Polymarket’s international platform temporarily suspended trading after a third-party provider was compromised, leading to reports of unauthorized withdrawals and missing account balances. The Polymarket Traders account later announced that trading had resumed and promised to reimburse affected traders fully. In its public incident statement, the account said it had identified and fixed the issue affecting…

Read more →

Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected in the emergence of this new category. For years, SIEM has dominated as an all-encompassing category. But SIEMs…

Read more →

An Accenture employee reportedly linked a personal Claude Code account to a secure Department of Defense production environment, granting the AI coding agent administrative access and potentially exposing credentials and sensitive network information to an external service. According to WIRED’s investigation, published October 29, the agent operated on the Pentagon network for approximately two months…

Read more →

One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs intended to harvest card numbers, expiry dates and security codes, according Akamai’s Fraud and Abuse Report 2026. A ticket scam used a similar setup. Several websites impersonating official ticketing and hospitality portals…

Read more →

A recently discovered Android vulnerability, referred to as SMS of Death, allows attackers to crash a phone’s telephony process with just one malformed SMS, without any interaction from the victim. Researcher Mark B reports that this flaw can disconnect active calls, including emergency calls, and leads to persistent service disruptions when malicious messages remain in…

Read more →

Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report. The analysis covered approximately 10.4 million protected home routers between January and September. Televisions represented 22.7% of vulnerability observations, followed by smart plugs at 22.4% linked with a known software…

Read more →

For 16 years Apple told us touchscreen laptops were a bad idea. Then, on 29 October 2026, it launched one.

Read more →

Cryptocurrency giant Binance said on Thursday that a “security incident” on its platform has impacted about $6.3 billion worth of assets. The world’s biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on-chain so far.  Tether and Circle said they have frozen more than 1.567 billion USDT and 800 million related…

Read more →

SAP announced the planned deployment of SAP-RPT, a tabular AI foundation model, on HPE Spaceborne Computer-2 aboard the International Space Station ISS, one of the most…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

Binance investigates a $5.8 billion crypto theft, with $3 billion in assets frozen. The exchange says user funds are safe as investigators trace funds.

Read more →

A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow for denial of service (DoS). Cisco Secure Firewall ASA and FTD provide firewall, VPN, and threat defense capabilities for enterprise environments. An attacker could exploit this vulnerability by sending a…

Read more →

A vulnerability has been discovered in GitLab that could allow for remote code execution. GitLab is a DevOps platform that provides source code management, CI/CD pipelines, issue tracking, and collaboration tools in a single application for software development teams. Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code on the…

Read more →

php2shell raised fears of mass exploitation. A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems that share one build, such as network appliances, are the exception: one tuned exploit can reach every device that runs it. Key takeaways The five vulnerable…

Read more →

The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a high severity Linux kernel privilege escalation flaw that attackers are chaining with PHP2Shell bugs in the wild. Identified as CVE-2026-46300, it could allow attackers…

Read more →

When a market faces a talent shortage, companies don’t just have to work harder to find the right person. They need to hire fast, stay flexible, and do it without taking on…

Read more →

New capabilities will alert organizations to identity risks across Active Directory, Entra ID, and Okta, identify Tier 0 exposure, and provide a guided path to remediation

Read more →

Next-generation Maestro Hyperscale Orchestrator 200 MHO 200 quadruples hyperscale capacity with 400GbE ports, so organizations can secure AI traffic without slowing it down

Read more →

New research reveals autonomous AI agents are operating without supervision in 95% of APAC organisations that have deployed them.

Read more →

In a deep dive into the Silent Train attack tactic used by China’s Volt Typhoon cybercrime group, Lumen’s Black Lotus Labs highlighted evidence of efforts to pre-position access within what it described as “strategic communications, critical infrastructure and other ecosystems that become essential during geopolitical tensions or crises.”  The report, released on Wednesday, said that…

Read more →

Awards recognise HID’s leadership in mobile access innovation and sustainable access control modernisation

Read more →

Accomplished Finance Executive Brings Deep Expertise Scaling Businesses, Driving Transformation, and Creating Long-Term Value

Read more →

Oracle and Snowflakehttps://www.snowflake.com/en/ NYSE: SNOW today announced that Snowflake AI Data Cloud will be available as a native, first-party service on Oracle Cloud…

Read more →

New integrations deliver New Relic right to engineers, helping them use coding agents more efficiently and address production issues within their existing workflows Engineers…

Read more →

The concept that hackers may already be inside sensitive systems is a core warning of modern cyber security strategy, heavily underscored by the Australian Signals Directorate ASD.

