These basic problems stumped AI only a few years ago. Can you solve them?

Read more →

Criminals are turning to next-generation, AI-powered hacking tools as a serious internet flaw has given birth to “Black October.”

Read more →

Telecom providers are expanding their networks beyond connectivity to support AI workloads closer to end users. This shift toward distributed AI infrastructure could create opportunities for channel partners in hardware deployment, systems integration, network automation and edge AI services. At GTC Berlin on Oct. 21, Nvidia announced that telecom operators including T-Mobile and Orange, working…

Read more →

An Anduril-backed venture aims to genetically engineer faster, sharper-nosed military dogs to help beat the enemy.

Read more →

Threat actors don’t need to rely on malware to breach organizations anymore. They’re simply calling help desks and politely asking for access, with a little help from artificial intelligence.

Read more →

Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. […]

Read more →

Yesterday everyone was running around like crazy (me included 🙂 because of the php2shell vulnerability. However, after looking closely at some published PoC’s – and there is an unbelievable amount of AI generated – erm, slop – it looks like building a universal, reliable, one click exploit is quite difficult (unless I’m missing something, so…

Read more →

Fixing the critical PHP flaws is not as simple as clicking “Update.” Here’s how to assess your risk, and what you can do to protect yourself.

Read more →

Ciena CEO Gary Smith is “suitably paranoid,” but optimistic.

Read more →

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.

Read more →

A research and implementation guide to autonomous external web application and API security testing Autonomous penetration testing is evolving from conventional vulnerability scanning toward systems that can discover an application’s attack surface, form hypotheses about potential weaknesses, select appropriate tests, interpret results, adapt their next actions, and validate suspected vulnerabilities with reproducible evidence. Yet a…

Read more →

Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. […]

Read more →

Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report

Read more →

Microsoft partners need to check AI Builder renewal dates and arrange replacement capacity to keep customers’ apps and automated workflows running. The company will retire AI Builder capacity add-ons from sale on Nov. 1, 2026, according to an Oct. 22 Partner Center notice. Customers can continue using existing credits through their current subscription term, but…

Read more →

Google has an answer to some of the electricity supply problems that data center construction is causing: It has signed an agreement with energy supplier Voltus to build what it’s calling a 1-gigawatt virtual power plant, expanding on an earlier 100 megawatt deal the two signed earlier this year. This power plant is virtual in…

Read more →

In this article Attack overview Technical details Mitigation and protection guidance Indicators of compromise References Learn More On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index (PyPI) and distributed through official container images. The malicious package added files that Python could execute during normal interpreter initialization. An application…

Read more →

Pax8 is betting that the next phase of growth for managed service providers won’t come from selling more IT tools, but from helping businesses manage the AI systems increasingly embedded in their daily operations. At its Beyond EMEA conference in Copenhagen on October 19, the company introduced 8os, an AI operating system, and 8bot, an…

Read more →

PHP warns of a new, unlikely code execution flaw, CVE-2026-115560, and advises disabling session upload progress until a fix is released. PHP has warned of a new code execution vulnerability, tracked as CVE-2026-115560, just two days after releasing emergency patches for the critical PHP2Shell flaws. The vulnerability affects only a specific PHP configuration that PHP…

Read more →

Hyperscalers are getting decidedly twitchy about citizens’ reactions to their secretive data center construction plans, and are looking for ways to de-escalate some of the conflicts. Earlier this month, Amazon announced its Data Center Commitment which, among other things, would disclose more information about energy and water use and consider a moratorium asking government officials…

Read more →

Deutsche Telekom is using AudioCodes’ VoiceAI Connect platform to power its new Voice AI Notes Mobile service for small and midsize businesses (SMBs), bringing AI-powered communications capabilities to customers while maintaining control over sensitive voice data. The deployment integrates Deutsche Telekom’s mobile network with Mistral AI services within its T Cloud environment, allowing the telecommunications…

