immediate-ivanti-connect.html", "canonical_url": "https://thehackernews.com/2026/10/cisa-urges-immediate-ivanti-connect.html", "date": "2026-10-14T12:30:42Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hirudo Android malware replaces banking apps to evade security checks", "link": "https://bleepingcomputer.com/news/security/hirudo-android-malware-replaces-banking-apps-to-evade-security-checks", "canonical_url": "https://bleepingcomputer.com/news/security/hirudo-android-malware-replaces-banking-apps-to-evade-security-checks", "date": "2026-10-14T11:41:20Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days", "link": "https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html", "canonical_url": "https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html", "date": "2026-10-14T11:19:02Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks", "link": "https://thehackernews.com/2026/10/hirudo-android-trojan-uses-patched.html", "canonical_url": "https://thehackernews.com/2026/10/hirudo-android-trojan-uses-patched.html", "date": "2026-10-14T11:08:22Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Ransomware Gangs Embrace Physical Threats, Family Stalking?", "link": "https://darkreading.com/cybersecurity-analytics/ransomware-gangs-physical-threats-family-stalking", "canonical_url": "https://darkreading.com/cybersecurity-analytics/ransomware-gangs-physical-threats-family-stalking", "date": "2026-10-14T05:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday", "link": "https://darkreading.com/vulnerabilities-threats/zero-days-microsoft-october-patch-tuesday", "canonical_url": "https://darkreading.com/vulnerabilities-threats/zero-days-microsoft-october-patch-tuesday", "date": "2026-10-13T22:29:57Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Patch Tuesday - October 2026", "link": "https://rapid7.com/blog/post/em-patch-tuesday-october-2026", "canonical_url": "https://rapid7.com/blog/post/em-patch-tuesday-october-2026", "date": "2026-10-13T21:40:27Z", "source": "Rapid7", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Ghostscript flaw lets hackers hijack servers via PDF uploads", "link": "https://bleepingcomputer.com/news/security/ghostscript-flaw-lets-hackers-hijack-servers-via-pdf-uploads", "canonical_url": "https://bleepingcomputer.com/news/security/ghostscript-flaw-lets-hackers-hijack-servers-via-pdf-uploads", "date": "2026-10-13T21:33:26Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft", "link": "https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html", "canonical_url": "https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html", "date": "2026-10-13T17:28:50Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "TFG London cyberattack disrupts systems at Hobbs and Whistles retailers", "link": "https://bleepingcomputer.com/news/security/tfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers", "canonical_url": "https://bleepingcomputer.com/news/security/tfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers", "date": "2026-10-13T16:44:18Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Ivanti warns of Connect Secure zero-day exploited in attacks", "link": "https://bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks", "date": "2026-10-13T15:45:50Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Check Point Research Discovers High Risk Vulnerabilities in LiteLLM, One of the Most Widely Used LLM Gateways", "link": "https://blog.checkpoint.com/security/check-point-research-discovers-high-risk-vulnerabilities-in-litellm-one-of-the-most-widely-used-llm-gateways", "canonical_url": "https://blog.checkpoint.com/security/check-point-research-discovers-high-risk-vulnerabilities-in-litellm-one-of-the-most-widely-used-llm-gateways", "date": "2026-10-13T12:00:53Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "NHS England evolves its cybersecurity strategy with Palo Alto Networks and IBM", "link": "https://paloaltonetworks.com/blog/2026/10/nhs-england-evolves-its-cybersecurity-strategy-with-palo-alto-networks", "canonical_url": "https://paloaltonetworks.com/blog/2026/10/nhs-england-evolves-its-cybersecurity-strategy-with-palo-alto-networks", "date": "2026-10-13T08:29:52Z", "source": "Palo Alto Networks", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies", "link": "https://thehackernews.com/2026/10/low-cost-android-phones-ship-with.html", "canonical_url": "https://thehackernews.com/2026/10/low-cost-android-phones-ship-with.html", "date": "2026-10-13T06:00:11Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Prominent Ransomware Negotiator Faces Extortion Charges", "link": "https://darkreading.com/insider-threats/prominent-ransomware-negotiator-extortion-charges", "canonical_url": "https://darkreading.com/insider-threats/prominent-ransomware-negotiator-extortion-charges", "date": "2026-10-12T20:00:53Z", "source": "DarkReading", "cves": [ ], "tags": [ "ransomware", "breach" ], "actors": [ ] }, { "title": "Retail giant Ahold Delhaize takes systems offline after cyberattack", "link": "https://bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack", "canonical_url": "https://bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack", "date": "2026-10-12T13:51:07Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "GitLab