WordPress 7.1.4 was released on October 28, 2026. According to WordPress, it includes fixes for 22 security vulnerabilities. The most serious is an…
Building Cybersecurity Careers through Certification and Continuous Learning
Explore how Fortinet training and certification help people enter cybersecurity, build practical skills, and advance throughout their careers.
Polymarket halts trading after crypto-draining script breach, $2.5M traced
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute…
IT Security News Hourly Summary 2026-10-31 00h : 12 posts
12 posts published in the last hour 22:55IT Security News Daily Summary 2026-10-30 22:32Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries 22:32php2shell: anatomy of two PHP lifecycle bugs 22:3227 arrests and 248 potential victims identified in…
IT Security News Daily Summary 2026-10-30
200 posts published today 22:32Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries 22:32php2shell: anatomy of two PHP lifecycle bugs 22:3227 arrests and 248 potential victims identified in action week against labour exploitation 22:31Massive Leak Exposes 41,000…
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has…
php2shell: anatomy of two PHP lifecycle bugs
How out-of-memory corruption and stale worker state became two critical PHP RCEs and why the original exploit theory got it wrong.
27 arrests and 248 potential victims identified in action week against labour exploitation
Europol, the European Labour Authority (ELA), and 34 participating countries today announced the results of an action week targeting human trafficking for…
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs,…
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.
CVE-2026-115415 – Secret masking bypass in the environment tool in Strands Agents Tools
Bulletin ID: 2026-154-AWS Publication Date: 10/28/2026 12:30 PM PDT Description: We identified CVE-2026-115415, an issue where the environment tool…
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful…
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely…
Applebee’s exposed customers’ personal data after leaving database password in app
EXCLUSIVE: A security researcher discovered the hardcoded credential in Applebee’s app, allowing unrestricted access to customers’ personal data.
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters’ PeopleSoft 0-day turns out to involve three vulns
IT Security News Hourly Summary 2026-10-30 23h : 11 posts
11 posts published in the last hour 21:33Anthropic VS code extension on Cursor backdoored for nearly 12 hours 21:33U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog 21:32Researchers Uncover Compaction Smuggling Flaw That Exposes OpenAI Reasoning Traces 21:32Hacker…
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
It’s still unknown how attackers got access to Anthropic’s verified Cursor account.
U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog. The U.S.…
Researchers Uncover Compaction Smuggling Flaw That Exposes OpenAI Reasoning Traces
Researchers at Xint identified a vulnerability in the OpenAI API that could expose hidden reasoning traces from advanced AI models, creating a potential…
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online.
Friday Squid Blogging: Bigfin Squid Off California Coast
Neat video : The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in…
The Department of Know: Big Binance hack, Cursor backdoor, FEC taken offline
Read the full stories at CISOSeries.com . This week’s Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod , CISO, MultiCare Health…
DOJ raises privacy concerns over potential sale of Character.AI chats
The DOJ’s Executive Office for U.S. Trustees said a consumer privacy ombudsman is needed to advise the court on how to regulate what data from…
Devs Hit by Trojanized Claude Code Extension for Cursor
Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).