The September Microsoft Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June…
Millions of Routers Running Broadcom Wi-Fi Chips Have an Unpatched Flaw That Hands Attackers Root Access Over the Air
A security researcher has demonstrated working exploits against a class of Wi-Fi gateways running Broadcom chips, showing that an attacker within radio…
IT Security News Hourly Summary 2026-10-20 18h : 8 posts
8 posts published in the last hour 15:32AOMEI Backupper servers hijacked for minutes at a time to push backdoor 15:31The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations 15:31AI security hiring focuses on red-teaming, SOC orchestration and…
AOMEI Backupper servers hijacked for minutes at a time to push backdoor
An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security…
The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations
Online platforms rely on digital signals to identify suspicious accounts and activity. Antidetect browsers make those signals harder to trust by allowing…
AI security hiring focuses on red-teaming, SOC orchestration and governance
Roles mitigating AI deepfakes and overseeing post-quantum encryption rollouts are on the horizon, according to a new report.
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched…
DHS bans DeepSeek products across US federal civilian agencies
The U.S. Department of Homeland Security (DHS) is ordering federal civilian agencies to stop using DeepSeek products and remove them from government…
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine…
Head of AI Security Roles Surge in Large Organizations
A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms remains unsettled
IT Security News Hourly Summary 2026-10-20 17h : 23 posts
23 posts published in the last hour 14:33Hackers Use Generative AI to Build Custom Malware and Bypass Traditional Security Detection 14:33CYBER BRIEFING | October 20, 2026 14:33Antidetect Browsers: How AI Is Scaling Online Fraud and Account Takeovers 14:32Incomplete security patches…
Hackers Use Generative AI to Build Custom Malware and Bypass Traditional Security Detection
Hackers are using generative AI to build custom malware, rewrite harmful scripts, and make phishing messages harder to spot. The shift puts pressure on…
CYBER BRIEFING | October 20, 2026
Nikkei leaks 1.83M records, FCA wants AI failures reported, Blackwall hits $2.2B
Antidetect Browsers: How AI Is Scaling Online Fraud and Account Takeovers
Online platforms rely on digital signals to identify suspicious accounts and activity. Antidetect browsers make those signals harder to trust by allowing…
Incomplete security patches show hackers where to look next
Security patches are turning into roadmaps for attackers, with a growing share of fixes later found incomplete or open to bypass. Oren Yomtov, a security…
WP2Shell Attack Lets Hackers Create WordPress Admin Accounts and Install Web Shells Without Login
WP2Shell combines two WordPress Core flaws to move from an unauthenticated request to server-side code execution. It can let an attacker create an…
Best Cybersecurity Thought Leadership Agencies
The best cybersecurity thought leadership agencies help organisations turn expert insight into credible executive content, original research and…
Thousands of Android Phones Ship With Hidden Malware That Disables Google Play Protections
Thousands of Android phones across more than 150 countries have been found running malware planted in their firmware before purchase. The campaign, called…
‘Password1’ and a forgotten test account land Welsh outfits in hot water
ICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children
DHS Orders DeepSeek Removed from Federal IT Systems Over Security Risks
DHS has ordered DeepSeek removed from federal civilian IT systems over security concerns. Learn what the restrictions mean for agencies and technology…
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned
F5 patches three critical NGINX flaws
F5 has issued out-of-band security patches addressing three critical vulnerabilities in NGINX, the widely deployed web server and reverse proxy software.
Hacker gets 8 years for stealing $3.3 million from taxpayers
A Nigerian national was sentenced to eight years in prison for his involvement in a series of spearphishing attacks targeting US tax preparation…
Welsh firms ‘Password1’ and ‘Test 2’ fails led to hackers stealing children’s data
Alex Hickey reports: Two Welsh organisations have been censured by the Information Commissioner’s Office (ICO) after a ransomware attack led to the theft…