warns of max severity code execution vulnerability", "link": "https://bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine", "canonical_url": "https://bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine", "date": "2026-10-12T13:09:09Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch", "link": "https://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.html", "canonical_url": "https://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.html", "date": "2026-10-12T10:36:56Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE", "link": "https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html", "canonical_url": "https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html", "date": "2026-10-12T09:02:14Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Nippon Columbia malware incident exposes 8.6 million karaoke fan records", "link": "https://bleepingcomputer.com/news/security/nippon-columbia-malware-incident-exposes-86-million-karaoke-fan-records", "canonical_url": "https://bleepingcomputer.com/news/security/nippon-columbia-malware-incident-exposes-86-million-karaoke-fan-records", "date": "2026-10-11T14:23:46Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands", "link": "https://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.html", "canonical_url": "https://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.html", "date": "2026-10-11T04:24:34Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cyber exec arrested in case allegedly tied to ShinyHunters hackers", "link": "https://bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers", "canonical_url": "https://bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers", "date": "2026-10-10T15:07:54Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "FBI Arrests Founder of Ransomware Negotiation Firm", "link": "https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm", "canonical_url": "https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm", "date": "2026-10-10T00:17:42Z", "source": "KrebsOnSecurity", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks", "link": "https://bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks", "date": "2026-10-09T20:31:37Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "AI Scramble Drives Cybersecurity M&A Boom", "link": "https://darkreading.com/cybersecurity-analytics/ai-scramble-cybersecurity-ma-boom", "canonical_url": "https://darkreading.com/cybersecurity-analytics/ai-scramble-cybersecurity-ma-boom", "date": "2026-10-09T19:26:26Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories", "link": "https://thehackernews.com/2026/10/credential-stealing-github-actions.html", "canonical_url": "https://thehackernews.com/2026/10/credential-stealing-github-actions.html", "date": "2026-10-09T19:14:28Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "FBI arrests another suspected ShinyHunters hacker after agency breach", "link": "https://bleepingcomputer.com/news/security/fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach", "canonical_url": "https://bleepingcomputer.com/news/security/fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach", "date": "2026-10-09T17:02:29Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Germany arrests alleged core Qilin ransomware member after extradition", "link": "https://bleepingcomputer.com/news/security/germany-arrests-alleged-core-qilin-ransomware-member-after-extradition", "canonical_url": "https://bleepingcomputer.com/news/security/germany-arrests-alleged-core-qilin-ransomware-member-after-extradition", "date": "2026-10-09T15:38:56Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Qilin", "url": "/qilin", "matched_alias": "qilin ransomware" } ] }, { "title": "Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access", "link": "https://thehackernews.com/2026/10/researchers-publish-working-exploit-for.html", "canonical_url": "https://thehackernews.com/2026/10/researchers-publish-working-exploit-for.html", "date": "2026-10-09T12:59:22Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies", "link": "https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html", "canonical_url": "https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html", "date": "2026-10-09T12:21:51Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "Flax Typhoon", "url": "/flax-typhoon", "matched_alias": "flax typhoon" } ] }, { "title": "How Luna Moth Runs Data Extortion Like a Business", "link": "https://blog.checkpoint.com/security/how-luna-moth-runs-data-extortion-like-a-business", "canonical_url": "https://blog.checkpoint.com/security/how-luna-moth-runs-data-extortion-like-a-business", "date": "2026-10-09T09:38:16Z", "source": "Check Point", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "Luna Moth", "url": "/luna-moth", "matched_alias": "luna moth" } ] }, { "title": "Citrix warns admins to patch new NetScaler RCE flaw immediately", "link": "https://bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately", "canonical_url": "https://bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately", "date": "2026-10-09T08:27:42Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Low-cost