IT Security News: Overnight roundup, 2026-10-29 Summary The most important story in this window was the PHP2Shell campaign, in which attackers chained web-layer flaws with a Linux kernel exploit to root 25 servers, including government-affiliated systems. It sits alongside follow-up…
HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.
Social media addiction affects older adults too
Social media addiction is often discussed as a problem affecting teenagers. Yet older adults can also spend more time on social platforms than they…
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization’s…
CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom…
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data
11 User & Entity Behavior Analytics (UEBA) Tools: The 2026 Buyer’s Verdict Guide
UEBA earns its keep on attacks that look like logins stolen credentials used plausibly, insiders drifting toward exits and fails on unexplainable scores…
Meta Postpones New Commercial Terms After ‘Theft’ Complaints
Meta indefinitely suspends new commercial terms after publishers, digital advertisers complained over use of content for AI training
12 Cyber Threat Intelligence (CTI) Feeds & Services: The 2026 Buyer’s Verdict Guide
CTI services answer different sentences who targets us, what’s leaked about us, which alerts are noise, whose infrastructure is that and no provider owns…
Canada’s Terrestar Joins Shared Satellite Venture
Montreal-based Terrestar to work with Equatys venture founded by Viasat and Space42 to build shared direct-to-device satellite infrastructure
Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses
An alleged leak from cryptocurrency swap service Wagyu.xyz contains 4,580 completed cross-chain swaps linking incoming transaction hashes, Monero…
IT Security News Hourly Summary 2026-10-29 10h : 8 posts
8 posts published in the last hour 08:32Cyber Vulnerabilities Besiege Italy, Absent Clear Cause 08:32Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia 08:32Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day 08:31UK Government…
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can’t quite explain why cyber threats look so different in Italy compared to everywhere else.
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Kaspersky researchers analyze a complex targeted attack employing NetamLoader, a sophisticated malicious framework and targeting a customized government…
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.
UK Government ‘Data Centre Covenant’ To Prioritise Critical Sites
Government’s proposed data centre deal requires investments in local communities, prioritises facilities for military, NHS
Google Misses Expectations, Stoking Scrutiny Of AI Spending
Google shares slump after it misses analysts’ expectations for most core businesses, in spite of strong cloud growth
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google’s…
Infineon Plans €1.1bn Upgrade For Gallium-Nitride Chip Plant
EU Chips Act to partially fund eight-year investment to upgrade Villach, Austria factory that produces energy-efficient power chips
IT Security News Hourly Summary 2026-10-29 09h : 19 posts
19 posts published in the last hour 07:33OpenAI election war room, FEC filing disruption, Gemini Carbon debut 07:33Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers 07:33Apple Debuts First-Ever Touchscreen Mac 07:32Authenticator token theft,…
OpenAI election war room, FEC filing disruption, Gemini Carbon debut
OpenAI opens an election war room https://www.politico.com/news/2026/10/28/openai-election-war-room-interference-01137690 Hack attempt disrupts FEC…
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that…
Apple Debuts First-Ever Touchscreen Mac
Apple brings out touchscreen MacBook Pro for first time, after resisting the trend for decades, on heels of M6 Macs, iPhone Duo
Authenticator token theft, Tailworm SSH flaws, UK police supplier breaches
Authenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk…
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it…