IT Security News: Evening roundup, 2026-10-21 Summary The cybersecurity landscape over this period is heavily defined by the rapid emergence and weaponization of agentic AI alongside widespread foundational software vulnerabilities. Organizations are struggling to govern autonomous AI workflows while threat…
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix…
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.
Millions of Student Records Exposed After a Single Login Is Compromised
An educational assessment management company, Educational Testing Service (ETS), has disclosed personal information about millions of current and former…
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot
Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of…
Hackers Steal 1.8M Records From Nikkei
Japanese media giant Nikkei has disclosed a significant data breach affecting 1.8 million customer records, according to a SecurityWeek report.
Two critical PHP flaws put the web on alert as emergency patches arrive
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the…
Chrome puts insecure sites behind a permission prompt
Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by…
Google may add your number to all your accounts: How to stop it
Android users report that Google automatically added their phone number to accounts they wanted to keep separate. Here’s how to check yours.
UK FCA mandates AI failure reporting
Britain’s Financial Conduct Authority has clarified that existing incident reporting requirements now explicitly cover significant failures and…
IT Security News Hourly Summary 2026-10-22 01h : 18 posts
18 posts published in the last hour 22:32Whitehall shuts the front door on digital ID but leaves the back open 22:32INC/Gentlemen Ransomware AI Infrastructure Exposed 22:32White House Begins 120-Day AI Safety Review Amid Growing Security Concerns 22:32Microsoft pins ConnectWise supply-chain…
Whitehall shuts the front door on digital ID but leaves the back open
Ministers may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very much alive
INC/Gentlemen Ransomware AI Infrastructure Exposed
SOCRadar researchers uncovered a sophisticated ransomware operation in late September 2026 after discovering an exposed command-and-control server that…
White House Begins 120-Day AI Safety Review Amid Growing Security Concerns
The White House AI task force has begun a 120-day review of cybersecurity, biosecurity and oversight, with potential implications for businesses and…
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,”…
CVE-2026-109618 and CVE-2026-109619: PHP Vulnerable to Unauthenticated RCE Attacks
IntroductionOn October 21, 2026, two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively referred to…
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
Microsoft Adds Dynamic Permissions for AI Agent Security
Microsoft has announced new security controls designed to manage AI agents as internal users, introducing dynamic permissions that adjust based on task…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
Ahold Delhaize Cyberattack Disrupts Online Grocery Services in US, Europe
Ahold Delhaize took IT systems offline after a cyberattack disrupted grocery services in the US and Europe, highlighting business continuity challenges.
TiDB Breach Exposes Flawed Cloud Security Assumptions
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
Japan’s Onamae Desktop Cloud hacked, up to 27,000 servers affected
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739…
From Future Warning to Current Reality: The Acceleration of Exploits Following Claude Mythos
From Future Warning to Current Reality: The Acceleration of Exploits Following Claude Mythos andrew.gertz@t… Tue, 10/20/2026 – 12:25 When we published our…
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine
A Russian satellite made a close approach to a commercial radar satellite linked to Ukraine, raising concerns about surveillance and security in space. A…
Hackers Exploit Open Banking to Test Stolen Bank Logins for Free
Hackers used open-banking services to test stolen bank logins for free. Group-IB uncovered related phishing activity and verification costs for platforms.