Android phones ship with residential proxy malware", "link": "https://bleepingcomputer.com/news/security/low-cost-android-phones-ship-with-residential-proxy-malware", "canonical_url": "https://bleepingcomputer.com/news/security/low-cost-android-phones-ship-with-residential-proxy-malware", "date": "2026-10-08T19:20:33Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting", "link": "https://darkreading.com/cyberattacks-data-breaches/venezuelan-cartel-malware-honcho-nabbed-atm-jackpotting", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/venezuelan-cartel-malware-honcho-nabbed-atm-jackpotting", "date": "2026-10-08T19:08:16Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails", "link": "https://thehackernews.com/2026/10/fbi-says-china-linked-hackers-ran.html", "canonical_url": "https://thehackernews.com/2026/10/fbi-says-china-linked-hackers-ran.html", "date": "2026-10-08T18:32:21Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift", "link": "https://darkreading.com/cyberattacks-data-breaches/russian-spies-matchboil-malware-facelift", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/russian-spies-matchboil-malware-facelift", "date": "2026-10-08T18:01:50Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories", "link": "https://thehackernews.com/2026/10/threatsday-ransomware-affiliate.html", "canonical_url": "https://thehackernews.com/2026/10/threatsday-ransomware-affiliate.html", "date": "2026-10-08T17:58:02Z", "source": "The Hacker News", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "FakeGit malware campaign returns with 17,610 malicious GitHub repos", "link": "https://bleepingcomputer.com/news/security/fakegit-malware-campaign-returns-with-17-610-malicious-github-repos", "canonical_url": "https://bleepingcomputer.com/news/security/fakegit-malware-campaign-returns-with-17-610-malicious-github-repos", "date": "2026-10-08T17:10:55Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Uranium crypto exchange hacker convicted for stealing $53 million", "link": "https://bleepingcomputer.com/news/security/uranium-crypto-exchange-hacker-found-guilty-of-53-million-theft", "canonical_url": "https://bleepingcomputer.com/news/security/uranium-crypto-exchange-hacker-found-guilty-of-53-million-theft", "date": "2026-10-08T13:18:36Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "September 2026 Cyber Threat Landscape: Global Attacks Jump 48% as Phishing and GenAI Data Exposure Rise", "link": "https://blog.checkpoint.com/research/september-2026-cyber-threat-landscape-global-attacks-jump-48-as-phishing-and-genai-data-exposure-rise", "canonical_url": "https://blog.checkpoint.com/research/september-2026-cyber-threat-landscape-global-attacks-jump-48-as-phishing-and-genai-data-exposure-rise", "date": "2026-10-08T13:00:33Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm", "link": "https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html", "canonical_url": "https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html", "date": "2026-10-08T05:46:20Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Ransomware recovery CEO charged over secret ransom payments", "link": "https://bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments", "canonical_url": "https://bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments", "date": "2026-10-07T23:04:37Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Evolution of Web3 in Cloud Supply Chain Attacks", "link": "https://unit42.paloaltonetworks.com/web3-cloud-supply-chain-attacks", "canonical_url": "https://unit42.paloaltonetworks.com/web3-cloud-supply-chain-attacks", "date": "2026-10-07T22:00:16Z", "source": "Unit 42", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer", "link": "https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html", "canonical_url": "https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html", "date": "2026-10-07T17:43:20Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet", "link": "https://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.html", "canonical_url": "https://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.html", "date": "2026-10-07T15:33:51Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PoeLLM malware infects exposed AI servers in cryptomining attacks", "link": "https://bleepingcomputer.com/news/security/poellm-malware-infects-exposed-ai-servers-in-cryptomining-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/poellm-malware-infects-exposed-ai-servers-in-cryptomining-attacks", "date": "2026-10-07T15:04:08Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers exploit critical Atlassian flaw after public PoC release", "link": "https://bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release", "date": "2026-10-07T12:49:01Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products", "link": "https://rapid7.com/blog/post/etr-cve-2026-21589-critical-unauthenticated-arbitrary-file-access-in-atlassian-products", "canonical_url": "https://rapid7.com/blog/post/etr-cve-2026-21589-critical-unauthenticated-arbitrary-file-access-in-atlassian-products", "date": "2026-10-07T12:11:26Z", "source": "Rapid7", "cves": [ "CVE-2026-21589" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer", "link": "https://thehackernews.com/2026/10/100-compromised-websites-use-fake.html", "canonical_url": "https://thehackernews.com/2026/10/100-compromised-websites-use-fake.html", "date": "2026-10-07T06:57:54Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers exploit 32 zero-days on first day of Pwn2Own Ireland", "link": "https://bleepingcomputer.com/news/security/hackers-exploit-32-zero-days-on-first-day-of-pwn2own-ireland", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-exploit-32-zero-days-on-first-day-of-pwn2own-ireland", "date": "2026-10-06T19:21:53Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "ASOS confirms data breach after “HACKED” in-app notifications", "link": "https://bleepingcomputer.com/news/security/asos-confirms-data-breach-after-hacked-in-app-notifications", "canonical_url": "https://bleepingcomputer.com/news/security/asos-confirms-data-breach-after-hacked-in-app-notifications", "date": "2026-10-06T16:33:54Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach", "link": "https://thehackernews.com/2026/10/fbi-removes-accenture-contractor-after.html", "canonical_url": "https://thehackernews.com/2026/10/fbi-removes-accenture-contractor-after.html", "date": "2026-10-06T06:56:57Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Critical Server-Side Request Forgery Vulnerability in SonicWall SMA1000 (CVE-2026-102255)", "link": "https://labs.beazley.security/advisories/BSL-A1223", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1223", "date": "2026-10-06T05:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-102255" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Critical Arbitrary File Read Vulnerability in Atlassian Data Center Products (CVE-2026-21589)", "link": "https://labs.beazley.security/advisories/BSL-A1224", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1224", "date": "2026-10-06T05:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-21589" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "New Dell System Update flaw lets hackers gain root privileges", "link": "https://bleepingcomputer.com/news/security/new-dell-system-update-flaw-lets-hackers-gain-root-privileges", "canonical_url": "https://bleepingcomputer.com/news/security/new-dell-system-update-flaw-lets-hackers-gain-root-privileges", "date": "2026-10-05T14:53:06Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Alleged dev of Ploutus ATM malware appears in US court after arrest", "link": "https://bleepingcomputer.com/news/security/suspected-dev-of-ploutus-atm-malware-appears-in-us-court-after-arrest", "canonical_url": "https://bleepingcomputer.com/news/security/suspected-dev-of-ploutus-atm-malware-appears-in-us-court-after-arrest", "date": "2026-10-05T13:01:45Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "The Credential Layer Is Expanding Faster Than Security Teams Can See It", "link": "https://thehackernews.com/2026/10/the-credential-layer-is-expanding.html", "canonical_url": "https://thehackernews.com/2026/10/the-credential-layer-is-expanding.html", "date": "2026-10-05T11:55:00Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2", "link": "https://thehackernews.com/2026/10/realtek-jungle-sdk-exploit-attempts.html", "canonical_url": "https://thehackernews.com/2026/10/realtek-jungle-sdk-exploit-attempts.html", "date": "2026-10-05T11:46:25Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline", "link": "https://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.html", "canonical_url": "https://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.html", "date": "2026-10-05T06:40:19Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Citrix patches NetScaler SAML zero-day exploited in attacks", "link": "https://bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks", "date": "2026-10-04T21:58:01Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing", "link": "https://thehackernews.com/2026/10/china-aligned-ta419-targets-us-ai.html", "canonical_url": "https://thehackernews.com/2026/10/china-aligned-ta419-targets-us-ai.html", "date": "2026-10-04T07:20:32Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "TA419", "url": "/ta419", "matched_alias": "ta419" } ] }, { "title": "ShinyHunters hacker reportedly detained in Jordan, aiding FBI", "link": "https://bleepingcomputer.com/news/security/shinyhunters-hacker-reportedly-detained-in-jordan-aiding-fbi", "canonical_url": "https://bleepingcomputer.com/news/security/shinyhunters-hacker-reportedly-detained-in-jordan-aiding-fbi", "date": "2026-10-03T19:09:38Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware", "link": "https://thehackernews.com/2026/10/warlock-exploits-sharepoint-flaws-to.html", "canonical_url": "https://thehackernews.com/2026/10/warlock-exploits-sharepoint-flaws-to.html", "date": "2026-10-03T14:36:33Z", "source": "The Hacker News", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Warlock", "url": "/warlock", "matched_alias": "warlock" } ] }, { "title": "Danish university DTU breach exposes data of up to 200,000 