IT Security News: Overnight roundup, 2026-10-27 Summary The overnight window was dominated by the PHP2Shell fallout: two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, drew explainers and were added to CISA's Known Exploited Vulnerabilities catalog, which signals active exploitation and urgent…
CVE-2026-87911
Read this article
Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords
Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without…
Several AI security market categories are headed for bigger platforms
In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the…
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems…
IT Security News Hourly Summary 2026-10-27 08h : 12 posts
12 posts published in the last hour 06:44Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking 06:44Hackers Use Instagram Ads to Deploy Coruna and DarkSword Spyware on iPhones 06:44Microsoft Authenticator vulnerability let rogue Android apps steal work…
Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking
A cybersecurity researcher says he gained root access to a 2025 Samsung Smart TV and found software built to track far more than the picture on the…
Hackers Use Instagram Ads to Deploy Coruna and DarkSword Spyware on iPhones
Cybercriminal groups are using malicious Instagram advertisements, abandoned analytics tags, and compromised websites to deliver Coruna and DarkSword…
Microsoft Authenticator vulnerability let rogue Android apps steal work account access
If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work…
Hackers Use AI Agents to Target Over 2,250 Microsoft 365 Tenants Through ConnectWise
Hackers used AI agents and stolen ConnectWise application credentials to attempt access to more than 2,250 Microsoft 365 tenants, according to Microsoft’s…
LLM agent security needs more than guardrails
Madhu Shashanka, Chief Scientist at Concentric AI, explains why securing LLM tools and agents depends more on your data than on the model. Controls on…
OpenAI Codex Breaks USB Encryption in Minutes, Exposing Hardcoded Keys and Security Flaws
OpenAI Codex helped researcher Xusheng Li uncover flaws in four USB protection products, including hardcoded encryption keys and hidden accounts that…
Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Driven Microsoft 365 Attacks
Hackers abused compromised ConnectWise Cloud Backup application credentials to access Microsoft 365 environments, escalate privileges, and plant…
Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
Five suspects linked to the organisation and recruitment of serious violence have been arrested in Spain, Morocco, and France, in the latest results of…
71% of vulnerability exploitation starts within a week of disclosure
Attackers are exploiting newly disclosed security flaws within days, leaving organizations little time to respond, according to Rapid7’s Q3 2026 Quarterly…
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding…
Amutable Foundations is a Linux system with no SSH and no package manager
Amutable opened signups for the private preview of Amutable Foundations, a Linux system in which each machine sends a signed report of the software and…
IT Security News Hourly Summary 2026-10-27 07h : 12 posts
12 posts published in the last hour 05:43Claude Code Reportedly Finds 214,856 Deleted Photos and Videos Hidden on Android Phone 05:42CrowdStrike Uncovers New Agentic AI Campaigns 05:42CVE-2026-84942 – Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards 05:42Cybersecurity…
Claude Code Reportedly Finds 214,856 Deleted Photos and Videos Hidden on Android Phone
Anthropic’s Claude Code reportedly found 214,856 files linked to deleted photos and videos on a Google Pixel, raising privacy concerns about Android…
CrowdStrike Uncovers New Agentic AI Campaigns
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Uncovers New Agentic AI Campaigns
CVE-2026-84942 – Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
Read this article
Cybersecurity jobs available right now: October 27, 2026
Cybersecurity Expert / Penetration Tester Barrion | Sweden | On-site – View job details As a Cybersecurity Expert / Penetration Tester, you will test web…
Hackers Use Malicious Instagram Ads to Infect iPhones With Spyware Without a Click
Hackers are using malicious Instagram advertisements to infect vulnerable iPhones with spyware while users scroll through their feeds. A documented attack…
New Aokigahara Malware Targets ChatGPT, Claude, Codex, and Cursor Login Credentials
A newly observed Windows infostealer called Aokigahara is targeting login credentials and session data associated with ChatGPT Desktop, Claude, Codex, and…
Hackers Sell ICMacOS Remote Access Trojan for $699 a Week to Target Mac Users
Cybercriminals are selling a Mac malware kit that can do far more than steal passwords. The tool, called ICMacOS or Icarus macOS, is offered for $699 a…