Citizen Lab has confirmed the first public case of zero-click mercenary spyware delivered through targeted online ads. It calls the technique “AdFection”.…
Hackers Exploit Fortinet Vulnerabilities to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Attackers compromised a telecommunications managed service provider by exploiting vulnerabilities in Fortinet’s centralized management and firewall…
Spyware vendors found a way to make targeted ads even worse
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google’s seal of approval
Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft
Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and…
Passkey Authentications Double but Adoption Remains Slow
Dashlane data finds that passkey adoption is growing but not quickly enough
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
What building an Android weather app taught me about designing for reliability
I spent 13 years building Android apps, and for most of them, the backend was someone else’s problem. Building Weather Pal, my own forecast app, broke…
CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials
CISA urged administrators to patch Ivanti Connect Secure appliances after attackers exploited CVE-2026-104935, a zero-day flaw that allows remote…
CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS
It’s time to rewrite all that old code
The first substantial software project I ever undertook (at least it seemed substantial at the time) was porting the famous text-based Star Trek game from…
Firefox Enterprise Adds DLP and AI Controls to Block Sensitive Data Leaks
Mozilla released Firefox Enterprise 158.0 on October 13, 2026, introducing its first dedicated enterprise browser with built-in data loss prevention and…
The value of software is approaching $0
Imagine a vendor comes to you and explains how they can dramatically de-risk your infrastructure. They have a new software product or SaaS that detects…
Microsoft Fixes Windows 11 Update Issue that Causes Black Screen Errors or Windows Explorer crash
Microsoft fixed a Windows 11 update issue that could leave users staring at a black screen after signing in or cause Windows Explorer to crash. The…
IT Security News Hourly Summary 2026-10-15 17h : 38 posts
38 posts published in the last hour 14:35Update Chrome: Google fixes 37 security flaws, including seven critical bugs 14:35Friday Squid Blogging: I Caught a Squid 14:35Russian Influence Operation Widely Targets Latin America 14:34Microsoft Breaks Patch Tuesday Record Again with 1400+…
Update Chrome: Google fixes 37 security flaws, including seven critical bugs
Some flaws could let attackers run malicious code on your device through a crafted webpage.
Friday Squid Blogging: I Caught a Squid
On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and…
Russian Influence Operation Widely Targets Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador,…
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
Microsoft issued its largest ever round of security updates in the October Patch Tuesday
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux’s vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one…
UK Legal Aid Agency Hack Scope Widens After Forensic Review
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.
What a Sentence Forgets: Preserving Context in Document Ingestion
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: What a Sentence Forgets: Preserving Context in Document Ingestion
OpenAI engineer charged after boardroom bug found wrapped in toilet paper
FBI alleges covert recorder was plugged into a TV, with a second device later discovered in the employee’s bag
6 Best Small Business Endpoint Security Solutions for 2026
The best endpoint security solutions for small businesses include Bitdefender, ESET, Sophos, Avast, ThreatDown, and Acronis for protecting business…
Cyber Briefing: 2026.10.15
Attackers are abusing trusted platforms and AI to evade detection, while a major government data breach and an alleged corporate espionage case show that…