Zeabur, a cloud development platform, has announced plans to shut down their services following a second major security breach in less than two months. A…
Disgraced Indian cert issuer leaves the cert issuing business
We didn’t want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem…
Paying in ADA: Cardano’s vision for the future of payroll
Cardano payroll could support ADA salaries and automated payments, but employers must address price volatility, tax obligations, wallet security and…
Threat Brief: Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.
High Court Dismisses Cabbies’ £250m Case Against Uber
Cabbies claimed that Uber gave false information to regulators, used software to conceal its practices, but judge says claim filed too late
Browsers Revoke Trust in Eight eMudhra Certificates After Private Key Compromise
Major browser vendors and certificate trust stores have blacklisted eight intermediate certificates issued by Indian certificate authority eMudhra…
Signal bug could keep your mic – and camera – on after hangup
Careful what you say after goodbye, or better yet, update your messaging app
The Current Landscape of OAuth Attacks
Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments.
SBI Probes Suspected Exposure of 3,897 Customer Records
State Bank of India (SBI) is investigating a suspected data exposure after identifying personal information in 3,897 customer records reportedly found on…
Your AI agent fixed the bug, but what else did it change?
Today we’re publishing patching-bugs and regression-hunt , two plugins that let engineers delegate patch development and regression checks to agents. Our…
US Homeland Security Orders Federal Civilian Agencies to Stop Using and Remove DeepSeek AI Products
The US Department of Homeland Security issued an order on Monday directing federal civilian agencies to stop using technology products from Chinese AI lab…
Using model routing to lower inference costs
Running frontier models for coding and other purposes can be very expensive, but also, sometimes, very effective. It’s tempting to use smaller or older…
DeepSeek deep-sixed at all US federal civilian agencies
Order disallowing use of Chinese AI service is unhelpfully vague and broad
Critical PHP vulnerabilities expose most websites to potential compromise
Government agencies urged organizations to take their sites offline until they could be fixed.
Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from…
Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts
Major U.S. banks are detecting third-party AI agents inside customer accounts, raising concerns that automated tools could act beyond the instructions…
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Microsoft points the blame for ConnectWise’s breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.
Optiv Launches CyberBOT Cybersecurity Awareness Training Program
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more…
Assurance Retraite – 70,372 breached accounts
In September 2024, the French national pension fund Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries . The…
Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
Coordinated by the European Commission in cooperation with Europol, the analysis draws on stakeholder consultations, dedicated meetings, surveys and…
eMudhra signs off certificate biz after embarrassing key exposure
We didn’t want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4
IT Security News Hourly Summary 2026-10-22 19h : 20 posts
20 posts published in the last hour 16:33Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware 16:32Google Chrome Adds AI Scam Protection for More Than 1 Billion Users 16:32ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue,…