Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible…
Security Researchers Demonstrate Chrome Sandbox Escapes, Telegram Zero-Click Attacks and iOS Zero-Day Research
Security researchers at OffensiveCon Japan 2026 explored topics including Chrome sandbox escapes, zero-click attack surfaces in Telegram, and newly…
IT Security News Hourly Summary 2026-10-29 08h : 9 posts
9 posts published in the last hour 06:32How to Find and Exploit JWT Token Vulnerabilities 06:32IT bosses are confident they’ve found the certificates they don’t know about 06:31Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)…
How to Find and Exploit JWT Token Vulnerabilities
By HOC Team | Updated: October 2026 | Read time: ~18 min JSON Web Tokens (JWTs) have become…
IT bosses are confident they’ve found the certificates they don’t know about
Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate…
Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)
Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it&#;x26;#;39;s convenient to play with…
US Homeland Security Data Breach Exposes Personal Details of Over 41,000 Employees
A newly disclosed data leak has exposed personal and professional information on more than 40,000 U.S. Department of Homeland Security employees,…
WordPress 7.1.4 Security Update Patches 22 Vulnerabilities Affecting Millions of Websites
WordPress has released version 7.1.4 to address 22 vulnerabilities, including issues related to remote code execution, stored cross-site scripting,…
Hackers Turn Compromised Websites Into Fake Cloudflare Verification Traps for Windows and Mac Users
Attackers are using compromised websites to present fake Cloudflare verification pages that steer Windows and macOS users toward executing malicious…
Shame and sleepless nights haunt scam victims long after the money is gone
Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer…
CyberDakait Hackers Target Indian Banking Users, Compromise 17,960 Android Devices
CyberDakait, a financially motivated Android malware operation targeting Indian banking customers since July 2025. Researchers identified at least 17,960…
IT Security News Hourly Summary 2026-10-29 07h : 5 posts
5 posts published in the last hour 05:31Stolen staff logins are spreading attacks between K-12 school districts 05:06IT Security News Roundup: 2026-10-29 Overnight 05:03Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 Firewall Servers 05:03Risky Bulletin: Moldovan public services…
Stolen staff logins are spreading attacks between K-12 school districts
Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their…
IT Security News Roundup: 2026-10-29 Overnight
IT Security News: Overnight roundup, 2026-10-29 Summary The most important story in this window was the PHP2Shell campaign, in which attackers chained web-layer flaws with a Linux kernel exploit to root 25 servers, including government-affiliated systems. It sits alongside follow-up…
Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 Firewall Servers
Hackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems…
Risky Bulletin: Moldovan public services crippled by cyberattack
Moldova takes down more than 80 public services after a cyberattack, the White House launches a new cybersecurity pilot program, South Korea arrests an…
IT Security News Hourly Summary 2026-10-29 06h : 4 posts
4 posts published in the last hour 04:32Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers 04:32Hackers Exploit PHP2Shell to Root 25 Servers – Including US Government Affiliates 04:03Bluesky Is Blocking Links to a Major…
Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers
Hackers combined PHP2Shell vulnerabilities with a Linux kernel exploit to gain root access on 25 servers across the United States, Japan, Taiwan, and…
Hackers Exploit PHP2Shell to Root 25 Servers – Including US Government Affiliates
HOC Shorts | The Breaking Discovery: Cybersecurity researchers uncovered a campaign in which attackers chained the PHP2Shell remote…
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains people’s contact…
IT Security News Hourly Summary 2026-10-29 05h : 6 posts
6 posts published in the last hour 03:33Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks 03:33WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability 03:33Hackers Leak Records of 41,000 DHS Personnel,…
Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks
Fortinet’s FortiAIGate is bringing AI security controls to enterprise workloads on Oracle Cloud Infrastructure (OCI), helping businesses inspect prompts,…
WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability
WordPress released version 7.1.4 on October 28, 2026, fixing 22 security flaws, including an unauthenticated remote code execution vulnerability in its…
Hackers Leak Records of 41,000 DHS Personnel, Exposing Undercover ICE Agents
A leak of records covering more than 41,000 Department of Homeland Security employees and contractors has exposed contact details, work assignments, and…