IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by…
Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of…
ISC2 Launches New AI Security Certification as Cyber Skills Demands Grow
As artificial intelligence becomes more widely adopted, cybersecurity professionals are facing growing pressure to develop new skills, understand emerging…
Sony’s So-net Breach Exposes 2.59 Million Customer Records
Sony’s So-net breach exposed 2.59 million customer records and 54,401 email passwords. Learn what was leaked and how to protect accounts from follow-on…
When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
Los Angeles County officials told CyberScoop they received multiple grand jury subpoenas investigating alleged election fraud. States and civil groups…
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected…
Hackers Target Asian Governments With New NetamLoader Malware Hidden in Windows Update Files
Kaspersky researchers have uncovered NetamLoader, a .NET loading framework built on XAML markup. It appears to be a supply-chain attack on a customized…
Fake PDF and search tools hijacked searches for 13.4 million Chrome users
319 Chrome extensions sent search queries through servers controlled by their operators, allowing them to see what users searched for.
L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara
I ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese.
A quiet week in infosec <.<
In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all,…
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said.
Trezor warns of suspected crypto-theft implant in hardware wallet
Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller…
Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
The AI-enabled campaign hit two dozen targets, including sites linked to the U.S. government.
New Framework Puts Ransomware Resilience for AI Systems in Focus
RAID-AI aims to help organizations assess their security preparation for ransomware attacks targeting AI systems
BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
Ambulances were diverted, surgeries cancelled, and medical students sent home from classes after a ransomware group attacked the University of New…
Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed
For years, government officials have described Volt Typhoon intrusions into US critical infrastructure as highly sophisticated, while providing few…
Fake ChatGPT and Claude Apps Deliver Crypto-Mining Malware
Cybersecurity researchers have uncovered a malware campaign, known as Yoba, that uses fake desktop applications for ChatGPT and Claude to trick users into…
Japan Faces Growing Cyberattack Crisis as AI Tools Help Hackers Target Businesses and Government
Japan is dealing with an intense wave of AI-assisted intrusions that has exposed weaknesses in its corporate and public-sector defenses. Dozens of…
Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
Known vulnerabilities with available patches are by far the biggest risk facing connected devices, a new report found.
Unauthorized Codex and Claude Code Relays Disable Security Protections at 12 Organizations
Symantec’s Threat Hunter Team has found an unauthorized relay service that installs the genuine OpenAI Codex and Anthropic Claude Code CLIs, then rewrites…
IT Security News Hourly Summary 2026-10-30 17h : 40 posts
40 posts published in the last hour 15:34Node2Shell: Remote Code Execution via a Brotli Decoder Flaw 15:33Defense contractor pleads guilty to aiding North Korean remote worker scheme 15:33What AI Cybercrime Exercises Reveal About Collective Defense 15:33AI-Accelerated Attacks, Major Breaches, and…
Node2Shell: Remote Code Execution via a Brotli Decoder Flaw
Read the breakdown on how the Node2Shell vulnerability in Google’s Brotli decoder enables remote code execution across Node.js, Bun, and .NET, and how to…