Read more →

OpenAI says it won’t reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans, as well as Business Premium, and it also promised to keep Dots usage independent. […]

Read more →

HP has unveiled a refreshed consumer technology portfolio in Australia, headlined by the OmniBook 5, a 14-inch laptop offered in four colourways.

Read more →

Binance probes suspicious crypto transfers worth up to $5.8 billion as Tether and Circle freeze $1.79 billion in stablecoins linked to the activity. Binance is investigating a potential security incident after billions of dollars in cryptocurrency moved from wallets linked to the exchange on October 29. The transfers raised concerns about a possible hack, while…

Read more →

Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. […]

Read more →

Sponsored by:
Software Analyst Cyber Research

GitHub’s Ed Summers sees extraordinary potential in natural-language development, while research shows why accessible tools must be accompanied by deliberate effort to produce…

Read more →

A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a NetSupport RAT. […]

Read more →

Japan Airlines (JAL) has announced that a data breach at Amadeus’s Passenger Service System exposed the data of about 92,000 customers. […]

Read more →

The Pentagon treats August freezer failures at US military bases as a suspected hack and is working with French investigators after a supermarket attack. The Pentagon is investigating freezer failures that spoiled food at US military bases in August as a suspected cyberattack, according to four officials who spoke to Reuters. One official said US…

Read more →

As GitHub gives customers the option to let Copilot approve code changes, CTO Vladimir Fedorov argues that automation should concentrate human judgment where it matters most.

Read more →

Deeper Network Promo

Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. […]

Read more →

Plus, the DOJ expanded its criminal investigation into the Alaska Senate race, and the U.S. national debt reached 100% of GDP.

Read more →

Traders who lost money on the incident will be ‘made whole,’ the prediction-markets platform said.

Read more →

Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.

Read more →

A company working on behalf of the Department of Homeland Security sought to cut off online access to information on more than 41,000 employees that hacktivists said they obtained from a database breached at DHS. A search tool for the database, named Icepick, went offline for a spell before coming online again Thursday under a…

Read more →

The online behemoth reported higher-than-expected revenue from Amazon Web Services for the third quarter, showing sustained momentum in its cloud computing business.

Read more →

Discontent with the Google parent’s quarterly results highlights tensions of its transition from search engine to AI hyperscaler.

Read more →

A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) is under active exploitation to crash vulnerable devices. The vulnerability, tracked as CVE-2026-76418 and rated 8.6 in severity, is due to logic errors when secondary authentication is configured on a…

Read more →

A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of approximately $23,000 from 27 Solana wallets. […]

Read more →

Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn’t. There’s a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are…

Read more →

42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team counted 484,142 publicly listable cloud storage buckets in October 2026, holding 18.05 billion files. They built the count from the search engines that index open cloud storage and published it as the Ransomnews Cloud Exposure…

Read more →

A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. […]

Read more →

According to Nerdio’s 2026 MSP report, just 12% report measurable AI productivity gains. Victoria Durgin goes Inside the Headlines with the findings and Caylent CEO Valerie Henderson to break down how MSPs can adopt AI and sell it to customers. Read the stories referenced: Only 12% of MSPs Report Measurable AI Gains, Nerdio Finds Caylent…

Read more →

An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.

Read more →

<img src="https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/images/2026/10/threat_source-3.jpg" alt="A quiet week in infosec <. Welcome to this week’s edition of the Threat Source newsletter. “The darkest period of my life, so far, arrived the summer I was pregnant with my eldest son. The future was growing in me with all of its terrifying unpredictability, and I found myself anxious, unable to…

Read more →

Your JBL, Sony, or Bose Bluetooth headphones got a top-to-bottom wireless makeover — not just Auracast.

Read more →

Ambulances were diverted, surgeries cancelled, and medical students sent home from classes after a ransomware group attacked the University of New Mexico’s Health Sciences Center (HSC) this week. Read more in my article on the Fortra blog.

Read more →

President Trump’s order to bar Chinese batteries for energy storage has opened the door to South Korean and Japanese companies.

Read more →

The latest version of Firefox fixes 167 security vulnerabilities, most of which are of high severity, while the newest version of Chrome patches 52 flaws, four of which are critical.

