The FBI has arrested a Canadian cybersecurity executive as it continues its crackdown on ShinyHunters
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.…
CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records
CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure. CyberXero is…
Hidden implant in Ledger hardware wallets linked to $93M theft
Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11,…
IT Security News Hourly Summary 2026-10-12 12h : 12 posts
12 posts published in the last hour 09:31CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks 09:31Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access 09:31Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick…
CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks
CISA has added a long-standing Apache Struts flaw, tracked as CVE-2016-3081, to its Known Exploited Vulnerabilities catalog after confirming that…
Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access
A phishing campaign is abusing Microsoft Power BI to deliver rogue ScreenConnect installations and give attackers lasting remote access to Windows…
Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read
A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript execution, and ImageMagick…
Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups
ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May
Midnight Mimosa Infects Android Phones Before Users Even Turn Them On
Midnight Mimosa is reaching Android phones before their owners even press the power button. The malware arrives inside device firmware, giving its…
AI-driven security: Why agentic AI is changing cybersecurity
Agentic AI is transforming cybersecurity — but rogue agents, shadow AI, and third-party risks demand stronger guardrails.
Decepticon – Autonomous Red Team Agent that Integrates Claude and Codex
Decepticon is an open-source autonomous red team agent that connects AI reasoning with hands-on security testing. Its integration with Claude Code and…
Karaoke Giant Reveals Data Breach Impacting Eight Million
Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers
Solving the Continuous Authorization Conundrum
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Solving the Continuous Authorization Conundrum
Android Firmware Malware Uses Ad Fraud and Proxy Botnets to Generate Revenue
Midnight Mimosa, an Android malware campaign embedded in firmware that monetizes compromised smartphones through advertising fraud and residential proxy…
Critical SonicWall Vulnerability Exploited Days After Disclosure
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
IT Security News Hourly Summary 2026-10-12 11h : 9 posts
9 posts published in the last hour 08:31Help the NCSC understand how organisations approach external attack surface risk 08:31Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France 08:02AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges 08:02Windows…
Help the NCSC understand how organisations approach external attack surface risk
We’re looking to hear from people involved in evaluating, selecting or adopting EASM.
Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
Five suspects linked to the organisation and recruitment of serious violence have been arrested in Spain, Morocco, and France, in the latest results of…
AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges
Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8.0.2, named AnyPwn. This vulnerability allows remote…
Windows PCs missing key updates could lose security fixes in 2027
Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and…
Global Online Retailer ASOS Has Been Hacked
Hackers breached ASOS, a UK-based global online fashion retailer with many customers in the USA, earlier this month. The hackers stole the names,…
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default.
A week in security (October 5 – October 11)
A list of topics we covered in the week of October 5 to October 11 of 2026