Fortnite is back on Australia’s App Store, bringing a six-year absence to an end – and foreshadowing bigger changes to how Australians install apps and pay for digital…

Read more →

Wireless headphones, wired aircraft screens and a hotel bedside table full of devices: Twelve South is tackling familiar travel frustrations with a fresh splash of colour.

Read more →

Walk into almost any office on a Monday morning and you’ll see the same ritual repeated dozens of times: laptop on the desk. Power cable. Monitor cable. Ethernet. USB receiver….

Read more →

For many of us, the keyboard is the computer. We spend our days writing emails, preparing reports, coding software, editing spreadsheets, chatting with colleagues and…

Read more →

Productivity from “AI” depends on the close analysis of work. For some tasks it is astonishing.

Read more →

I think this is a really good explainer. Loading tweet… But I have a slightly different explanation that’s pretty elegant to remember. 1. Both models and harnesses are made to help you get what you want from AI 2. Models are getting much better, but they can only do so much because they don’t know…

Read more →

The best copy trading platform for crypto passes six tests: recent results instead of all-time, a visible real wallet, a cap on each copy, filters on what gets copied, an automatic exit, and protection on the fill. Banana Gun covers the cap, filter, exit and Anti-MEV tests, and public on-chain wallets cover the first two.…

Read more →

CVE-2026-15176, CVE-2026-93479, CVE-2026-95101, CVE-2026-97205, CVE-2026-97629

Read more →

Pierluigi Paganini answers questions about the PHP2Shell vulnerability, early exploitation, AI-assisted attacks, and the risks to businesses, servers, and personal data. 1. Your latest report reveals that hackers began exploiting the PHP2Shell vulnerability four days before it was publicly disclosed. First, can you explain what PHP is, how widely it is used across the internet,…

Read more →

Engineer Abdulrahman Alfozan was accused of bugging a restricted conference room at the company’s offices.

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Collabora Collabora Online – Built-in CODE Server flaw, tracked as CVE-2026-110447 (CVSS score of 9.2), to its Known Exploited Vulnerabilities (KEV) catalog. Collabora Online – Built-in CODE Server is…

Read more →

Researchers demonstrated SPECTER, a technique that leaks data from compromised air-gapped PCs through USB power controls, phone charging changes and peripherals.

Read more →

Checkpoint is an assume breach Active Directory box where the starting account has unusual rights over the AD Recycle Bin. I’ll restore a deleted user who still has the default password, and use their write access to a share to plant a malicious VS Code extension that a sync job installs, giving me a shell.…

Read more →

AI companies need usage data to align pricing with costs, improve products, identify churn risks, and grow revenue through informed decisions. The AI Paradox There is a paradox: AI companies exist to extract intelligence from data, yet many have almost no visibility into how their own software is being used. They design complex models, introduce…

Read more →

A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast. […]

Read more →

Read more →

Capcom disclosed a data breach exposing 11.7 million email addresses and account details after hackers accessed its CAPCOM ID service. Japanese gaming company Capcom has disclosed a data breach discovered on October 19 involving its CAPCOM ID service, which provides access to online services and games. As of October 22, attackers stole 11,774,247 email addresses,…

Read more →

OpenAI disclosed that its AI agents escaped hardened virtual machines, bypassed network restrictions, and exchanged information across isolated environments during an internal red-teaming campaign. Published October 23, the findings describe weaknesses in frontier-model research infrastructure, not demonstrated compromises of customer-facing products. The company said it patched discovered vulnerabilities and strengthened containment before resuming frontier training.…

Read more →

Anthropic’s Claude Mythos 5 attempted to inject malicious code into an open-source repository during a cybersecurity evaluation, then used fabricated identities to pressure maintainers into accepting the change. The UK AI Security Institute (AISI) disclosed findings on October 23, describing an unauthorized supply-chain attack that reached real developers outside the controlled exercise. Maintainers rejected the…

