BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late…
Fake WatchGuard VPN site steals credentials, then serves the genuine signed client
Huntress researchers have uncovered an SEO-poisoning campaign that harvests SSL VPN credentials through a lookalike WatchGuard download page, then hands…
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands…
Vega Appoints Category Builder Scott Simkin as Chief Marketing Officer to Define the Post-SIEM Era
Vega, the pioneer of Agentic Cyber Defense, today announced the appointment of Scott Simkin as Chief Marketing Officer. Simkin joins as Vega II unleashes…
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend…
Nearly Half of Organisations Report Unauthorised AI Agent Actions, Research Finds
Nearly half (49.8%) of organisations have confirmed or suspected that an AI agent took an unintended, unexpected or unauthorised action in the past year,…
IT Security News Hourly Summary 2026-10-16 09h : 9 posts
9 posts published in the last hour 06:31PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions 06:31Certes wins Frost & Sullivan PQC recognition for decoupling encryption from infrastructure 06:31The Blind Spot in Orbit: Why Space Could Be…
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident…
Certes wins Frost & Sullivan PQC recognition for decoupling encryption from infrastructure
Certes has received Frost & Sullivan’s 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC), following an independent…
The Blind Spot in Orbit: Why Space Could Be the Next Infrastructure Crisis
Are organisations becoming so reliant on third party space assets that they would face severe disruption if the assets were impacted by a cyber attack?…
Why Active Directory weaknesses stay open for years in teams with one or two admins
David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory…
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
The Aoki infostealer, also known as Aokigahara, has expanded its collection capabilities to steal credentials and session files from AI coding assistants,…
The cyber talent shortage? Job postings just hit a four-year low
US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that…
Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware
A new version of GhostBat Android malware is targeting users of 60 banking, UPI, wallet, fintech and payment apps in India. The malware can abuse…
New Proxyjacking Campaign Exploits Network Device Flaws to Build Stealthy Proxy Infrastructure
A newly disclosed proxyjacking campaign has compromised at least 143 devices across 34 countries, exploiting vulnerabilities in network appliances and…
IT Security News Hourly Summary 2026-10-16 08h : 9 posts
9 posts published in the last hour 05:31Stolen AI API keys are paying for hackers’ autonomous scans 05:31Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks 05:02Linus Torvalds Reveals Claude Code Wrote Linux Kernel Patches and Test Programs 05:02DDoS…
Stolen AI API keys are paying for hackers’ autonomous scans
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s…
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Vendor promises fix for separate privilege-escalation flaw in the coming weeks
Linus Torvalds Reveals Claude Code Wrote Linux Kernel Patches and Test Programs
Linus Torvalds has disclosed that Claude Code helped write Linux kernel patches, test programs, review material, and the first draft of a technical…
DDoS attacks can knock services offline before links reach capacity
More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to…
Critical Linux Kernel Flaw Lets Attackers Escape Virtual Machines and Take Control of Hosts
A critical flaw in the Linux kernel may allow an attacker-controlled virtual machine (VM) to breach its isolation boundary and impact the host system.…
Critical Adobe Acrobat Flaw Lets Malicious PDFs Trigger One-Click Memory Corruption
Adobe has fixed a flaw in Acrobat and Acrobat Reader that lets a malicious PDF corrupt memory when a user opens it. Tracked as CVE-2026-81983, the…
Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access
A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support vulnerability as a zero-day in late August 2026 weeks before…
PoC Exploit Released for Critical GitLab RCE Vulnerability (CVE-2026-97229)
A public proof-of-concept (PoC) for CVE-2026-97229 published by researcher Jonah Burgess shows how a flaw in GitLab’s CI/CD regular-expression compiler…