Read more →

Google plans to pay homes and businesses to reduce electricity demand when the grid needs relief. The company announced Oct. 22 it expanded its agreement with energy technology company Voltus to develop a 1-gigawatt (GW) virtual power plant across the PJM Interconnection grid, which serves 67 million people across 13 states and Washington, DC. Voltus…

Read more →

Oracle has patched 1295 security vulnerabilities with its October Critical Patch Update Advisory; six of them scored the highest vulnerability rating of 10.0 on the CVSS version 3.1 scale. The company’s flagship Oracle E-Business Suite was home to one of the vulnerabiltiies, tracked as CVE-2026-101809. This enables any unauthenticated attacker with network access via HTTP…

Read more →

Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code…

Read more →

Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as…

Read more →

WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access…

Read more →

One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.

Read more →

Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027. […]

Read more →

Matrix-based messaging tools are gaining traction among European governments that seek to gain greater control over sensitive communications data and lessen their reliance on US technology suppliers. The growing interest reflects a broader push toward open-source applications in Europe amid geopolitical uncertainty. Yet the costs and complexity of replacing established applications such as Microsoft Teams…

Read more →

Sponsored by:
Software Analyst Cyber Research

American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system. […]

Read more →

Keep your most-used apps accessible with this new feature.

Read more →

Two senators say that revelations about online targeted advertising being used as a vector for spyware infections underscore the need for better security practices in the industry. Some members of the advertising industry that were subjects of the report, meanwhile, think their practices are up to the task. The Citizen Lab at the University of…

Read more →

Senior research associate Kate Robertson spoke about the legal concerns that Canada’s proposed Lawful Access Act poses in a discussion hosted by the Canadian Internet Society. She emphasized the importance of repairing and preventing vulnerabilities “rather than drilling more holes in our every day communications systems.” The post Built-In Weakness: Lawful Access and Encryption in…

Read more →

Capcom confirms 11.7 million records exposed in a CAPCOM ID data breach. Learn what information was compromised and how gamers can protect their accounts.

Read more →

Deeper Network Promo

Quest Diagnostics is investigating a breach of its Quanum lab portal. Learn what is known about patient data exposure and what patients should do next.

Read more →

State Bank of India is investigating nearly 3,900 customer records found on the dark web. Learn what remains unknown and how to avoid targeted banking scams.

Read more →

1Password aims to let AI agents log in without exposing passwords. Here’s how the approach works and what privacy and access risks remain for users.

Read more →

Every security checklist starts with the basics: strong passwords, multifactor authentication, spotting phishing, and keeping software up to date. All four protect what happens after a laptop starts. But some attackers are more focused on what happens before. That’s the domain of the BIOS, the first code that runs when a laptop powers on. It…

Read more →

Despite mixed reviews, demand for the new folding iPhone is significantly outpacing the current supply.

Read more →

OpenClaw, the AI digital assistant, is looking to establish itself as an essential tool for users — but if it is as profligate in its use of tokens as its creator, Pete Steinberger, then users could be in for some huge usage bills. Steinberger, now working for OpenAI, spent $10 million on AI tokens there…

Read more →

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch. […]

Read more →

A judge in New Mexico has fined Meta $25 billion for its flouting of data privacy laws between 2010 and 2021, including its controversial passing of data to Cambridge Analytica. The action serves as a stark reminder to enterprises not to play fast and loose with data protection legislation, as the consequences could be highly…

Read more →

A judge in New Mexico has fined Meta $25 billion for its flouting of data privacy laws between 2010 and 2021, including its controversial passing of data to Cambridge Analytica. The action serves as a stark reminder to enterprises not to play fast and loose with data protection legislation, as the consequences could be highly…

Read more →

The PHP Project provides instructions to stop further RCE exploits in limited settings.

Read more →

Choosing the right VPN comes down to security, speed, privacy features, device support, and pricing. In this video, we compare Surfshark and NordVPN to help you decide which one offers the best value for your needs.

Read more →

Weekly summary of Cybersecurity Insider newsletters

Read more →

The Fellowship PAC, a super PAC fueled by crypto industry cash that once lavished praise on Donald Trump, is making a surprising pivot. When it was founded a year ago, news reports suggested that Fellowship PAC would concentrate on supporting Republicans. Since June, however, the only candidates Fellowship PAC has spent on have been Democrats,…

Read more →

Researchers found that some smart TVs continued sending ACR-related network traffic after users opted out. Here’s what the findings mean for privacy.

Read more →

Virtualization platforms often remain in place long after their original purpose because migration carries operational risk. Yet aging…

Read more →

LG Innotek wants to help robots see the world and handle objects, and it is teaming up with Nvidia to bring those capabilities closer to reality. The South Korean electronics component maker announced on Oct. 22 that it is working with Nvidia to develop sensing solutions for physical AI, which refers to AI systems that…

Read more →

AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate permissions. Gen Digital explains how its Agent Trust Hub helps protect agents through skill verification, secure connectivity, and runtime controls that intercept dangerous act […]

Read more →

Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8 to 8.8. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.

Read more →

The region is demonstrating what happens when exploits accelerate but assurance does not.

Read more →

Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. “Artifacts from this investigation also indicate that operators in this campaign have obtained access to numerous organizations worldwide, and have attempted to further compromise some victims,

Read more →

Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.

Read more →

For the last 90 days of management events, use the CloudTrail console (Event history → Download events → JSON) or aws cloudtrail lookup-events. For anything older, or for data events like S3 object reads, read your trail’s log files in S3. They sit under s3:///AWSLogs//CloudTrail//YYYY/MM/DD/. CloudTrail is the audit log of your AWS control plane:…

Read more →

Major US banks are restricting AI agents from customer accounts over security concerns, raising questions about credentials, permissions, and financial data.

Read more →

In the Microsoft Entra admin center, open Identity → Monitoring & health → Sign-in logs, set your filters, and choose Download → JSON. For bigger or scripted pulls, use Microsoft Graph: GET /auditLogs/signIns. Either way, you only get what’s still retained: 7 days on Entra ID Free, 30 days with P1 or P2. Sign-in logs…

Read more →

.kadence-column480618_38f885-ca > .kt-inside-inner-col{padding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;}.kadence-column480618_38f885-ca > .kt-inside-inner-col{column-gap:var(–global-kb-gap-sm, 1rem);}.kadence-column480618_38f885-ca > .kt-inside-inner-col{flex-direction:column;}.kadence-column480618_38f885-ca > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column480618_38f885-ca > .kt-inside-inner-col{background-color:#ffe5e5;}.kadence-column480618_38f885-ca > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column480618_38f885-ca{position:relative;}@media all and (max-width: 1024px){.kadence-column480618_38f885-ca > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column480618_38f885-ca > .kt-inside-inner-col{flex-direction:column;justify-content:center;}} In this article Capcom’s breach exposed 11.7 million account records. Leaked details could fuel convincing phishing messages. Passwords on 196 accounts were changed without permission. Use CAPCOM…

Read more →

Sponsored by:
Software Analyst Cyber Research

This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. PHP fit that description. By now, you either know about it, or you probably never will, so it is time to go back to “business as usual”.  Many vendors have released patches…

Read more →

Key Points Aokigahara, a newly observed infostealer, has been spotted in the wild. An earlier version may have been known as Kamidere or Stygian. The malware includes traditional data theft capabilities targeting browsers, VPN clients, cryptocurrency wallets, FTP/SFTP clients, password managers, and email applications, among other targets. AI applications and development tools are notable targets.…

Read more →

The Purview portal (Audit → Search) lets you search the Unified Audit Log and export the results to CSV. The full event sits in one column, AuditData, as a JSON blob. To get clean JSON, one event per line, use Exchange Online PowerShell and Search-UnifiedAuditLog. The script is below. Standard audit retention is 180 days;…

Read more →

Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. […]

Read more →

WhatsApp and Telegram users in India may face access restrictions starting January 1, 2027, as messaging platforms implement the government’s SIM-binding requirements. The Department of Telecommunications (DoT) has set December 31, 2026, as the compliance deadline, requiring messaging services to keep accounts linked to the active SIM associated with the registered mobile number. These changes…

