The U.S. offers $10M for Zhang Yu, accused of helping run HAFNIUM attacks that compromised thousands of organizations worldwide. The U.S. State Department…
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses…
IT Security News Hourly Summary 2026-10-08 13h : 41 posts
41 posts published in the last hour 10:33Agents vs Wikipedia, South Korean bank hacks, ASOS breached 10:33ShinyHunters-Linked Hacker Arrested In Jordan 10:33Quantum computers could break today’s encryption. Washington needs to prepare now. 10:33Double Counter – 274,922 breached accounts 10:33The Oracle…
Agents vs Wikipedia, South Korean bank hacks, ASOS breached
Agents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html South Korea claims agents were…
ShinyHunters-Linked Hacker Arrested In Jordan
Man allegedly linked to ShinyHunters hacking gang reportedly arrested in Jordan, working with FBI, after hack of federal employee data
Quantum computers could break today’s encryption. Washington needs to prepare now.
As advances lower the barrier to breaking current encryption, Washington must move with equal urgency on post-quantum defenses.
Double Counter – 274,922 breached accounts
In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged…
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers
Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The…
TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
AI-powered data pipeline observability: Stop monitoring and start preventing
Devops tools are making it increasingly easy to monitor data pipeline failures. But in many cases, those alerts are already too late. Take marketing…
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious…
Digital IDs and the AI threat: verification must evolve, not just digitise
By Marc de Beaucorps, Co-founder and CEO of Finovox The UK’s rollout of new digital IDs is being pitched as a straightforward upgrade involving safer age…
Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root
Cisco has disclosed three critical vulnerabilities in its Nexus 3000 and 9000 Series switches that could allow unauthenticated remote attackers to execute…
Data Centre Proposed For Site Of Microsoft’s UK Headquarters
Plan would see Microsoft’s former Reading complex demolished to make way for 72MW data hall powered by natural gas fuel cells
Is Your DDoS Protection Actually On?
Readiness is a visibility problem, and it’s one many organizations don’t know they have. Most security controls tell you when they’re broken. A bad…
Five days to TechCrunch Disrupt: What’s next for AI and software development
First AI gave us code completion, predicting the lines of code, functions, and boilerplate we needed based on what we’d already typed. Then came code…
Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets
A financially motivated campaign that used agentic AI tools to breach South Korean financial organizations and exfiltrate data. Active from late September…
Asos Acknowledges Hack That Resulted In Mystery Message
British clothing retailer says investigating ‘unauthorised activity’ after hackers sent app notification to thousands of people around world
Threats Making WAVs – Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report…
AI changed my role before it changed my software
My first attempt at vibe coding face-planted. I shook my head and stared at the screen. Well, this is obviously not for me. I became convinced the problem…
Nvidia-Backed Reflection Enters Open-Weight AI Race
Brooklyn-based start-up launches first frontier model, Beam, claiming similar performance to Chinese rivals with reduced inference costs
Ninja Forms plugin flaw exploited to hack WordPress sites
Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for…