people", "link": "https://bleepingcomputer.com/news/security/danish-university-dtu-breach-exposes-data-of-up-to-200-000-people", "canonical_url": "https://bleepingcomputer.com/news/security/danish-university-dtu-breach-exposes-data-of-up-to-200-000-people", "date": "2026-10-03T14:35:20Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations", "link": "https://thehackernews.com/2026/10/the-state-of-cybersecurity-in-2026key.html", "canonical_url": "https://thehackernews.com/2026/10/the-state-of-cybersecurity-in-2026key.html", "date": "2026-10-03T11:00:00Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Frontline Education breach exposes school district employee data", "link": "https://bleepingcomputer.com/news/security/frontline-education-data-breach-impacts-school-district-employees", "canonical_url": "https://bleepingcomputer.com/news/security/frontline-education-data-breach-impacts-school-district-employees", "date": "2026-10-02T19:01:40Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Warlock ransomware breach SharePoint in water, telecom operator attacks", "link": "https://bleepingcomputer.com/news/security/warlock-ransomware-breach-sharepoint-in-water-telecom-operator-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/warlock-ransomware-breach-sharepoint-in-water-telecom-operator-attacks", "date": "2026-10-02T18:33:01Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware", "breach" ], "actors": [ { "name": "Warlock", "url": "/warlock", "matched_alias": "warlock" } ] }, { "title": "Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign", "link": "https://thehackernews.com/2026/10/antino-backdoor-uses-outlook-and.html", "canonical_url": "https://thehackernews.com/2026/10/antino-backdoor-uses-outlook-and.html", "date": "2026-10-02T17:33:16Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "SWIFT Banking & Government Middleware Enables RCE", "link": "https://darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce", "canonical_url": "https://darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce", "date": "2026-10-02T16:27:54Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "GitLab warns of critical RCE vulnerability in AI Gateway service", "link": "https://bleepingcomputer.com/news/security/gitlab-warns-of-critical-rce-vulnerability-in-ai-gateway-service", "canonical_url": "https://bleepingcomputer.com/news/security/gitlab-warns-of-critical-rce-vulnerability-in-ai-gateway-service", "date": "2026-10-02T16:20:05Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes", "link": "https://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.html", "canonical_url": "https://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.html", "date": "2026-10-02T05:49:50Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Fortinet warns of critical FortiMail flaw exploited in zero-day attacks", "link": "https://bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks", "date": "2026-10-01T22:42:49Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Alleged KillSec Ransomware Mastermind a 16-Year-Old", "link": "https://darkreading.com/cyberattacks-data-breaches/killsec-ransomware-mastermind-16-year-old", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/killsec-ransomware-mastermind-16-year-old", "date": "2026-10-01T21:37:50Z", "source": "DarkReading", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Killsec", "url": "/killsec", "matched_alias": "killsec" } ] }, { "title": "Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers", "link": "https://thehackernews.com/2026/10/police-arrest-16-year-old-suspected-of.html", "canonical_url": "https://thehackernews.com/2026/10/police-arrest-16-year-old-suspected-of.html", "date": "2026-10-01T16:55:57Z", "source": "The Hacker News", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Killsec", "url": "/killsec", "matched_alias": "killsec" } ] }, { "title": "Police dismantle KillSec ransomware gang allegedly led by 16-year-old", "link": "https://bleepingcomputer.com/news/security/police-dismantle-killsec-ransomware-gang-allegedly-led-by-16-year-old", "canonical_url": "https://bleepingcomputer.com/news/security/police-dismantle-killsec-ransomware-gang-allegedly-led-by-16-year-old", "date": "2026-10-01T14:25:14Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Killsec", "url": "/killsec", "matched_alias": "killsec" } ] }, { "title": "Warlock Ransomware Hits Large Spanish, Portuguese Orgs", "link": "https://darkreading.com/cyberattacks-data-breaches/warlock-ransomware-spanish-portuguese", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/warlock-ransomware-spanish-portuguese", "date": "2026-10-01T13:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Warlock", "url": "/warlock", "matched_alias": "warlock" } ] }, { "title": "How Financial Services Companies Can Modernize Their Software Supply Chain", "link": "https://thehackernews.com/2026/10/how-financial-services-companies-can.html", "canonical_url": "https://thehackernews.com/2026/10/how-financial-services-companies-can.html", "date": "2026-10-01T11:45:00Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft", "link": "https://thehackernews.com/2026/10/bitget-confirms-third-party-zero-day.html", "canonical_url": "https://thehackernews.com/2026/10/bitget-confirms-third-party-zero-day.html", "date": "2026-10-01T05:21:10Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] } ] }