Read more →

Research found 426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns…

Read more →

Damaging a cable on the seabed off the UK coast could soon cost someone 14 years of their life behind bars, under plans the British government published this week. The proposal comes from a White Paper by the Department for Digital, Culture, Media and Sport that would update laws protecting undersea cables and pipelines, some…

Read more →

StealC’s seller has resurfaced with Stadia, a modular remote access trojan that expands the disrupted infostealer into a platform for persistent endpoint control. Advertised on October 16, the malware combines credential theft with hidden desktop access, command execution, file management, and payload delivery, according to research supplied by Varonis Threat Labs. The comeback follows June’s…

Read more →

A critical command execution vulnerability has been identified in Okta Access Gateway (OAG), which could allow an authenticated administrator to execute system commands by submitting specially formatted configuration values through the appliance’s Admin Console. This vulnerability is documented in an advisory dated October 22, 2026. Tracked as CVE-2026-115547, the issue affects versions of the OAG…

Read more →

The AfD has confirmed that hackers breached its hosting provider. A leak site now claims to offer 421,179 of the party’s internal emails, and shows AI-written summaries rather than the emails themselves. Read more in my article on the Hot for Security blog.

Read more →

Deeper Network Promo

The WSJ Leadership Institute’s Best Boards 2026 ranking spotlights what top organizations have in common.

Read more →

Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass vulnerability in the SSH daemon of its AOS-8 wireless operating system. This vulnerability, tracked as CVE-2026-79855, could let a remote, unauthenticated attacker gain administrative privileges and fully compromise an affected host. It has a CVSS v3.1 score of 9.8, indicating a high severity. Attackers can exploit…

Read more →

An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The researchers tracked the campaign between July 14 and September 22, 2026, counting 497 successful sign-ins and more…

Read more →

Japanese video games giant Capcom confirmed unauthorized access to its online account system

Read more →

Capcom has confirmed a data breach that affects 11,774,247 CAPCOM ID records worldwide. An unauthorized third party accessed customer information linked to its online membership service. This incident, disclosed on October 22, 2026, exposed email addresses and account metadata. A smaller subset of records also included personal profile information and unauthorized password changes. CAPCOM ID…

Read more →

A New Mexico judge ordered Meta to pay $25 billion for misleading users about privacy, setting a record penalty. Meta plans to appeal. This week a New Mexico judge ordered Meta to pay the state $25 billion. The order follows a jury finding that the company deceived Facebook users about their privacy, and it’s the…

Read more →

SAP professionals can now renew their certifications through AI-based roleplays. The new service builds on SAP’s revamp of its certification program last year, shifting the focus from rote learning of facts towards real-world use cases. “The evolution of Stay Certified reflects a broader shift already taking place across SAP Certification: moving beyond assessing what someone…

Read more →

Microsoft’s Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may multiply — not contain — the risk.

Read more →

Quest Diagnostics disclosed unauthorized access to its Quanum LSM system, confirming that an unidentified party may have accessed certain patient records. The company became aware of the incident on October 21, 2026, as stated in a Form 8-K disclosure. The Quanum LSM system enables specific healthcare clients to place laboratory test orders, receive results, and…

Read more →

U.S. banks face challenges as third-party artificial intelligence agents detect unauthorized access to customer accounts. This situation raises concerns about credential sharing, automated transactions, and the difficulty of distinguishing legitimate customer activity from automation-initiated actions. According to a report from Axios on October 22, several banks, including Morgan Stanley, Bank of America, JPMorgan, and Wells…

Read more →

PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk. The project is not issuing an emergency…

Read more →

The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining initial access to the target on July 16, 2025, via a spear-phishing email bearing a malware-laced attachment that…

Read more →

Node.js has released security updates addressing CVE-2026-111497, a high-severity vulnerability in its bundled Brotli decompression code that can potentially enable remote code execution. The flaw is an out-of-bounds write triggered when a vulnerable decoder processes specially crafted Brotli-compressed data. The issue affects all currently supported Node.js branches—22.x, 24.x, and 26.x. Node.js addressed the vulnerability in…

Read more →

Plus: Inside U.S. push to put nuclear reactors in ports and on cargo ships and what to know about the AI-triggered cybersecurity crisis.

