An alleged leak from cryptocurrency swap service Wagyu.xyz contains 4,580 completed cross-chain swaps linking incoming transaction hashes, Monero receiving addresses, and client IP addresses. The dataset reportedly includes 38,628 order records from July 18–October 26, 2026, plus an activity index covering 10,139 distinct IP addresses. Hudson Rock has not independently authenticated the files’ alleged breach…

Read more →

UEBA earns its keep on attacks that look like logins stolen credentials used plausibly, insiders drifting toward exits and fails on unexplainable scores nobody acts on. Roster honesty first: our sheet listed Exabeam and LogRhythm separately, but their merger makes them one company, so this is an eleven-vendor verdict guide spanning SIEM-embedded analytics, standalone timelines,…

Read more →

CTI services answer different sentences who targets us, what’s leaked about us, which alerts are noise, whose infrastructure is that and no provider owns them all. This verdict guide maps twelve feeds and services to the sentences they answer best, spanning frontline-IR intel, noise-filtering specialists, preemptive infrastructure hunting, underground depth, and the regional players with…

Read more →

The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to its Known Exploited Vulnerabilities (KEV) catalog. This decision was made after evidence of exploitation in the wild was discovered. The announcement, made on October 28, 2026, raised the priority of addressing this flaw, despite its…

Read more →

A TIP earns its keep in decisions changed per month blocks pushed, hunts launched, patches reprioritized and 2026’s field spans premium all-source graphs, open-source standards, exposure-fused challengers, and infrastructure-truth specialists, with ownership moves (Mastercard’s, Securonix’s) adding mandatory RFP questions. This verdict guide judges twelve platforms on operationalization, not feed counts. Actionable threat intelligence feeds provide…

Read more →

Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application runtime, and they came with the familiar warning to patch immediately. But CISOs will have to deal with the long tail of these flaws for years due to widespread PHP integration into third-party products with patching cycles customers don’t…

Read more →

Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) software. This vulnerability, tracked as CVE-2026-76418, lets unauthenticated attackers trigger unexpected device reloads, causing a denial of service. The flaw is categorized as high severity, with…

Read more →

SOAR’s 2026 question is sustainability: which builder model code, low-code, or no-code will your actual team keep shipping with after the demo glow fades? This verdict guide judges twelve options across the honest lanes: bundled-SIEM automation, enterprise playbook monoliths, the no-code velocity trio, intel-fused orchestrators, and one absorbed lineage flagged where the sheet still lists…

Read more →

SIEM purchases fail by buying someone else’s SOC the wrong pricing architecture for your log profile, the wrong engine for your team’s skills and 2026 adds consolidation homework: QRadar’s lanes split, Exabeam carries a merger, Splunk answers to Cisco. This verdict guide judges twelve platforms on pricing-architecture honesty, analyst-loop quality, and estate gravity, spanning the…

Read more →

Researchers can’t quite explain why cyber threats look so different in Italy compared to everywhere else.

Read more →

Learn how to remove your Pornhub account in this post. Removing a Pornhub account may be a decision motivated by various reasons, from privacy concerns to personal preference. Regardless of the motivation, it’s important to understand the steps involved in account deletion and the implications that come with it.  This comprehensive guide will walk you…

Read more →

INJ3CTOR3 has expanded its FreePBX toll-fraud campaign with automated credential theft, letting attackers keep billing unauthorized calls to victims even after infected servers are cleaned. September 2026 artifacts described in the supplied research show the installer targeting 17 configuration files containing telephony, database, management, and mail-relay secrets. The change separates the attacker’s revenue stream from…

Read more →

CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following confirmed evidence of exploitation. Added on October 27, 2026, this flaw allows unauthenticated attackers to corrupt memory, disrupt services, disclose sensitive information, or potentially execute arbitrary code through maliciously crafted compressed streams. Federal agencies have…

Read more →

In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of standard MTTR, and why only a small share of disclosed flaws, under one percent in 2025, pose active…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector. The vulnerability in question is CVE-2026-41709…

Read more →

Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content Security Policy (CSP), enabling malicious JavaScript execution on a targeted website’s origin. Published on October 28, 2026, the research combines an XML serialization flaw, Chromium cache behavior, and redirects that circumvent image source restrictions. Exploitation depends on…

Read more →

Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it’s convenient to play with snapshots in your lab. Start a new investigation from a clean snapshot and take some more when you reached a critical step. But, if you need to revert to a previous snapshot, all…

Read more →

The largest software repository on the planet, GitHub, has announced major AI coding assistant breakthroughs, with a dedicated app, prompt routing to the best model for the…

