GitHub has announced that it’s introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time.…
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s…
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall…
Have an older iPhone or iPad? Apple has a security update for you
Apple has backported a fix for a CoreGraphics flaw reportedly exploited in targeted attacks to the iPhone XS, XS Max and XR, and seventh-generation iPad.
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project’s own GitLab server a week after GitLab released a fix, Alpine…
CISA Warns of VMWare ESX Logging Vulnerability Exploited in Attacks
The Cybersecurity and Infrastructure Security Agency has added a VMware ESX logging flaw to its Known Exploited Vulnerabilities catalog following evidence…
Microsoft Edge Security Flaws Allow Attackers to Execute Code Without Memory Corruption
Researcher Orange Tsai from DEVCORE has published a complete exploit chain for Microsoft Edge that successfully escapes the browser’s sandbox and executes…
IT Security News Roundup: 2026-10-29 Morning
IT Security News: Morning roundup, 2026-10-29 Summary The morning was dominated by edge-device and browser exploitation: Cisco patched a second actively exploited firewall VPN zero-day since August, a researcher showed a zero-click Microsoft Edge chain, and Volt Typhoon was tied…
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Illicit software on the computers of some of the world’s best online poker players allowed the accused cheater to see what cards were in the victims’…
Three Japan-Focused Cyberattacks Show How Hackers Use AI
Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026,…
PHP2Shell Was Exploited Before the Patch
PHP2Shell was exploited four days before its patch. Learn why exploitation is moving ahead of disclosure and how security teams can respond.
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.
Hackers Infect 17,960 Android Phones With Banking Trojans, Steal 7.6 Million SMS Messages
Hackers have compromised at least 17,960 Android devices and intercepted more than 7.6 million SMS messages in a banking malware campaign targeting India.…
Israel Ad-Tech Company ‘Targeted Starlink Users For Surveillance’
Researchers reportedly found Israeli ad-tech company abused ad-bidding process in effort to identify, track Starlink users
Top 10 Best SOAR Tools in 2026 [Ranked & Scored]
SOAR grew up twice: first from scripts to playbooks, then in the current wave from playbooks to AI agents that draft, decide, and act under human…
Microsoft to Disable SMS and Voice Authentication in Entra ID Starting February 2027
Microsoft will begin retiring Microsoft-provided SMS and voice authentication in Microsoft Entra ID on February 1, 2027, requiring affected organizations…
Top 10 Best SIEM Tools in 2026 [Ranked & Scored]
The SIEM is the SOC’s memory and its biggest line item, and 2026’s rankings reflect a market reshaped by consolidation: Cisco absorbed Splunk, Exabeam and…
FCC Approves Amazon Leo’s $11.5bn Globalstar Buy
US communications regulator gives green light for Amazon’s bid to add GlobalStar’s two dozen satellites to its constellation
Top 10 Best Threat Intelligence Platforms (TIP) in 2026 [Ranked & Scored]
Raw intelligence is cheap; operationalized intelligence is rare. A threat intelligence platform earns its keep by fusing feeds, deduplicating indicators,…
IT Security News Hourly Summary 2026-10-29 12h : 22 posts
22 posts published in the last hour 10:35Microsoft Urges Entra ID Admins to Migrate from SMS and Voice Authentication to Passkeys 10:345th EMPACT Hackathon leads to the detection of 51 potential victims 10:34Hacktivists leak 41,000 DHS staff records, revealing undercover…
Microsoft Urges Entra ID Admins to Migrate from SMS and Voice Authentication to Passkeys
Microsoft urged Entra ID administrators to migrate from SMS and voice authentication in Entra ID to passkeys before retirement begins on February 1, 2027,…
5th EMPACT Hackathon leads to the detection of 51 potential victims
An international operation involving 40 experts and investigators from 20 countries has identified 51 potential victims of human trafficking, as well as…
Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents
Names, offices, contact details and assignments of more than 41,000 U.S. Department of Homeland Security (DHS) employees have been leaked by a hacktivist…
Simplifying .NET toolchain installs with dotnetup
If you’ve experimented with Rust , you already know how simple it is to get a basic toolchain in place, with the simple rustup command-line tool. The same…