Read more →

PHP2Shell attacks have surged into the millions, but no successful exploitation is confirmed. Patch it immediately. On October 21, PHP released emergency patches for two critical vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619 (CVSS score of 9.2), affecting every PHP version that handles web requests. The bug code dates back to PHP 5.4 from 2012, lives…

Read more →

The State Bank of India (SBI) has individually notified customers whose data was involved in a recent cybersecurity incident. In an update focused on customer safety, the bank confirmed it contacted affected individuals via email and/or WhatsApp. They reassured customers that their account balances and funds are safe. This announcement follows an earlier communication about…

Read more →

I’ve been having this almost-debate with Matt Pocock for a while about the best way to do spec driven development. Matt is a very accomplished old-school developer. A true software engineer. And he’s been using AI to enhance his capabilities to an extraordinary degree. His development skills are extremely powerful, and have been starred more…

Read more →

Indian digital trust company eMudhra has announced that it is exiting the global SSL/TLS certificate business and is offering customers certificates issued by Sectigo as an alternative, following the compromise of private keys behind eight of its intermediate certificate authorities. The company’s board decided “to voluntarily withdraw from the global SSL/TLS certificate business,” eMudhra said…

Read more →

Security researchers identified attempts to access corporate networks which have been linked to a major Microsoft 365-targeted BEC campaign using phishing, stolen session tokens and social engineering

Read more →

Indian digital trust company eMudhra has announced that it is exiting the global SSL/TLS certificate business and is offering customers certificates issued by Sectigo as an alternative, following the compromise of private keys behind eight of its intermediate certificate authorities. The company’s board decided “to voluntarily withdraw from the global SSL/TLS certificate business,” eMudhra said…

Read more →

Sponsored by:
Software Analyst Cyber Research

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

Plus, China transforms its most controversial region into a commercial hub, and how flights are dodging global conflicts.

Read more →

Kroll found that 69% of data breach victims in the past year were affected by a third-party breach, with attacks on tech companies the most common cause

Read more →

A breach exposed personal information in supposedly anonymous crime reports. Now one Crime Stoppers chapter has stopped accepting tips because it cannot guarantee anonymity. Toronto Crime Stoppers, which works with the community, police, and media to help solve crimes, has paused phone, website, and app submissions while it seeks a safer system. The breach occurred…

Read more →

Google heeft een kwetsbaarheid verholpen in de Brotli-decompressiebibliotheek. Deze bibliotheek wordt onder meer gebruikt in Node.js. Een ongeauthenticeerde kwaadwillende kan de kwetsbaarheid op afstand misbruiken door speciaal vervaardigde Brotli-gecomprimeerde gegevens te laten verwerken. Succesvol misbruik kan leiden tot een denial-of-service, toegang tot gevoelige gegevens uit het procesgeheugen of het uitvoeren van willekeurige code met de…

Read more →

Google’s new Googlebooks are packed with potential — and while the systems in their current state may be awkwardly rough around the edges, there are some truly interesting ideas within ’em. I looked at some of those highlights in my recent “Googlebook work test” hands-on analysis, but in addition to all the surface-level sorcery, Googlebooks…

Read more →

Public proof-of-concept exploit code targeting two critical PHP vulnerabilities has surfaced as attackers scan exposed servers and attempt exploitation. Tracked as CVE-2026-109618 and CVE-2026-109619, the vulnerabilities are collectively called PHP2Shell and carry CVSS v4.0 scores of 9.2, potentially allowing unauthenticated remote code execution with web server privileges. However, Sophos has corrected an earlier report of…

Read more →

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file’s name to Ghostscript, a separate program…

Read more →

The Muse artificial-intelligence agent has reached 10 million downloads in a little over a month since it was launched.

Read more →

Players who signed up for Capcom’s online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, the account people use to sign in to the company’s web services and to…

Read more →