IT Security News: Overnight roundup, 2026-10-28 Summary Active exploitation of critical PHP flaws dominated the overnight window, with a suspected North Korean campaign scanning 216 hosts, a further PHP RCE advisory, and Microsoft pushing out-of-band .NET fixes for a Brotli…
SK Hynix’s Solidigm Ties $45bn US Plant to China Upgrades
Solidigm reportedly considers major flash memory plant in US, but only if administration allows it to update factory in Dalian
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that…
Authenticator token theft, Tailworm SSH flaws, UK police supplier breaches
Authenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk…
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it…
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a…
Bellini Capital CISO on AI security governance and the limits of patching faster
In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still…
Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control
Executives need visibility into workplace AI, clear data controls and limits on agent access before approving wider adoption. Here’s what businesses need…
Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication
A critical flaw in the GoAhead embedded web server lets revoked client certificates pass authentication checks, potentially restoring access to identities…
Tiny magnetic vortices could help computers work more like your brain
Scientists have filmed tiny magnetic vortices called skyrmions melting out of an organized lattice for the first time, revealing new ways to manipulate…
Hackers Abuse Indian Government Domains to Push Illegal Gambling Websites Through Google Search
Hackers have abused Indian government and educational domains to promote illegal gambling websites through Google Search, using unauthorized DNS changes…
IT Security News Hourly Summary 2026-10-28 08h : 10 posts
10 posts published in the last hour 06:44Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature 06:43Bias in Qwen3-Coder Model 06:43Britain bets big on AI to defend against the threats AI is helping create 06:43AbuseBox: Open-source monitor for blacklists, DNS,…
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
Interpol’s annual Operation Serengeti, now on its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in…
Bias in Qwen3-Coder Model
Interesting research : TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for,…
Britain bets big on AI to defend against the threats AI is helping create
Whitehall wants agents guarding critical infrastructure as part of a wider £600M spending spree
AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records
AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS,…
Malicious npm Campaign Hijacks 42 GitHub Repositories to Steal Credentials and Spread Malware
Research has identified 42 weaponized GitHub repositories belonging to 11 legitimate owners in the testmetest npm campaign, exposing an operation that…
How to Find and Exploit JWT Token Vulnerabilities
By HOC Team | Updated: October 2026 | Read time: ~18 min JSON Web Tokens (JWTs) have become…
Hackers Abuse Online Ads to Track Starlink Users and Spy on Individuals Across 49 Countries
Advertising infrastructure is increasingly being repurposed as a surveillance channel that can profile internet users and track their movements across…
NIST starts the countdown to retire quantum-vulnerable encryption
The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for…
CISA Offers Free Security Tools to Protect Microsoft 365 and Google Workspace From Cyber Threats
The Cybersecurity and Infrastructure Security Agency (CISA) offers two free assessment tools, ScubaGear and ScubaGoggles, to help organizations identify…
IT Security News Hourly Summary 2026-10-28 07h : 8 posts
8 posts published in the last hour 05:44uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts 05:44Breach victims discover their data was held by companies they’ve never heard of 05:06IT Security News Roundup: 2026-10-28 Overnight 05:04Cisco Talos…
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps,…
Breach victims discover their data was held by companies they’ve never heard of
Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026.…
Cisco Talos Uncovers 1,400 Scam Emails Sent Through Staples and Dell Order Notification Systems
Cisco Talos identified roughly 1,400 scam emails delivered through legitimate Staples and Dell order notification systems, exposing how attackers can…