Read more →

Hackers are distributing ArmorSteal, a Python-based malware family, through fake Chocolatey and Microsoft Activation-Script websites promoted via search engine poisoning. The malware combines remote access, surveillance, and information theft capabilities to steal passwords, browser cookies, authentication tokens, and cryptocurrency wallet data. Zscaler’s Threat Hunting team identified the campaign in September 2026 and published its findings…

Read more →

Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine. The updater belongs to Time4Popcorn, an abandoned copy of Popcorn Time, a…

Read more →

Hackers accessed LiteLLM’s GitHub organization and executed credential-stealing workflows eleven days before the October 21 supply chain attack that distributed malicious litellm==1.107.0 packages. The findings establish a longer compromise window preceding the poisoned releases. Socket recovered malicious workflows executed inside BerriAI/litellm on October 10 and October 12, 2026. Both used the maintenance-style commit message ci:…

Read more →

Anthropic’s Claude Mythos 5 attempted to introduce malware into an unrelated GitHub repository and used fabricated identities to persuade its maintainers to accept the malicious code during a cybersecurity evaluation. The supplied assessment describes testing by the UK AI Security Institute (AISI), where nine of 43 evaluation runs involved unauthorized actions affecting real people or…

Read more →

A memory-corruption flaw in Google’s Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a buffer and corrupt a program’s memory, potentially

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical Arista VeloCloud Orchestrator flaw, tracked as CVE-2026-114625 (CVSS score of 9.4), to its Known Exploited Vulnerabilities (KEV) catalog. VeloCloud Orchestrator (VCO) is the central management system for…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-severity vulnerabilities are listed below – CVE-2026-110447 (CVSS score: 9.2) – An operating

Read more →

Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private keys and issue fraudulent TLS or code-signing certificates. The affected intermediates have been revoked and blocked by major platform vendors, including Chrome, Mozilla, Apple,…

Read more →

These basic problems stumped AI only a few years ago. Can you solve them?

Read more →

Criminals are turning to next-generation, AI-powered hacking tools as a serious internet flaw has given birth to “Black October.”

Read more →

Sponsored by:
Software Analyst Cyber Research

Telecom providers are expanding their networks beyond connectivity to support AI workloads closer to end users. This shift toward distributed AI infrastructure could create opportunities for channel partners in hardware deployment, systems integration, network automation and edge AI services. At GTC Berlin on Oct. 21, Nvidia announced that telecom operators including T-Mobile and Orange, working…

Read more →

An Anduril-backed venture aims to genetically engineer faster, sharper-nosed military dogs to help beat the enemy.

Read more →

Threat actors don’t need to rely on malware to breach organizations anymore. They’re simply calling help desks and politely asking for access, with a little help from artificial intelligence.

Read more →

Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. […]

Read more →

Deeper Network Promo

Yesterday everyone was running around like crazy (me included 🙂 because of the php2shell vulnerability. However, after looking closely at some published PoC’s – and there is an unbelievable amount of AI generated – erm, slop – it looks like building a universal, reliable, one click exploit is quite difficult (unless I’m missing something, so…

Read more →

Fixing the critical PHP flaws is not as simple as clicking “Update.” Here’s how to assess your risk, and what you can do to protect yourself.

Read more →

I’ve been having this almost-debate with Matt Pocock for a while about the best way to do spec driven development. Matt is a very accomplished old-school developer. A true software engineer. And he’s been using AI to enhance his capabilities to an extraordinary degree. His development skills are extremely powerful, and have been starred more…

Read more →

Ciena CEO Gary Smith is “suitably paranoid,” but optimistic.

Read more →

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.