Read more →

Security researchers at OffensiveCon Japan 2026 explored topics including Chrome sandbox escapes, zero-click attack surfaces in Telegram, and newly discovered iOS zero-day vulnerabilities. This two-day program took place on October 27–28. The published agenda also covered hypervisor exploitation, Windows privilege escalation, Linux kernel techniques, and AI-assisted security research. However, session titles alone do not indicate…

Read more →

Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because automated systems are already in place. Their more specific answers point elsewhere. Only 4% said their certificate management is already automated, and 61% said their organization had a certificate-related outage…

Read more →

Attackers are using compromised websites to present fake Cloudflare verification pages that steer Windows and macOS users toward executing malicious commands. The findings establish a delivery attempt, not a confirmed infection or identified malware family. The activity exploits the familiarity of browser security checks. Instead of completing a legitimate verification, visitors receive instructions intended to…

Read more →

Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. “Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet,” the network security company said in an update to its advisory. The vulnerabilities, tracked as

Read more →

WordPress has released version 7.1.4 to address 22 vulnerabilities, including issues related to remote code execution, stored cross-site scripting, information disclosure, and authorization weaknesses. This security update was published on October 28, 2026, and it is recommended that users upgrade immediately. The fixes encompass core functionality, including content blocks, administrative screens, the Customizer, and the…

Read more →

Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report. Scam victims often struggle with shame and self-blame, while identity theft victims can spend weeks of personal effort trying to repair the damage. Source: ITRC Conducted in August and September…

Read more →

CyberDakait, a financially motivated Android malware operation targeting Indian banking customers since July 2025. Researchers identified at least 17,960 compromised devices and 7,611,443 intercepted SMS messages, exposing a campaign that combines banking credential theft, remote device control, and cryptocurrency mining. Although their technical implementations differ, Group-IB clusters them together because of overlapping distribution methods, phishing…

Read more →

A newly disclosed data leak has exposed personal and professional information on more than 40,000 U.S. Department of Homeland Security employees, including personnel in surveillance, human intelligence, and undercover operations. Distributed Denial of Secrets announced the publication on October 28. It attributed the information to an entity calling itself “Department of Peace.” The reported exposure…

Read more →

Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their staff accounts or credentials were circulating on underground and dark web marketplaces. That’s 808 of the center’s 6,116 K-12 members, and attackers are using those logins to get in the door and then…

Read more →

Hackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems associated with a United States government-affiliated environment, according to Dream researchers. Discovered on October 25, the operation progressed from exposed firewall management interfaces to credential theft, persistent tunneling, and Active Directory reconnaissance. Dream recovered…

Read more →

COMPANY NEWS: ENERGEE’s Golden Brick Battery technology, used in the 75 kWh RWD version of the Australian-market ZEEKR 7X, is among the technologies the company is showcasing…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

Sponsored by:
Software Analyst Cyber Research

QUT has received a $5 million Australian Research Council grant to establish a new research hub focused on the safe and ethical use of humanoid robots in Australian workplaces.

Read more →

For the past three days, the Annexahttps://annexa.com.au/ team has been on the ground at SuiteWorld 2026 in Las Vegas, following the keynotes, roadmap sessions, and partner…

Read more →

The iPhone maker for years bullied flash-storage makers into steep discounts—until AI hyperscalers bid up prices and gobbled up supply.

Read more →

Google, Meta and other tech firms are pushing back against broad ICE demands for user data as the federal agency scours platforms for immigration speech.

Read more →

Authorities seized the domain of Virtualine, a bulletproof hosting provider that cybercriminals used to commit a large-scale sextortion scheme, ransomware, data theft, malware hosting and money laundering, the Justice Department said Tuesday.  Virtualine facilitated prolific criminal activity, including the distribution of child sexual abuse material (CSAM), the Justice Department said. The Russian-speaking bulletproof hosting provider…

Read more →

Deeper Network Promo

Fortinet raises 2026 revenue guidance to 20 per cent year-over-year growth.

Read more →

Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President’s son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets? Meanwhile, James Ball explains that…

Read more →

Use Verified Boomi Evidence to confirm ecosystem standing, Core Strength to match technical need, Delivery Coverage to assess geographic fit, and Delivery Model to judge how…

Read more →

Drop-in agent skills evolve quickly. Yet 26 percent of the 31,132 public skills analysed in a January 2026 study carried at least one vulnerability, and 5 percent were likely…

Read more →

Information published.

Read more →

Understand APNIC IPv4 transfer rules, buyer requirements, fees and approval steps, with helpful checks to assess address blocks before completing a transaction.

Read more →

Expanded alliance brings together the Dayforce Agentic HCM Platform with Deloitte’s human capital, payroll, and controls experience to help organisations accelerate…

Read more →

A next-generation desktop craft workstation that unifies scanning, printing, and blade cutting to redefine home crafting through seamless, error-free execution.

