IT Security News: Evening roundup, 2026-10-28 Summary The evening was dominated by supply chain and infrastructure exposure. AWS published guidance on the Brotli decoder flaw (CVE-2026-111497) that has rippled across runtimes, a critical EDK2 firmware bug put most servers at…
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains people’s contact…
IT Security News Hourly Summary 2026-10-29 05h : 6 posts
6 posts published in the last hour 03:33Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks 03:33WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability 03:33Hackers Leak Records of 41,000 DHS Personnel,…
Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks
Fortinet’s FortiAIGate is bringing AI security controls to enterprise workloads on Oracle Cloud Infrastructure (OCI), helping businesses inspect prompts,…
WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability
WordPress released version 7.1.4 on October 28, 2026, fixing 22 security flaws, including an unauthenticated remote code execution vulnerability in its…
Hackers Leak Records of 41,000 DHS Personnel, Exposing Undercover ICE Agents
A leak of records covering more than 41,000 Department of Homeland Security employees and contractors has exposed contact details, work assignments, and…
ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156,…
WatchGuard Discloses 7 Critical Firewall Flaws Allowing Remote Code Execution and Root-Level Attacks
WatchGuard disclosed seven critical Fireware OS vulnerabilities in an October 27, 2026 advisory, affecting Firebox firewalls and potentially enabling…
Srsly Risky Biz: Chinese AI can learn to love the West
Tom Uren and Amberleigh Jack talk about new research that shows that Chinese open-weight AI models can be reeducated to remove pro-CCP bias. Good news for…
IT Security News Hourly Summary 2026-10-29 03h : 4 posts
4 posts published in the last hour 01:31Attackers compromised 42 GitHub repositories by using files too large to be searched 01:03Officials seize domain of top bulletproof hosting provider Virtualine 01:03ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)…
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload…
Officials seize domain of top bulletproof hosting provider Virtualine
The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all…
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154,…
IT Security News Hourly Summary 2026-10-29 02h : 5 posts
5 posts published in the last hour 00:32Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook 00:32Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice 00:03Japan’s GMO urges customers to shut down PCs amid ransomware…
Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook
Understand APNIC IPv4 transfer rules, buyer requirements, fees and approval steps, with helpful checks to assess address blocks before completing a…
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US…
Japan’s GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company’s…
Privacy Commissioner of Canada to investigate data breach involving Crime Stoppers
October 27, 2026 – Gatineau, Quebec Privacy Commissioner of Canada Philippe Dufresne has opened an investigation related to a cybersecurity incident…
IT Security News Hourly Summary 2026-10-29 01h : 9 posts
9 posts published in the last hour 23:32Introducing Route 53 Resolved IP Validation for AWS Network Firewall 23:32Upwind raises $400M after walking away from Datadog acquisition offer 23:06IT Security News Roundup: 2026-10-28 Evening 23:04Microsoft Rushes out Fixes for .NET 23:04OpenAI’s…
Introducing Route 53 Resolved IP Validation for AWS Network Firewall
Your workloads reach most destinations by domain name, but a firewall can only act on what it sees in the traffic. For HTTP and HTTPS, AWS Network…
Upwind raises $400M after walking away from Datadog acquisition offer
The cloud security startup raised a Series C at a $3.8B valuation, instead of selling itself for the same price.
Microsoft Rushes out Fixes for .NET
Brotli Emergency Patches, PHP-to-Shell Exploited, and Australia Disrupts 180K Amadey Infections | Cybersecurity Today On Cybersecurity Today (Oct. 28,…
OpenAI’s GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. […]
Next-gen privacy protocols: WireGuard vs OpenVPN vs Shadowsocks
Compare WireGuard, OpenVPN and Shadowsocks for speed, privacy, enterprise access and censorship resistance, including VPN tunnels differ from encrypted…
6 Best Secure Cloud Storage Solutions in 2026
The best secure cloud storage services include Sync.com, IDrive, OneDrive, pCloud, NordLocker, and Internxt for protecting sensitive files and privacy.