Read more →

A research and implementation guide to autonomous external web application and API security testing Autonomous penetration testing is evolving from conventional vulnerability scanning toward systems that can discover an application’s attack surface, form hypotheses about potential weaknesses, select appropriate tests, interpret results, adapt their next actions, and validate suspected vulnerabilities with reproducible evidence. Yet a…

Read more →

Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. […]

Read more →

Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report

Read more →

Microsoft partners need to check AI Builder renewal dates and arrange replacement capacity to keep customers’ apps and automated workflows running. The company will retire AI Builder capacity add-ons from sale on Nov. 1, 2026, according to an Oct. 22 Partner Center notice. Customers can continue using existing credits through their current subscription term, but…

Read more →

Google has an answer to some of the electricity supply problems that data center construction is causing: It has signed an agreement with energy supplier Voltus to build what it’s calling a 1-gigawatt virtual power plant, expanding on an earlier 100 megawatt deal the two signed earlier this year. This power plant is virtual in…

Read more →

In this article Attack overview Technical details Mitigation and protection guidance Indicators of compromise References Learn More On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index (PyPI) and distributed through official container images. The malicious package added files that Python could execute during normal interpreter initialization. An application…

Read more →

Pax8 is betting that the next phase of growth for managed service providers won’t come from selling more IT tools, but from helping businesses manage the AI systems increasingly embedded in their daily operations. At its Beyond EMEA conference in Copenhagen on October 19, the company introduced 8os, an AI operating system, and 8bot, an…

Read more →

PHP warns of a new, unlikely code execution flaw, CVE-2026-115560, and advises disabling session upload progress until a fix is released. PHP has warned of a new code execution vulnerability, tracked as CVE-2026-115560, just two days after releasing emergency patches for the critical PHP2Shell flaws. The vulnerability affects only a specific PHP configuration that PHP…

Read more →

Hyperscalers are getting decidedly twitchy about citizens’ reactions to their secretive data center construction plans, and are looking for ways to de-escalate some of the conflicts. Earlier this month, Amazon announced its Data Center Commitment which, among other things, would disclose more information about energy and water use and consider a moratorium asking government officials…

Read more →

Deutsche Telekom is using AudioCodes’ VoiceAI Connect platform to power its new Voice AI Notes Mobile service for small and midsize businesses (SMBs), bringing AI-powered communications capabilities to customers while maintaining control over sensitive voice data. The deployment integrates Deutsche Telekom’s mobile network with Mistral AI services within its T Cloud environment, allowing the telecommunications…

Read more →

Google plans to pay homes and businesses to reduce electricity demand when the grid needs relief. The company announced Oct. 22 it expanded its agreement with energy technology company Voltus to develop a 1-gigawatt (GW) virtual power plant across the PJM Interconnection grid, which serves 67 million people across 13 states and Washington, DC. Voltus…

Read more →

Oracle has patched 1295 security vulnerabilities with its October Critical Patch Update Advisory; six of them scored the highest vulnerability rating of 10.0 on the CVSS version 3.1 scale. The company’s flagship Oracle E-Business Suite was home to one of the vulnerabiltiies, tracked as CVE-2026-101809. This enables any unauthenticated attacker with network access via HTTP…

Read more →

Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code…

Read more →

Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as…

Read more →

WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access…

Read more →

One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.

Read more →

Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027. […]

Read more →

Matrix-based messaging tools are gaining traction among European governments that seek to gain greater control over sensitive communications data and lessen their reliance on US technology suppliers. The growing interest reflects a broader push toward open-source applications in Europe amid geopolitical uncertainty. Yet the costs and complexity of replacing established applications such as Microsoft Teams…

Read more →

American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system. […]

Read more →

Sponsored by:
Software Analyst Cyber Research

Keep your most-used apps accessible with this new feature.

Read more →

Two senators say that revelations about online targeted advertising being used as a vector for spyware infections underscore the need for better security practices in the industry. Some members of the advertising industry that were subjects of the report, meanwhile, think their practices are up to the task. The Citizen Lab at the University of…

Read more →

Senior research associate Kate Robertson spoke about the legal concerns that Canada’s proposed Lawful Access Act poses in a discussion hosted by the Canadian Internet Society. She emphasized the importance of repairing and preventing vulnerabilities “rather than drilling more holes in our every day communications systems.” The post Built-In Weakness: Lawful Access and Encryption in…

Read more →

Capcom confirms 11.7 million records exposed in a CAPCOM ID data breach. Learn what information was compromised and how gamers can protect their accounts.

Read more →

Quest Diagnostics is investigating a breach of its Quanum lab portal. Learn what is known about patient data exposure and what patients should do next.

Read more →

State Bank of India is investigating nearly 3,900 customer records found on the dark web. Learn what remains unknown and how to avoid targeted banking scams.

Read more →

1Password aims to let AI agents log in without exposing passwords. Here’s how the approach works and what privacy and access risks remain for users.

Read more →

Every security checklist starts with the basics: strong passwords, multifactor authentication, spotting phishing, and keeping software up to date. All four protect what happens after a laptop starts. But some attackers are more focused on what happens before. That’s the domain of the BIOS, the first code that runs when a laptop powers on. It…

Read more →

Despite mixed reviews, demand for the new folding iPhone is significantly outpacing the current supply.

Read more →

OpenClaw, the AI digital assistant, is looking to establish itself as an essential tool for users — but if it is as profligate in its use of tokens as its creator, Pete Steinberger, then users could be in for some huge usage bills. Steinberger, now working for OpenAI, spent $10 million on AI tokens there…

Read more →

Deeper Network Promo

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch. […]

Read more →

A judge in New Mexico has fined Meta $25 billion for its flouting of data privacy laws between 2010 and 2021, including its controversial passing of data to Cambridge Analytica. The action serves as a stark reminder to enterprises not to play fast and loose with data protection legislation, as the consequences could be highly…

Read more →

A judge in New Mexico has fined Meta $25 billion for its flouting of data privacy laws between 2010 and 2021, including its controversial passing of data to Cambridge Analytica. The action serves as a stark reminder to enterprises not to play fast and loose with data protection legislation, as the consequences could be highly…

Read more →

The PHP Project provides instructions to stop further RCE exploits in limited settings.

Read more →

Choosing the right VPN comes down to security, speed, privacy features, device support, and pricing. In this video, we compare Surfshark and NordVPN to help you decide which one offers the best value for your needs.

Read more →

Weekly summary of Cybersecurity Insider newsletters

Read more →

The Fellowship PAC, a super PAC fueled by crypto industry cash that once lavished praise on Donald Trump, is making a surprising pivot. When it was founded a year ago, news reports suggested that Fellowship PAC would concentrate on supporting Republicans. Since June, however, the only candidates Fellowship PAC has spent on have been Democrats,…

Read more →

Researchers found that some smart TVs continued sending ACR-related network traffic after users opted out. Here’s what the findings mean for privacy.

Read more →

Virtualization platforms often remain in place long after their original purpose because migration carries operational risk. Yet aging…

Read more →

LG Innotek wants to help robots see the world and handle objects, and it is teaming up with Nvidia to bring those capabilities closer to reality. The South Korean electronics component maker announced on Oct. 22 that it is working with Nvidia to develop sensing solutions for physical AI, which refers to AI systems that…

Read more →

AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate permissions. Gen Digital explains how its Agent Trust Hub helps protect agents through skill verification, secure connectivity, and runtime controls that intercept dangerous act […]

Read more →

Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8 to 8.8. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.

Read more →

The region is demonstrating what happens when exploits accelerate but assurance does not.

Read more →

Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. “Artifacts from this investigation also indicate that operators in this campaign have obtained access to numerous organizations worldwide, and have attempted to further compromise some victims,

Read more →

Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.

Read more →

For the last 90 days of management events, use the CloudTrail console (Event history → Download events → JSON) or aws cloudtrail lookup-events. For anything older, or for data events like S3 object reads, read your trail’s log files in S3. They sit under s3:///AWSLogs//CloudTrail//YYYY/MM/DD/. CloudTrail is the audit log of your AWS control plane:…

Read more →

Major US banks are restricting AI agents from customer accounts over security concerns, raising questions about credentials, permissions, and financial data.

