On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
Windows Server 2025 gets support for quick machine recovery
Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October 2026 security update.…
Whitehall shuts the front door on digital ID but leaves the back open
Ministers may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very much alive
ChatGPT Chrome Extension Expands Browser Access to Read Open Tab Content
OpenAI has announced an expanded Chrome integration that lets ChatGPT gather information from open browser tabs and take action within the browser. This…
From Future Warning to Current Reality: The Acceleration of Exploits Following Claude Mythos
From Future Warning to Current Reality: The Acceleration of Exploits Following Claude Mythos andrew.gertz@t… Tue, 10/20/2026 – 12:25 Software Monetization…
Meta Muse exposes users’ personal and business secrets when they share conversations
A single query is all that’s required to find thousands of conversations listed by title.
AI Platform Cairn Abused to Hack Over 100 Organizations
At least three threat actors have been abusing Cairn for persistent access and financial theft.
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
U.S. Government Bans DeepSeek AI and Orders Federal Agencies to Remove All Related Tools
The U.S. Department of Homeland Security has ordered federal civilian agencies to stop buying DeepSeek products and remove related technology from their…
Bullhorn sees red after cyberattack knocks recruitment platform offline
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
US Government Bans DeepSeek AI From Federal Civilian Agency IT Systems
The U.S. Department of Homeland Security (DHS) has instructed federal civilian agencies to remove DeepSeek artificial intelligence products from their…
Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say
Abdulrahman Alfozan’s wife and young son also left the country the day after the 35-year-old Saudi national’s arrest.
Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and AI API Keys
A campaign called GhostAction has placed malicious GitHub Actions workflows in 790 repositories, putting cloud credentials, software-publishing tokens,…
Threats Making WAVs – Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report…
ThreatBook Launches RedAgents AI Platform That Uses Multiple Hacking Agents to Find Security Flaws
ThreatBook has launched RedAgents, a cloud platform that brings several AI-powered penetration-testing agents together to assess an organization’s…
Hackers Exploit Palo Alto Networks PAN-OS Flaw to Bypass MFA and Deploy Ransomware
Ransomware operators are exploiting a vulnerability in Palo Alto Networks PAN-OS that allows them to bypass authentication. This issue enables…
Hackers Target South Korean Banks With AI, Then Accidentally Expose Their Own Attack Tools
Hackers linked to AI-assisted attacks on South Korean banks left parts of their own infrastructure open, giving researchers a view of their tools and…
IT Security News Hourly Summary 2026-10-20 15h : 26 posts
26 posts published in the last hour 12:34AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds 12:34Nippon Columbia Malware Incident: 8.7 Million Records at Risk 12:33Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials 12:33Attackers exploit…
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
Rapid adoption of agentic AI comes with potential business benefits. But if done incorrectly it also carries risks around AI activity management and…
Nippon Columbia Malware Incident: 8.7 Million Records at Risk
A Nippon Columbia malware incident put 8.7 million Daiichi Kosho records at risk. Learn what happened and what customers and security teams should know.
Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials
Ocean Security found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF links…
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign
Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for…
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
Go 1.27.3 and Go 1.26.10, released on October 20, make Go’s certificate verifier reject any certificate chain that passes through one of eight…
iPhone 17 vs iPhone 18 Pro Security: Is the Newer iPhone Actually Safer?
Compare iPhone 17 vs. iPhone 18 Pro security, including spyware protection, privacy features, and whether upgrading actually makes your iPhone safer.