Read more →

New Barracuda Research Study Reveals 45% of Australian Organisations Have Replaced or Eliminated Entry-Level Security Roles With AI, While 68% of Security Teams Have AI-Related…

Read more →

Six-city Cook. Connect. Collaborate series brings partners together across Australia Pay-for-performance partner program incentivises midrange growth among eligible partner…

Read more →

A conversational experience lets anyone describe what they need and build it securely in moments — no point solutions, no need to code, no costly customization Company also…

Read more →

Insurers gain speed and precision across the insurance lifecycle to launch products faster, assess and price risk more effectively, and resolve claims sooner

Read more →

New services and capabilities address emerging attack surfaces that most resilience strategies weren’t built to handle

Read more →

Recent reports of AI systems acting beyond their intended scope are a timely reminder to get the basics right. We wouldn’t give a new contractor access to every file with no…

Read more →

WireGuard, OpenVPN, and Shadowsocks often appear in the same privacy conversation, but they were built for different jobs.…

Read more →

New Manhattan Associates research reveals how AI could challenge retailer loyalty, with stock availability and fulfilment also influencing where shoppers buy

Read more →

Experienced security industry executive to strengthen engagement with major enterprise and critical infrastructure customers

Read more →

Australian consumers are already buying products recommended by AI tools, giving retailers a new reason to examine whether their product information helps shoppers make the…

Read more →

A new $2,899-and-up MacBook Pro comes with an impressively high-contrast—and finger-friendly—screen.

Read more →

CVE-2026-74496, CVE-2026-74743, CVE-2026-89481, CVE-2026-89638, CVE-2026-89648, CVE-2026-90227, CVE-2026-93287, CVE-2026-93785, CVE-2026-93795, CVE-2026-93798, CVE-2026-93800, CVE-2026-93817, CVE-2026-97416, CVE-2026-97417, CVE-2026-97420, CVE-2026-97421, CVE-2026-97430, CVE-2026-97441, CVE-2026-97444, CVE-2026-97445, CVE-2026-97446, CVE-2026-97448, CVE-2026-97449, CVE-2026-97450, CVE-2026-97451, CVE-2026-97452, CVE-2026-97453, CVE-2026-97454, CVE-2026-97455, CVE-2026-97456, CVE-2026-97472, CVE-2026-97476, CVE-2026-97481, CVE-2026-97483, CVE-2026-97484, CVE-2026-97523, CVE-2026-97524, CVE-2026-97557, CVE-2026-97568, CVE-2026-97572, CVE-2026-97573, CVE-2026-97596, CVE-2026-97598, CVE-2026-97611, CVE-2026-97612, CVE-2026-97899, CVE-2026-97904, CVE-2026-97905, CVE-2026-97940, CVE-2026-97951, CVE-2026-97958, CVE-2026-97959, CVE-2026-97995, CVE-2026-97998, CVE-2026-98010,…

Read more →

A leak website was published Wednesday, showcasing internal data on more than 41,000 Department of Homeland Security employees and contractors after it was obtained by hackers who claimed to have breached an identity service used by the agency.   The transparency nonprofit Distributed Denial of Secrets and the hacker maia arson crimew got the data from…

Read more →

Cisco Talos has identified UAT-11473, a highly sophisticated advanced persistent threat (APT) actor, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthorized access to affected systems. UAT-11473 then installed a custom malware framework we track as “KeyDrift” consisting of multiple components geared towards collecting sensitive…

Read more →

U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. […]

Read more →

From a new smart alarm clock to an Alexa-powered 3D map of your home, here’s what’s new from Amazon, including prices and release dates.

Read more →

Artem Stryzhak gets 70 months in prison for Hive and Nefilim ransomware attacks, while the FBI offers $11 million for his alleged co-conspirator. A federal court in Brooklyn has sentenced Artem Stryzhak, a Ukrainian national, to 70 months in prison for using ransomware to extort millions of dollars from victims. The U.S. Attorney’s Office for…

Read more →

Sponsored by:
Software Analyst Cyber Research

The company’s cloud business continued to post accelerating growth in the most recent quarter, contributing to a higher profit and easing jitters over potential returns from the AI build-out.

Read more →

World of Warcraft: Forever is imminently due for release and Blizzard’s designers explained how a familiar world, stunning refreshed visuals, and more room to experiment will…

Read more →

The company’s total revenue was $127.6 billion, just below the level Wall Street predicted, but cloud revenue grew faster than expected.

Read more →

A working day is full of small, repeated jobs, from writing up meeting notes to chasing approvals and sending weekly updates, and AI agents can take over much of that work.

Read more →

World’s largest pure-play MSSP to expand reach and scale of Wayfinder’s MDR and IRR services, and bring SentinelOne’s AI security, ASOC and endpoint detection and response EDR…

Read more →

The supply chain attack campaign’s shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.

