Microsoft Authenticator flaw CVE-2026-80097 scores 8.6 and puts Android work account tokens at risk. Learn which versions are affected and how to stay…
A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat
Rowan Sterling reports: On 20 August 2026 an employee of RIZAP Inc., the Japanese fitness and health-guidance group, was pulling records out of the…
Japan’s GMO Internet Urges Customers to Disconnect PCs
GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack
Florida education department says data breach may affect 4.9 million people
Eric Weiss reports: The Florida Department of Education says a breach of its student financial aid website may have exposed personal information,…
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware
Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
New findings by the Citizen Lab and SHARE Foundation show that a prominent supporter of Serbia’s student movement was targeted with spyware.
Fake crypto app on Apple App Store linked to $23K wallet theft
A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of…
GM settles with 36 states for selling driver data, agrees to $220 million fine and reforms
General Motors agreed to pay $220 million to settle a lawsuit filed by a coalition of 36 state attorneys general who alleged the company unlawfully sold…
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day…
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
University hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases
PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most
As of October 28, 2026, Wordfence knows of no WordPress site compromised through PHP2Shell. Update PHP to a fixed version and restart it, because updating…
‘Aokigahara’ Stealer Targets ‘Developer Keyrings’ & AI Assistants
The malware’s focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer…
Unwrapping Retail Peak Season Cyber Threats
Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust.
EPICS Base
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory,…
Student SSNs and Medicaid IDs Exposed in Frontline School Software Breach
Kalleigh Lane reports: If your school district used Frontline Central or School Health Management, your Social Security number, date of birth, or…
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been…
Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
The timing of these capabilities remains uncertain. However, this should not be the main concern. Adapting systems and coordinating security upgrades will…
Five election scams to watch out for
Election messages can ask you to register, donate, take a survey, or buy merchandise. Here’s how to check before you click or pay.
DHS personnel leak exposes contact details and sensitive job information
David DiMolfetta reports: Searchable records identifying more than 41,000 current and former Department of Homeland Security employees and contractors…
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and…
Australia severs criminal access to 180,000 computers after breaching Amadey malware backend
Lukas Brandt writes: Criminals using the Amadey malware lost control of about 180,000 infected computers after operators from the Australian Signals…
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability,…
IT Security News Hourly Summary 2026-10-29 21h : 34 posts
34 posts published in the last hour 19:36AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder 19:36Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers 19:36484,142 Exposed Cloud Buckets Contain 18…
AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder
A security firm has found that placing a disguised instruction file inside a user’s Downloads folder is enough to manipulate AI coding agents into…