In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses…
AI Coding Agents Can Be Hijacked by a Single Malicious File in Your Downloads Folder
A security firm has found that placing a disguised instruction file inside a user’s Downloads folder is enough to manipulate AI coding agents into…
IT Security News Hourly Summary 2026-10-27 17h : 23 posts
23 posts published in the last hour 15:46Securing the enterprise software supply chain in the AI era 15:46System Note: October 27, 2026 15:46Hackers repeatedly breached suppliers holding UK police data, watchdog finds 15:45Apple Just Patched 163 iPhone Security Flaws —…
Securing the enterprise software supply chain in the AI era
Across Europe, the Middle East, and Africa (EMEA), enterprise IT is undergoing a fundamental shift. Artificial intelligence (AI) is no longer restricted…
System Note: October 27, 2026
Unfortunately, a backup failure has resulted in the loss of media files and documents attached to posts. They will be restored eventually, but restoring…
Hackers repeatedly breached suppliers holding UK police data, watchdog finds
His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through…
Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk
Apple’s iOS 27.2 fixes 163 security vulnerabilities, including WebKit and privacy flaws. IT teams should review updates across managed devices.
National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
Like the water sector initiative, the six-month pilot program will connect rural hospitals with industry for free services.
Why Vulnerability Management Fails Without Reliable Asset Data
Vulnerability management depends on knowing what needs protecting. Asset management provides that foundation by maintaining a current picture of IT…
An Abandoned Popcorn Time Fork Left Millions of Computers at Risk
An abandoned Popcorn Time fork exposed millions of computers through an insecure updater. Learn what researchers disabled and why users should remove it.
ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs
ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told…
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.
US launches program to deliver free cybersecurity help to rural hospitals
Small and rural healthcare organizations are among the most vulnerable critical infrastructure organizations in the nation.
University of New Mexico hospital diverts ambulances after cyberattack
For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe. They were forced to suspend outpatient…
Good Smile Company Data Breach: Customer Details Exposed, Store Shut Down
Good Smile Company confirms a data breach exposing customer details and partial payment information. Learn what was affected and what customers should do.
New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding
The US Treasury proposes tighter China investment restrictions covering AI, biotechnology and advanced chips. Here’s what businesses and investors should…
Android Spyware Kit Can Steal Telegram Passwords and Clone WeChat Accounts
uCreator Android spyware can intercept Telegram two-step verification passwords and clone WeChat accounts. Learn how the threat works and how to reduce…
Responsible disclosure in the age of Vulnpocalypse
New tools can find potential flaws faster than teams can assess and fix them. When a serious flaw is discovered, the central challenge is ensuring…
Malware Campaign Infects 953 Online Stores in Prolonged Attack
In the past two years, 953 online stores, primarily Magento-based websites, have been compromised by malicious JavaScript code injected into their…
Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs
Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate…
US government says hackers are now exploiting critical PHP web bugs
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web’s software.
CISA confirms PHP2Shell under attack as researchers clock successful exploits
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest
Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering…
Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
Cannabis smuggling from North America and Thailand in Europe has seen a sharp rise, driven by oversupply in legal markets and the adaptability of…