Read more →

💡There is basically One Main Loop in AI, and it applies to everything from building software to managing pretty much anything. ⛰️I call it General Hill-climbing. Here are the main components: 🖼️ Know what you want ✍️ Be able to articulate it 📐 Be able to measure progress 🧪 Do the work / test your…

Read more →

China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that attackers are crashing its firewalls with a newly disclosed vulnerability. VMware ESX zero-day helped Chinese spies cover their tracks…

Read more →

Microsoft’s relationship with OpenAI has become a major financial force in its cloud business, even as the AI developer expands its partnerships with competing infrastructure providers. In its first-quarter fiscal 2027 filing, Microsoft disclosed approximately $10 billion in financial activity associated with OpenAI, according to the figures cited in the filing. The amount highlights the…

Read more →

A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users’ searches through tracking servers to generate advertising revenue from Bing and Yahoo. […]

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Linux Kernel and Broadcom VMWare ESX vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the flaws added to the catalog: CVE-2026-41709 (CVSS score of 7.6) Broadcom VMWare…

Read more →

Sponsored by:
Software Analyst Cyber Research

University of Copenhagen cyberattack exposes data of 525,000 people and access PINs for 20,000, raising concerns about identity theft and campus security.

Read more →

Sony’s So-net breach exposed 2.59 million customer records and 54,401 email passwords. Learn what was leaked and how to protect accounts from follow-on scams.

Read more →

In this article Stages of AI adoption by North Korean threat actors AI use across North Korean threat operations AI-assisted targeting and reconnaissance AI-assisted social engineering and identity deception AI-assisted software and tooling development AI-assisted operational scaling and analysis Mitigation and protection guidance Microsoft Defender detections As Microsoft Threat Intelligence continues to track how threat…

Read more →

A DHS data leak exposed records of more than 41,000 workers, including ICE agents. Learn what was leaked, the suspected access method, and security risks.

Read more →

A flaw in the Linux kernel’s TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel’s own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that its AI model wrote an exploit that uses the flaw to let a remote…

Read more →

A four-question exercise that CISOs can use to create a threat model that promises results, without a big spend.

Read more →

The bank’s message follows a trend among financial institutions that are restricting third-party AI agent access.

Read more →

EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar spoofing.

Read more →

Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver…

Read more →

Malicious iOS scripts have become a leading cause of ad platform suspensions. They accounted for about one in five suspensions in Q3 2026, according to the State of Ad Fraud 2026: ADEX Trust & Safety Report from anti-fraud firm ADEX. The report examines one scheme in detail. It was built on the Coruna exploit kit…

Read more →

Deeper Network Promo

NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries

Read more →

Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found. The researchers have been tracking the campaign, dubbed Yoba, for the past two months. Its operator set up repositories and GitHub.io pages for supposed apps called…

Read more →

Oracle is expanding its Fusion Data Intelligence platform with new AI agents, operational analytics, and application integrations designed to help enterprises turn business data into actionable insights and automated workflows. Announced at Oracle AI World in Las Vegas, the updates extend Oracle’s existing analytics capabilities across finance, supply chain, human resources, and customer operations. The…

Read more →

Even approved AI tools can expose confidential information when employees use them. Fortinet announced the FortiGuard Inline AI Security Service on Oct. 26, bringing cloud-delivered AI protection to existing FortiGate firewalls. Customers can activate the offering without installing separate AI security infrastructure. For partners managing FortiGate environments, the announcement raises practical questions about which customer…

Read more →

Anthropic has acquired a biotech startup with one full-time employee, testing how much drug research a small team can accomplish with Claude. Anthropic disclosed on Oct. 27 that it acquired Mithril Medicine in July, bringing the startup’s research into rare forms of muscular dystrophy into its internal drug development efforts. The announcement included research updates…

Read more →

Microsoft has resolved a known issue that prevents non-admin users from connecting to devices via Remote Desktop when the “Administrator protection” security feature is enabled. […]

Read more →

Westcon-Comstor and Palo Alto Networks are tying additional partner support to business performance as they look to expand cybersecurity sales across Europe, the Middle East, and Africa (EMEA). The companies announced the Partner Growth Circle on October 27, introducing a program that combines joint business planning, technical enablement, demand-generation funding, and quarterly performance reviews for…

Read more →

Broadcom fixes 89 Spring Enterprise flaws and adds patching tools. Learn what security teams should verify about early access, testing, and deployment.

Read more →

Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local file reached the computer behind the browser. Cursor ran attacker code, Copilot showed a fake address, and Codex, VS Code…

Read more →

Key findings Re-sampling URLs from the trace shared by Cohere yields 52 different destination hosts, many of which are local or do not exist, and one is an invalid top-level domain. Swapping the order of two program names in a check for available tools made the model much less likely to continue with a network…

Read more →

Socket’s threat researchers found three malicious Firefox extensions that impersonated the Phantom, Jupiter, and Bitget crypto wallets. Once installed, the malicious extensions stole recovery phrases and private keys, which would provide the attacker with full control of a wallet. A crypto wallet is an app, browser extension, or physical device that lets you manage cryptocurrency…

Read more →

Mistral has released the weights for Large 4, along with some impressive Artificial Analysis scores.

Read more →

AI agents can control authenticated browsers, interact with corporate applications, and access sensitive data while appearing to act as legitimate employees. Keep Aware examines three ways agents operate inside browsers and why traditional security tools may struggle to distinguish their activity from human users. […]

Read more →

CWE added. Informational change only.

Read more →

Phishing remained the leading initial access technique, appearing in slightly over one-third of all Cisco Talos Incident Response (Talos IR) engagements — a decrease from over 50 percent last quarter. In addition to traditional phishing links and attachments, we observed numerous threat actors conducting voice phishing (vishing) in tandem with IT desk impersonation to socially engineer…

Read more →

CREST has published a framework for strengthening cyber resilience across financial services

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild. […]

Read more →

New York, New York, October 29th, 2026, CyberNewswire Now available as a standalone solution, Quantum Trust Hub delivers cryptographic posture management and agility for enterprises to uncover risk exposure, drive remediation at scale, and accelerate quantum readiness.   AppViewX, the leading identity security company built for the AI-powered and post-quantum enterprise, today announced new capabilities for…

Read more →

Pull documents with the _search API, or let a short Python script page through them with helpers.scan. If your pipeline kept the original log line, usually in message or event.original, extract just that field and you get the raw logs back. OpenSearch Dashboards can generate reports from saved searches, but not in a format LogTotal…

Read more →

Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. “It shows significant gains across coding and agentic tasks as well as across key capabilities critical for cybersecurity defense, landing a firm lead in SEC-bench Pro (88.2%) for finding vulnerabilities, ExploitGym (54.8%) for exploitation, and

Read more →

Sponsored by:
Software Analyst Cyber Research

Volt Typhoon, a Chinese state-sponsored APT group that’s focused on cyberespionage and United States’ critical infrastructure, has been using a covert, constantly rotating relay network to hide its most sensitive intrusions, Lumen’s Black Lotus Labs revealed on Wednesday. This network, dubbed Silent Train by the researchers, consists of chains of compromised SOHO and IoT devices…

Read more →

The short answer: run the search, click Export in the job toolbar under the search bar, and choose Raw Events, CSV or JSON. For a few thousand events, that’s all you need. For bigger pulls, skip the browser and use the splunk search CLI or the REST export endpoint. Both stream results instead of making…

Read more →

UAT-11473, an advanced persistent threat actor deploying KeyDrift, a custom malware framework targeting Cisco Catalyst SD-WAN controllers. The framework embeds inside legitimate control-plane processes to maintain access, intercept decrypted communications, and extract sensitive network encryption material. Observed targets span space and satellite services, defense and aerospace technology, and policy research. Talos assesses with high confidence…

Read more →

The cleanest way to get raw events out of QRadar is the Ariel REST API. Run an AQL query that selects UTF8(payload), wait for the search to finish, and pull the results as JSON. You end up with the original log lines exactly as your log sources sent them. The Log Activity tab can export…

Read more →

Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw. “Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS’s Thin Client Framework servlet that chains to remote code execution, this morning, Oct 27,” Defused posted on X, noting that no public report of the…

Read more →

Plus, Cloud growth soars at Microsoft and Google.

Read more →

Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. New research from cybersecurity company Cofense describes a phishing campaign that hooks overeager enterprise users by making them think they are getting an invite to a private invite-only Anthropic preview. In reality, adversarial actors are trying to steal Google…

Read more →

Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. New research from cybersecurity company Cofense describes a phishing campaign that hooks overeager enterprise users by making them think they are getting an invite to a private invite-only Anthropic preview. In reality, adversarial actors are trying to steal Google…

Read more →

New ADEX research shows how AI is making familiar scams cheaper and harder to detect, while fraudsters prepare to target AI shopping assistants.

Read more →

New York, New York, 29th October 2026, CyberNewswire

Read more →