The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
Salt Security wins three InfoSec Innovator awards
Salt Security has won three categories at Cyber Defense Magazine’s 2026 Top InfoSec Innovators awards, recognising its work in agentic AI and API…
New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lures and decoy content…
PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities
PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers…
LiteLLM Compromised- Credential Steals Through Supply Chain Attack
HOC Shorts | The Incident: The widely used AI developer tool LiteLLM compromised in a software supply chain…
PHP2Shell: What the Vulnerability Means and Why Patching Is Urgent
Two critical security vulnerabilities in the core of PHP affect a large proportion of websites – from personal WordPress blogs and online stores to…
ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into…
php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619
CVE-2026-109618 and CVE-2026-109619 are critical PHP core RCE flaws that leaked ahead of disclosure. We cover what is verified, why exploitation converges…
Machine speed attacks require machine speed detection and response
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks…
IT Security News Hourly Summary 2026-10-22 17h : 34 posts
34 posts published in the last hour 14:36Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year 14:35How to conduct a cyber-resilience assessment 14:35Critical PHP vulnerabilities patched today 14:35Ransomware Gangs Exploit GlobalProtect VPN Flaw — What…
Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
Contern, Luxembourg, 22nd October 2026, CyberNewswire
How to conduct a cyber-resilience assessment
Given growing concerns about cyberattacks and the effect of AI on cybersecurity, enterprise CISOs should periodically review and update their…
Critical PHP vulnerabilities patched today
PHP developers are releasing emergency security patches today to address two critical vulnerabilities in the widely-used programming language that powers…
Ransomware Gangs Exploit GlobalProtect VPN Flaw — What to Check
Ransomware groups exploit a GlobalProtect VPN vulnerability to reach enterprise systems. Here’s what security teams should investigate.
Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack
The vibe-coding platform said all of its customers should revoke and rotate their private keys, after hackers were able to decrypt some customer secrets.
AI Guardrails Aren’t Stopping Criminal Hackers
Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.
Exposed Refrigeration Systems Raise Global Cybersecurity Concerns
Cybersecurity researchers at Forescout are drawing attention to the risks posed by exposed refrigeration control systems, warning that weaknesses in…
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in…
EU Regulators to Investigate Booking.com Over Scam Risks
The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks
CYBER BRIEFING | October 22, 2026
PHP RCE pair hits 9.2: patch now or pull sites offline
How Fraudulent Airline Support Numbers Exploit Search Results and AI-Generated Answers
A canceled flight. A missed connection. A refund that has yet to arrive. When travelers need urgent help, they often turn to search engines, social media,…
CYBER BRIEFING | October 21, 2026
Signal call flaw, 333 Tor exits hijacked, AI plans OT attacks
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch…
GitLab Max Severity Code Execution Flaw
GitLab has issued emergency security patches addressing a maximum-severity vulnerability in its Regular Expression Compiler component that enables remote…