MITRE has released ATT&CK v20, expanding its widely used cybersecurity framework to reflect how attackers now exploit artificial intelligence, evade…
F5 patches three critical NGINX flaws
F5 has issued out-of-band security patches addressing three critical vulnerabilities in NGINX, the widely deployed web server and reverse proxy software.
Pegasus Spyware Infection Confirmed on Serbian University Rector’s iPhone Days Before Election
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia’s student protest movement, was infected with NSO…
OVHcloud CLI backdoored to steal developer secrets
OVHcloud has confirmed that its open-source command-line interface tool was compromised by attackers who injected information-stealing malware into the…
Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
The timing of these capabilities remains uncertain. However, this should not be the main concern. Adapting systems and coordinating security upgrades will…
OpenAI’s models are deliberately breaking their misalignment monitoring systems
AI agents are getting more inventive in finding ways to circumvent safeguards to prevent bad behavior, OpenAI has revealed. On Tuesday, it reported two…
PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
Guardicore Labs uncovers a Ransomware detection campaign targeting MySQL servers. Attackers use Double Extortion and publish data to pressure victims.
Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside
Imagine buying a brand new hardware wallet for your cryptocurrency with the shrink-wrap still on… what could possibly be hiding inside? We break out a…
Special Report: PHP2Shell puts 70% of web at risk
PHP2Shell: Emergency PHP RCE Patches, Leaks, and Early Exploitation (CVE-2026-109618/109619) In a special edition of Cybersecurity Today, host David…
Almost 50 arrested as police target Western Balkan network linked to killings
Nearly 50 suspects have been arrested in an international operation targeting a drug trafficking network with Western Balkan members, linked to killings,…
IT Security News Hourly Summary 2026-10-22 02h : 16 posts
16 posts published in the last hour 23:32Blackwall raises $100M at $2.2B valuation 23:32PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk 23:32Top OSINT Tools And Frameworks For Investigators 23:31The Nansh0u Campaign –…
Blackwall raises $100M at $2.2B valuation
Blackwall has secured $100 million in new funding at a $2.2 billion valuation, marking significant investor confidence in solutions addressing automated…
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
‘Coordinated vulnerability disclosure, unless there’s evidence of active exploits in the wild,’ Chainguard CEO tells The Reg
Top OSINT Tools And Frameworks For Investigators
By HOC Team | Updated: October 2026 | Read time: ~16 min Open Source Intelligence (OSINT) has evolved…
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses…
Anthropic Acquires Opaque Systems to Strengthen Confidential and Verifiable AI
Anthropic has acquired Opaque Systems, which focuses on developing technologies that enable artificial intelligence systems to process sensitive…
Scientists reach the ultimate quantum limit on a surface
Scientists have achieved a quantum breakthrough by creating an ultra-clean surface where individual molecules can maintain their delicate quantum…
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix…
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.
Millions of Student Records Exposed After a Single Login Is Compromised
An educational assessment management company, Educational Testing Service (ETS), has disclosed personal information about millions of current and former…
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot
Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of…
Hackers Steal 1.8M Records From Nikkei
Japanese media giant Nikkei has disclosed a significant data breach affecting 1.8 million customer records, according to a SecurityWeek report.
Two critical PHP flaws put the web on alert as emergency patches arrive
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the…
Chrome puts insecure sites behind a permission prompt
Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by…