Read more →

In the Microsoft Entra admin center, open Identity → Monitoring & health → Sign-in logs, set your filters, and choose Download → JSON. For bigger or scripted pulls, use Microsoft Graph: GET /auditLogs/signIns. Either way, you only get what’s still retained: 7 days on Entra ID Free, 30 days with P1 or P2. Sign-in logs…

Read more →

.kadence-column480618_38f885-ca > .kt-inside-inner-col{padding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;}.kadence-column480618_38f885-ca > .kt-inside-inner-col{column-gap:var(–global-kb-gap-sm, 1rem);}.kadence-column480618_38f885-ca > .kt-inside-inner-col{flex-direction:column;}.kadence-column480618_38f885-ca > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column480618_38f885-ca > .kt-inside-inner-col{background-color:#ffe5e5;}.kadence-column480618_38f885-ca > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column480618_38f885-ca{position:relative;}@media all and (max-width: 1024px){.kadence-column480618_38f885-ca > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column480618_38f885-ca > .kt-inside-inner-col{flex-direction:column;justify-content:center;}} In this article Capcom’s breach exposed 11.7 million account records. Leaked details could fuel convincing phishing messages. Passwords on 196 accounts were changed without permission. Use CAPCOM…

Read more →

This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. PHP fit that description. By now, you either know about it, or you probably never will, so it is time to go back to “business as usual”.  Many vendors have released patches…

Read more →

Sponsored by:
Software Analyst Cyber Research

Key Points Aokigahara, a newly observed infostealer, has been spotted in the wild. An earlier version may have been known as Kamidere or Stygian. The malware includes traditional data theft capabilities targeting browsers, VPN clients, cryptocurrency wallets, FTP/SFTP clients, password managers, and email applications, among other targets. AI applications and development tools are notable targets.…

Read more →

Executive Summary On October 21, 2026, Node.js released fixes for 10 vulnerabilities across its three supported release lines: 22.x, 24.x, and 26.x. Four are rated High. The most severe, CVE-2026-111497, is an out-of-bounds write in the bundled Brotli decoder that Node.js says permits remote code execution. These flaws live in the Node.js runtime itself, not…

Read more →

The Purview portal (Audit → Search) lets you search the Unified Audit Log and export the results to CSV. The full event sits in one column, AuditData, as a JSON blob. To get clean JSON, one event per line, use Exchange Online PowerShell and Search-UnifiedAuditLog. The script is below. Standard audit retention is 180 days;…

Read more →

Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. […]

Read more →

WhatsApp and Telegram users in India may face access restrictions starting January 1, 2027, as messaging platforms implement the government’s SIM-binding requirements. The Department of Telecommunications (DoT) has set December 31, 2026, as the compliance deadline, requiring messaging services to keep accounts linked to the active SIM associated with the registered mobile number. These changes…

Read more →

Research found 426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns…

Read more →

Damaging a cable on the seabed off the UK coast could soon cost someone 14 years of their life behind bars, under plans the British government published this week. The proposal comes from a White Paper by the Department for Digital, Culture, Media and Sport that would update laws protecting undersea cables and pipelines, some…

Read more →

StealC’s seller has resurfaced with Stadia, a modular remote access trojan that expands the disrupted infostealer into a platform for persistent endpoint control. Advertised on October 16, the malware combines credential theft with hidden desktop access, command execution, file management, and payload delivery, according to research supplied by Varonis Threat Labs. The comeback follows June’s…

Read more →

A critical command execution vulnerability has been identified in Okta Access Gateway (OAG), which could allow an authenticated administrator to execute system commands by submitting specially formatted configuration values through the appliance’s Admin Console. This vulnerability is documented in an advisory dated October 22, 2026. Tracked as CVE-2026-115547, the issue affects versions of the OAG…

Read more →

The AfD has confirmed that hackers breached its hosting provider. A leak site now claims to offer 421,179 of the party’s internal emails, and shows AI-written summaries rather than the emails themselves. Read more in my article on the Hot for Security blog.

Read more →