Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.
ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History
ICE’s Homeland Security Investigations is engaged in far-reaching spying against left-wing activists that rivals the FBI and CIA crackdowns on the Civil…
Top 10 Best UEBA Tools in 2026 [Ranked & Scored]
Stolen credentials beat most controls because they are the control which is why behavior became the detection substrate. UEBA baselines how every user and…
Five TEFAF robbery suspects added to EU Most Wanted
As of 29 October 2026, five new fugitives, four men and one woman, have been added to the EU Most Wanted list. According to the Limburg Public…
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
GitHub has announced that it’s introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time.…
Six elements of resilient AI orchestration platforms
While many organizations are in early AI agent rollouts, research suggests that more will scale to greater numbers of agents and assistants in the coming…
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s…
New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs
Cisco Talos has uncovered NIK C2, a Go-based, 64-bit Windows remote access tool that embeds a working OpenAI client. Operators can send prompts through an…
Apple Launches M6-Powered MacBook Pro, iMac
New devices offer improved performance for graphics, local AI workloads, ahead of touchscreen laptop launch
Binance links $6.3 billion crypto theft to compromised DevOps laptop
Binance, the world’s largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer’s compromised laptop. […]
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
IT Security News Hourly Summary 2026-10-30 11h : 20 posts
20 posts published in the last hour 09:34Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls 09:34Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data 09:34Have an older iPhone or iPad?…
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall…
Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data
A grey market relay service is quietly installing the real OpenAI Codex and Anthropic Claude Code tools on company computers. It then changes their…
Have an older iPhone or iPad? Apple has a security update for you
Apple has backported a fix for a CoreGraphics flaw reportedly exploited in targeted attacks to the iPhone XS, XS Max and XR, and seventh-generation iPad.
Microsoft Fixes Remote Desktop Connection Failures Following Recent Updates
Microsoft resolved a Windows 11 issue that blocked non-admin users from connecting via Remote Desktop when Administrator protection was enabled, releasing…
Open-weight AI model GLM-5.3 cheated its way to correct answers
Irregular evaluated Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench, the company’s framework for measuring…
CISA Warns of GitLab Integer Overflow Vulnerability Exploited in Attacks
The Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting CVE-2026-97229. This GitLab vulnerability could allow code…
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Illicit software on the computers of some of the world’s best online poker players allowed the accused cheater to see what cards were in the victims’…
Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root Access
Attackers are chaining zero-day flaws in Ivanti Connect Secure VPN appliances to gain unauthenticated root access, exposing stored credentials and…
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project’s own GitLab server a week after GitLab released a fix, Alpine…
Researcher Uses Claude AI to Extract Internal Anthropic Binary and Recover Google Cloud Token
A security researcher got Claude AI to hand over an internal Anthropic program and a memory dump that held pieces of a working Google Cloud token. The…
Claude AI Exposes Internal Sandbox Details That Help Researcher Bypass Local Connection Restrictions
A Bishop Fox researcher investigating Claude’s sandbox obtained an internal control binary, recovered authorization tokens from process memory, and…
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Drupal has warned that threat actors are exploiting a “highly critical” security flaw in its Commerce Core component. The vulnerability, tracked as…