Security researchers have discovered a commercial Android spyware toolkit called uCreator that targets users of Telegram and WeChat messaging platforms.
Chinese man extradited for role in $36 million cryptocurrency scam
A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam…
10 Software Security Practices Built for the Next 250 Years
This Cybersecurity Awareness Month’s theme, “Securing the Next 250,” asks us to look beyond vulnerabilities and consider what will make our digital…
CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security
This post has no text preview — click the link below to read the original article. This article has been indexed from CISA News Read the original article: CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure…
PHP RCE Flaw CVE-2026-115560 Mitigation Guidance
PHP maintainers have disclosed CVE-2026-115560, a remote code execution vulnerability that affects a limited subset of PHP installations due to specific…
IT Security News Hourly Summary 2026-10-26 15h : 21 posts
21 posts published in the last hour 13:36AI Halloween videos: Who’s getting your photos? 13:35Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram 13:35Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes 13:35Budgets Are Stalling Firewall Deals.…
AI Halloween videos: Who’s getting your photos?
Before you turn yourself into a zombie, check who’s getting your photos. Some Halloween AI sites offer little information about who’s behind them.
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram
uCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable…
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the…
Budgets Are Stalling Firewall Deals. Here’s How Partners Can Get Them Moving Again
Every partner knows this conversation. A customer agrees their firewalls need replacing. Their teams are using AI tools, they are connecting more systems,…
We shouldn’t be surprised about the PHPocalypse, as the internet is built on sticks and glue
What better way to celebrate Cybersecurity Awareness Month than warning that three-quarters of the web is about to be set on fire?
PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects
Researchers demonstrated PhantomTac, an attack using hidden magnetic tags to trick robotic touch sensors and make robots drop…
Microsoft 365 Token-Replay Campaign Hits 79 Orgs
A sophisticated cyberattack campaign has successfully breached Microsoft 365 email accounts across 79 organizations by capturing and replaying…
New Malware Targets AI Coding Tools to Steal Login Tokens, SSH Keys, and Cloud Credentials
A newly observed infostealer called Aokigahara is targeting AI coding assistants, developer workstations, and cloud credentials, expanding credential…
South Korea Busts AI-Powered Cybercrime Ring
Police in South Korea have dismantled what authorities describe as the country’s first large-scale cybercrime operation powered by generative AI,…
Oracle adds a semantic layer to ground AI agents in the business context
Oracle is expanding its Autonomous AI Lakehouse with a Business Semantic Layer designed to give AI agents a consistent understanding of enterprise data, a…
Kali Linux 2026.3 released with new tools
Offensive Security has released Kali Linux 2026.3, marking the third quarterly update to the popular penetration testing distribution in 2026.
Security pros reckon the biggest AI risk comes with an employee badge
Employees pasting company data into AI tools worry security teams more than AI-powered attacks do. Most-concerning risks of AI agents (Source: O’Reilly)…
PHP2Shell: North Korean campaign targets 216 vulnerable host
Cyfirma researchers have linked a coordinated scanning campaign against 216 vulnerable hosts to a suspected North Korean threat group exploiting two…
Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3
The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts…
Anthropic details Claude Duet security safeguards
Anthropic has released technical documentation describing the security controls built into Claude Duet, its proactive AI agent designed to monitor…
Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw
Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release
Rising Borrowing Costs Shouldn’t Delay Your Security: Meet Firewall-as-a-Subscription
Why more companies are moving from hardware purchases to one predictable subscription. Attacks don’t wait for budget approval. But firewall purchases…
953 Online Stores Infected in Long-Lasting Malware Campaign
Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection.