Cybercriminals are exploiting interest in AI tools by distributing malware through fake desktop applications that impersonate ChatGPT and Claude,…
Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware
A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to developers’ Windows PCs through…
CYBER BRIEFING | October 28, 2026
Veeam 9.1 backup bypass, PHP2Shell roots firewalls, 2.58M leak
Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments.
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows…
Ivanti Connect Secure Zero-Day Exploited
A sophisticated threat actor has exploited multiple zero-day vulnerabilities in Ivanti Connect Secure VPN appliances to gain root-level access to…
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for…
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 19, 2026 to October 25, 2026)
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to…
Hackers steal $6.3 billion from Binance in record crypto heist
Binance scrambles to freeze billions after record-breaking hack linked to North Korea.
Hackers Use Zero-Click Coruna and DarkSword Exploits to Steal Sensitive Data From iPhones
Hackers are using two powerful iPhone exploit kits, Coruna and DarkSword, to break into phones and steal private data. The victim only has to open a web…
PHP2Shell: Finding the PHP You Didn’t Know You Were Running
October 29 was the deadline CISA gave US federal agencies to patch PHP2Shell. Most businesses sit outside that mandate, yet the date is a fair yardstick…
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries
JPMorgan Chase, Goldman Sachs underscore security in AI plans
“This is one of the most important times to make sure you are appropriately balancing risk and innovation,” said JPMorgan Chase Global CIO Lori Beer.
SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate…
Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
Five suspects linked to the organisation and recruitment of serious violence have been arrested in Spain, Morocco, and France, in the latest results of…
Binance DevOps Laptop Breach Leads to $6.3B Theft
Cryptocurrency exchange Binance is conducting an investigation after a DevOps engineer’s laptop was compromised, resulting in what researchers believe to…
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm…
Hackers Exploit Passwordless Telnet to Infect Linux Devices With New Kairos DDoS Botnet
A new botnet called Kairos is spreading to Linux devices through a very old mistake: a Telnet service that accepts the root user with no password. Once…
Proofpoint Acquires Varonis for $6.3bn
Proofpoint entered into a definitive agreement to acquire Varonis for $6.3 billion in October 2026, marking the largest cybersecurity deal of the month.
3 Ways AI Agents Already Operate in Your Browser
AI agents can control authenticated browsers, interact with corporate applications, and access sensitive data while appearing to act as legitimate…
Accenture deploys AI agents for recruitment
Accenture is using AI agents throughout its hiring process to automate resume screening, interview scheduling, and skills assessment, according to…
Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft and Remote System Control
A new malware framework called NIK C2 is turning the OpenAI API into a tool for cybercriminals. Its Windows implant can dump passwords, record every…
Lehigh Valley Health Network Pays $800K HIPAA Penalty
Lehigh Valley Health Network has agreed to pay an $800,000 penalty and implement a corrective action plan to resolve violations of federal health privacy…
IT Security News Hourly Summary 2026-10-30 15h : 46 posts
46 posts published in the last hour 13:37The best due diligence on a vendor is who they’ve worked with 13:37How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI 13:37GitHub bets on multi-agent software development with Copilot…