Lab to bring together biosecurity expertise with backing from major AI companies, amid other funding to mitigate AI and cyber-risks
Sony Breach Exposes 2.58M Records
Sony Network Communications has confirmed a data breach affecting 2,585,481 customer records associated with its So-net and Plala internet service…
IT Security News Hourly Summary 2026-10-29 17h : 50 posts
50 posts published in the last hour 15:39Gheist turns GitHub Actions into a secret extraction service 15:39NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries 15:39Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France 15:39JPMorgan…
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows…
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries
Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
Five suspects linked to the organisation and recruitment of serious violence have been arrested in Spain, Morocco, and France, in the latest results of…
JPMorgan Chase, Goldman Sachs underscore security in AI plans
“This is one of the most important times to make sure you are appropriately balancing risk and innovation,” said JPMorgan Chase Global CIO Lori Beer.
Cisco open sources tool for detecting AI agents on hacking sprees
Project Quarry aims to provide a ‘shared language’ for evaluating agent behavior
Hackers Exploit Critical Cisco SD-WAN 0-Day Flaw to Deploy KeyDrift Malware and Steal Encryption Keys
A state-linked hacking group used a maximum-severity Cisco SD-WAN zero-day flaw to break into network controllers and install a custom malware framework…
The best due diligence on a vendor is who they’ve worked with
A vendor gets a call from one of its biggest MSP partners who needs something the vendor can’t supply. The vendor knows a competitor can, so it points…
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers
CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical…
CrowdStrike Uncovers New Agentic AI Campaigns
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Uncovers New Agentic AI Campaigns
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding…
How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI
Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure.
HTTP2Shell emergency updates, PHP2Shell attacks, GitHub worm
HTTP2Shell sparks emergency patches https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/…
Starlink Services Return To Normal For Ukraine
Operating speeds for Starlink and military Starshield systems resume after SpaceX-imposed restrictions that disrupted drone operations
Broadcom Fixes 89 Spring Enterprise Vulnerabilities, Adds Patching Tools
Broadcom fixes 89 Spring Enterprise flaws and adds patching tools. Learn what security teams should verify about early access, testing, and deployment.
Whitsett, NC sends out alert about phishing email
The Town of Whitsett, North Carolina issued an alert on Facebook on October 22: The Town of Whitsett is notifying residents, vendors, community partners,…
Hackers could poison AI models by tampering with core infrastructure
AI systems rely on a complex web of hardware. Compromising any one component could let adversaries change model weights.
Claude AI Exploits Linux Kernel Flaw to Execute Root Commands Without User Interaction
Anthropic says an unreleased Claude research model wrote a working exploit for a critical Linux kernel bug, tracked as CVE-2026-98432. The exploit lets a…
CrowdStrike 2026 Legal Threat Landscape Report: eCrime Leads Attacks, China Activity Intensifies
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike 2026 Legal Threat Landscape Report: eCrime Leads Attacks, China Activity Intensifies
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems…
Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model
Google’s new frontier model scored 88.2% on SEC-bench Pro and is rolling out first to vetted cyber defenders via its Fairwind Program.
Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat
Sead Fadilpašić reports: Japanese internet giant GMO Group has told its customers to scan their computers for viruses, back up all of their data,…