A 16-year-old flaw in Broadcom’s Wi-Fi software can let attackers within wireless range take control of affected routers without knowing the network…
Sweet Security adds one-click protection for vulnerable cloud workloads
Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific…
Anthropic warns of self-replicating AI worms
Security researchers at Anthropic have published findings showing that small, specialized AI models can autonomously replicate across vulnerable Internet…
Hackers Exploit SiteGuard WAF Vulnerability That Could Give Them Full Control of Servers
Hackers are exploiting a command injection flaw in SiteGuard Server Edition, a web application firewall installed directly on protected servers. Tracked…
Axonius AI Workforce pairs asset intelligence with automated action
Axonius has announced Axonius AI Workforce, the latest expansion of Axonius AI. It enables organizations to deploy teams of Virtual Workers that monitor…
NSA, CISA and NIST Release New Security Guidelines to Detect and Shut Down Rogue AI Agents
NSA, CISA, and NIST have released joint security guidelines to help organizations detect, contain, and shut down AI agents that act beyond their approved…
IT Security News Hourly Summary 2026-10-19 16h : 13 posts
13 posts published in the last hour 13:36Fake Calendar Invites Target 40K Firms 13:36Researchers Hack Snowflake PostgreSQL Database to Gain Full Server-Level Code Execution 13:35Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure 13:35Hackers Stole 250K UK Legal Aid…
Fake Calendar Invites Target 40K Firms
Check Point Email Security researchers have identified a large-scale phishing campaign targeting more than 40,000 organizations with fake calendar…
Researchers Hack Snowflake PostgreSQL Database to Gain Full Server-Level Code Execution
A security test of Snowflake-managed PostgreSQL has shown how a database role with limited privileges could be turned into control of the server running…
Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure
Threat actors have been observed delivering cryptocurrency miners and proxy software.
Hackers Stole 250K UK Legal Aid Records, Some Dating Back to 1978
UK officials found 250,000 older legal aid records among data stolen in a 2025 cyberattack, including files dating to 1978 and probation information.
Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt
Discover how detection teams can split EDR-killer attacks into four distinct behavior hunts to catch BYOVD and driverless threats before ransomware fires.
AI Security Tools Reveal Hidden Spending Opportunities
Organizations implementing AI security controls are discovering a valuable secondary benefit: clear visibility into previously hidden AI-related spending.
Drupal Warns Critical RCE Flaw Could Let Unauthenticated Attackers Compromise Websites
Drupal has warned of a critical remote code execution vulnerability that could let attackers compromise affected websites without logging in. Tracked as…
5.7M California students’ data stolen in ETS breach
Personal information belonging to millions of current and former California public school students has been stolen from a system operated by Educational…
ConnectWise Suspends Cloud Services in Response to Cyberattack
The services remain unavailable as the company continues remediation and security validation.
Healthcare Cyberattacks Rising, Impacting Patient Care
Healthcare organizations are facing an escalating wave of cyberattacks that are directly harming patient care and driving up costs, according to the 2026…
SiteGuard Warns Patching Actively Exploited Security Flaw Could Erase Evidence of Attacks
EG Secure Solutions has warned that a flaw in SiteGuard Server Edition is being exploited and that applying a fix could remove signs of an earlier attack.…
Meta Business Suite terms allow AI web scraping
Meta has revised the terms of service for its Business Suite platform to include explicit language authorizing web scraping of websites linked to business…
IT Security News Hourly Summary 2026-10-19 15h : 8 posts
8 posts published in the last hour 12:32EU law enforcement chiefs gather to discuss new challenges in EU security 12:32One Compromised Login Exposed Millions of California Students’ Records 12:32Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection 12:32Researchers Hack Broadcom…
EU law enforcement chiefs gather to discuss new challenges in EU security
The Convention was opened by Jürgen Ebner, Europol’s Acting Executive Director, and Justin Kelly, Commissioner of the Irish An Garda Síochána.Jürgen…
One Compromised Login Exposed Millions of California Students’ Records
Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection
The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK’s Electoral Commission is…
Researchers Hack Broadcom Wi-Fi Routers Without Passwords and Gain Full Root Access
A flaw in Broadcom’s Wi-Fi software can let someone within wireless range take control of vulnerable routers without knowing the Wi-Fi password. The issue…