IT Security News: Overnight roundup, 2026-10-22 Summary This period's security developments were dominated by the rapid escalation of emergency patching for foundational web infrastructure alongside a surge in AI-driven attack vectors and governance challenges. Critical vulnerabilities in widespread technology stacks—including…
Delinea gives AI assistants read-only access to governance data
Delinea has announced Delinea Fastpath MCP Server, a new capability that connects access governance data to the AI assistants teams already use. Using the…
ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: yellow Read the original article: ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144,…
PHP emergency patches, compromised TLS certificates, Signal hot mic bug
PHP rushes out emergency fixes for PHP2Shell https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/…
Pryx – Four Dead in Cairo, a Cybercrime Past and…
Simone Kraus writes: On October 9, 2026, Reuters introduced the world to Adem El Adeb, a 19-year-old so called former cybercriminal known as Pryx, who…
EU Cyber Resilience Act (CRA) – Overview (Updated Oct 2026)
What is the Cyber Resilience Act – CRA The Cyber Resilience Act is the first European regulation to set a mandatory minimum level of cyber security for…
U.S. bans DeepSeek from government agency systems amid AI rift with China
Jenny Lee reports: The Trump administration banned Chinese AI startup DeepSeek from civilian U.S. government agencies, citing security concerns. The…
Hackers Are Breaking Into FortiGate, FortiWeb and Palo Alto GlobalProtect Systems to Steal Passwords
Internet-facing firewalls and VPN systems are under attack in a campaign that aims to steal credentials and gain lasting access to corporate networks. The…
Suspected cyber incident blocks Parkview Health patient portal in Indiana and Ohio
DysruptionHub reports: The health system disabled its network after suspicious activity, leaving MyChart and doctor searches unavailable and directing…
China-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach
China-state-aligned hackers used ARTEX, an AI-powered penetration-testing framework, to attempt access to more than 2,250 Microsoft 365 tenants following…
Attorney General Tong Announces $625,000 Settlement with Frontier Over Data Breach
Connecticut Attorney General William Tong has been active in litigating data breaches. The press release below relates to a 2024 breach of Frontier…
Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it’s unclear how the keys…
Cybercriminals hack Staples to steal millions in gift cards
Staples Gift Card Hack, Nikkei’s Third Breach, Burger King Japan Leak, Broadcom Wi‑Fi “Foreverday,” and Ledger Spy Implants Host David Shipley covers a…
Just Eat Pauses AI Rollout Amid Bizarre Food Images
Delivery company apologises for strange and incorrect images after offering AI-generated placeholders for food items
Multi-Cloud Blind Spots Are Leaving Security Teams Exposed
Discover how multi-cloud environments create security blind spots, inconsistent access controls, risks and how CCSP strategies help strengthen cloud…
PSA: Upcoming Critical PHP Security Release
PHP has released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities announced in this advance notice. WordPress updates won’t apply…
Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers
Robert Wayne Boling Jr. was the mastermind of an identity theft conspiracy that victimized thousands of military members and veterans. He faces up to 40…
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations
SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA,…
Certification authority eMudhra defends its laughably weak private keys
Says it passed audits and made just a minor mystery error
PHP warns admins of two critical flaws, emergency patches coming tomorrow
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information…
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Massive clean-up job under way because this mess makes it possible to impersonate any website or service
Mozilla, Google, Apple block compromised eMudhra CA certificates
Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone…
Auto tech startup claims it traced hack attempt back to rival’s IP address
IQ.Lvbs implies that rival Comma.ai isn’t playing fair
IT Security News Hourly Summary 2026-10-22 09h : 22 posts
22 posts published in the last hour 06:34Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme 06:33Live Video Moderation Challenges Traditional Content Safety Systems 06:33Running a Self-Hosted WAF in Production: Practical Lessons From SafeLine 06:33ECHOTRIBBLE: The…
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
Chukwuemeka Victor Amachukwu hacked tax preparation businesses, filed false tax returns and enticed victims to send him money for investment schemes.