Read more →

Entire is challenging GitHub with a developer platform built around coding agents, replacing conventional pull requests with automated evaluations and offering Australian…

Read more →

Fraud prevention combines rules, AI and behavioral analytics to stop scams, reduce false declines and keep automated decisions explainable through human review.

Read more →

A Florida judge ruled this week that ex-Overstock CEO Patrick Byrne is not liable in a lawsuit brought by a Dominion Voting Systems executive over a film that accuses the former electronic voting hardware and software company  executive of saying he “made sure” that Republican presidential candidate Donald Trump wouldn’t win reelection in 2020. The…

Read more →

Deeper Network Promo

Apple finally revealed its new MacBook M5 Pro and Max with a touchscreen OLED display, bringing the best features from the iPhone to its laptops.

Read more →

Discord announced a new feature that can make your server messages discoverable on Google. Here’s how to opt out.

Read more →

You can ask Amazon’s voice assistant to show you your favorite photos.

Read more →

Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. […]

Read more →

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. “First identified in late 2023, Silent Train uses rotating chains of compromised SOHO, IoT, and enterprise infrastructure,” Lumen Technologies Black Lotus Labs…

Read more →

Is your pricey Claude Enterprise account worth it? Anthropic is trying to surface insights with three tools.

Read more →

New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec today announced the release of a free, interactive hands-on lab in Proving Grounds Play (PG Play) to help security practitioners examine and defend against the critical “PHP2Shell” vulnerabilities (CVE-2026-109618 and…

Read more →

A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff…

Read more →

GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. The checks run before a package reaches a laptop, a build, or a coding agent. GitHub says…

Read more →

New York, United States, 28th October 2026, CyberNewswire

Read more →

Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android’s usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and update, for ongoing malware scanning. Approved stores…

Read more →

I got the opportunity to measure the radiation emitted by uranium glass. Uranium glass is glass with uranium added to the glass mix for coloration. My Bosean FS-5000 meter did not detect any radiation from the uranium glass. The counts per second (CPS) value was around the same on the uranium glass and away from…

Read more →

Amazon just dropped new smart home gear in response to Apple. Here’s how the Echo Show 16 stacks up.

Read more →

Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information. […]

Read more →

A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full method on October 28, five months after the chain won $175,000 at the Pwn2Own Berlin contest in May. Microsoft…

Read more →

Thanks to the newly proposed WebAI web standard, the company will start shipping local AI models with its flagship browser.

Read more →

Introduction On Wednesday, 2026-10-28, I ran across a ClickFix campaign I haven’t seen before. Like several other ClickFix campaigns, this one uses a fake Cloudflare verification page. It targets both macOS and Windows. I don’t yet have a name for this specific activity, but this diary shares some screenshots and indicators. Unfortunately, I was unable…

Read more →

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root

Read more →

A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.

Read more →

Sponsored by:
Software Analyst Cyber Research

The FEC’s filing system is offline after a reported hacking attempt, delaying campaign finance disclosures days before the 2026 midterm elections.

Read more →

CyberStrikeAI used 44 AI agents to target Japanese organizations. Learn how the attacks worked and what security teams across APAC should check.

Read more →

Fake court notices target more than 100,000 companies in a LodaRAT phishing campaign. Learn how the attack works and what security teams should check.

Read more →

Microsoft Authenticator flaw CVE-2026-80097 scores 8.6 and puts Android work account tokens at risk. Learn which versions are affected and how to stay safe.

Read more →

October is Cybersecurity Awareness Month, and it’s a good time to think about how much the world has changed for chief information security officers (CISOs) in the last 12 months. A year ago, we thought we were already in the thick of AI and starting to understand it. Since then, agents have spread across the…

Read more →

Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. […]

Read more →

Volt Typhoon, a China-government backed hacking group that has infiltrated America’s critical infrastructure networks for years, has consistently built and dismantled ephemeral malicious infrastructure to burrow into hundreds of sensitive systems undetected, Lumen Technologies’ Black Lotus Labs said in a Wednesday report. The covert access operation that researchers call “Silent Train” isn’t a standalone network,…

Read more →

GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack

Read more →

Prosecutors announced charges against six alleged scammers based out of Africa who targeted Americans with fake non-fungible token (NFT) investment scams by posing as women on dating websites, netting hundreds of victims. According to an affidavit for the arrest of of the six people — Chui Kok Wa, Gislen Neukeu, Shamusa Ninsiima, Clement Mugiraneza, Merveille…

Read more →

A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during the COVID-19 pandemic, has been sentenced to 70 months in a US prison. Read more in my article on the Hot for Security blog.

Read more →