Microsoft has introduced a new report-assessment system across its bug bounty programs, making the evidence security researchers submit a key factor in…
ConnectWise backup app breaches 173 Microsoft tenants, Chinese spies exploit BeyondTrust zero-day, Japan declares first cyber state of emergency
Microsoft 365 Supply-Chain Break-Ins via ConnectWise, US Bankruptcy Notices Down, Phishing Market Takedown, BeyondTrust Zero-Day, Japan Cyber Emergency…
Risky Bulletin: Linux patches PwnEscape KVM vulnerability
A serious vulnerability lets attackers escape Kernel-based virtual machines, OpenCode users become collateral damage in a distillation attack, supply…
Sekoia + Zimperium: investigate mobile threats in your SOC
Connect Zimperium Mobile Threat Defense with Sekoia so Sekoia Elevate AI agents investigate mobile alerts in the context of your whole SOC.
Microsoft says October updates didn’t actually fix VPN issues
Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates. […]
Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking
Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
Amazon Bee Frontier and Bee Eclipse Raise Workplace Consent Concerns
Amazon’s new Bee AI devices can summarize conversations, but their recording controls raise consent questions for employers and meeting participants.
ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU
Huntress alleges takeover of M365 accounts
IT Security News Hourly Summary 2026-10-21 13h : 22 posts
22 posts published in the last hour 10:34PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws 10:33Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor 10:33She Was the DEA’s Premier Crypto Detective. The Clues…
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws
PHP will release emergency fixes for two critical RCE flaws rated 9.2, as researchers warn of potential risks to exposed and unsupported systems. PHP is…
Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable.
She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family
To escape the chaos of her Russian childhood, Lili Infante became an American law enforcement prodigy. She pioneered the DEA’s investigations of the dark…
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
Two critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches
Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
Five suspects linked to the organisation and recruitment of serious violence have been arrested in Spain, Morocco, and France, in the latest results of…
China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors
Sophos found BRONZE SANDCASTLE abusing legitimate Windows apps to load encrypted backdoors, collect system information and steal Active…
Researchers Uncover GhostShares Flaw That Makes Meta Muse AI Conversations Easy to Find
A privacy weakness in Meta’s Muse AI assistant that made shared conversations discoverable through passive DNS records, exposing personal files and…
ChatGPT Can Now Do More in Chrome, but There’s a Security Trade-Off
OpenAI expands ChatGPT’s Chrome integration with tab access and browser automation. Learn what the update means for productivity, privacy, and enterprise…
Solving the Continuous Authorization Conundrum
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Solving the Continuous Authorization Conundrum
Sizing the PHP exposure window for CVE-2026-109618 and CVE-2026-109619 with VirusTotal
On October 20, the PHP security team announced an out-of-band security release for Wednesday, October 21, 2026 at 14:00 UTC , fixing two critical…
IT Security News Roundup: 2026-10-21 Morning
IT Security News: Morning roundup, 2026-10-21 Summary This morning’s cybersecurity news highlights the dual-edged nature of artificial intelligence, as threat actors weaponize AI penetration tools like ARTEX while security teams scramble to govern autonomous agent workflows. Simultaneously, persistent ransomware campaigns…
Why people don’t report scams, and it’s not embarrassment
More than four in 10 people targeted by scammers didn’t tell their bank, the police, or the platform. Instead, many told someone close to them while not…
Critical security issue affecting PHP
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.
Critical Fortinet FortiSIEM RCE Vulnerability Gets Public PoC Exploit, Allowing Unauthenticated Attacks
Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM. This vulnerability allows…
Grafana Labs connects observability and incident response with Knowledge Graph
Grafana Labs has announced a Knowledge Graph in every Grafana Cloud stack, alongside new Digital Experience Monitoring capabilities and updates to Grafana…