sysop@hub:~/news$

news

Headlines from public security feeds with a link to the original article. Updated 2026-10-21 21:52 UTC.

2026-10-21

21:43BleepingComputerJapan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
21:15Dark ReadingTiDB Breach Exposes Flawed Cloud Security Assumptions
21:07Palo Alto AdvisoriesCVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH)
21:02SANS ISCCritical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)PHP.net announced that it will release a critical update today. We decided to change the infoCon to YELLOW due to the widespread use of…
20:43Cisco TalosCompromised eMudhra intermediate certificatesCisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra.
20:31BleepingComputerLazarus hackers use post-quantum cryptography for malware delivery
20:25The RecordMeta on the spot for $25 billion under New Mexico privacy ruling
20:14Dark ReadingMarvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
20:03Dark ReadingCloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
19:45The RecordTech trio launches $10 million initiative to help under-resourced utilities bolster cybersecurity
19:19Dark Reading'PHP2Shell' Bugs Signal Red Alert for Security Industry
19:12Cisco AdvisoriesVulnerabilities in PHP Affecting Cisco Products: October 2026
18:57The Hacker NewsCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
18:34BleepingComputerCISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
18:28The RecordDemocrat lawmakers say Russia is aiming to undermine party ahead of midterms
18:23Microsoft Security BlogAI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromiseStorm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across…
18:01The Hacker NewsLiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
17:30The RecordPHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024
17:00SecurityWeekGoogle Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
16:50SecurityWeekPHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
16:50Dark ReadingOVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
16:33The Hacker NewsOpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
16:30Unit 42Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS…
16:26BleepingComputerOpenAI agents disabled safety monitoring, one lied about it
16:09Cisco AdvisoriesCisco Advance Notification for Publication of October 21, 2026, Security Advisories
16:00Cisco AdvisoriesCisco Expressway Series Information Disclosure Vulnerability
16:00Cisco AdvisoriesCisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
16:00Cisco AdvisoriesMultiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
16:00Cisco AdvisoriesMultiple Cisco Products Snort 3 Denial of Service Vulnerabilities
16:00Cisco AdvisoriesCisco Unified Communications Manager Improper Access Control Vulnerability
16:00Cisco AdvisoriesMultiple Cisco Products Snort 3 Security Hardening Release: October 2026
15:44Dark ReadingOptiv Launches CyberBOT Cybersecurity Awareness Training Program
15:29Dark ReadingSurvey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk
15:26Krebs on SecurityWidespread PHP Flaw May Cause Many Site Outages Today
15:10Cisco TalosTwo critical RCEs in PHP coreTwo critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a…
15:00SecurityWeek‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets
14:45SecurityWeekHigh-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
14:17The RecordHundreds of websites taken offline as concern grows over two PHP vulnerabilities
14:11Help Net SecurityeMudhra security blunder left trusted CA signing keys exposed to anyone
14:07BleepingComputerPHP ships emergency patches for critical PHP2Shell flaws
14:00Unit 42“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime ActivitiesAn investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, and database…
14:00BleepingComputerClickFix has never been bigger, and AI tools are its most convincing lure yet
14:00The Hacker NewsPHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
13:52Help Net SecurityNVIDIA unveils security architecture that can stop AI agents crossing set boundaries
13:51Help Net SecurityPHP2Shell: Critical PHP vulnerabilities patched, update now!
13:17SecurityWeekAsymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security
13:15The Hacker NewsGoogle Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands
13:00Dark ReadingDecades-Old Windows Utility Powers Modern ClickFix Attack
12:57SecurityWeekMemory Bugs Account for Most of Chrome’s 353 New Security Fixes
12:34SecurityWeekOpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor
12:20BleepingComputerMicrosoft PowerToys adds CursorHide, Button Lock mouse tools
12:05The Hacker NewsChina-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
12:00NCSC UKCritical security issue affecting PHPUpdated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and…
11:53The Hacker NewsGenerative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports
11:22SecurityWeekBrowsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
11:13Help Net SecurityRansomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June
11:02Schneier on SecurityWorkshop on Economics and Information Security (WEIS) Archive
10:54SecurityWeekChina Defends DeepSeek After US Ban of Its AI From Government Systems
10:36The Hacker NewsPHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
10:32The Hacker NewsThe Harness Is the Hard Part of Agentic Pentesting
10:30The Hacker NewsAttackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
10:14BleepingComputerMicrosoft says October updates didn’t actually fix VPN issues
10:03SecurityWeekChinese AI Model Writes More Hackable Code When Told It’s for US Contractor
10:00Cisco TalosParasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackersAdversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than…
09:30Help Net SecurityGrafana Labs connects observability and incident response with Knowledge Graph
09:07Help Net SecurityThreatLocker adds external controls for AI agent access and execution
09:05The Hacker NewsPHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
09:01The Hacker NewsAttackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
08:59Help Net SecurityInfo-stealing malware slipped into OVHcloud CLI releases on GitHub
08:53Help Net SecuritySafari blocks trackers that turn your email into a tracking ID
08:36BleepingComputerCISA: SafePay ransomware hit over 600 critical infrastructure orgs
08:04The Hacker NewsU.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases
07:44The Hacker NewsState Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
07:26The Hacker NewsCISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
07:00Fortinet PSIRTPHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
06:05The Hacker NewsHackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
06:00Help Net SecurityPrivacy-preserving AI can protect your heart data, the bill is the problem
05:30Help Net SecurityDevGuard: Open-source vulnerability management for the software supply chain
02:00SANS ISCISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)
01:01BleepingComputerStolen UpdraftCentral keys used to backdoor WordPress sites
00:46BleepingComputerMozilla, Google, Apple block compromised eMudhra CA certificates

2026-10-20

21:45Dark ReadingTech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
20:56BleepingComputerPHP warns admins of two critical flaws, emergency patches coming tomorrow
20:30Unit 42Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 20)Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability…
19:33BleepingComputerZeabur shutting down after second security breach in two months
19:16Dark ReadingEx-OpenAI Engineer Detained After Planting Secret Recorder at HQ
18:11BleepingComputerOpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code
17:09The Hacker NewsEight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
15:38The Hacker NewsCritical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
15:35Dark ReadingClose Identity Gaps in Software Development Before Unleashing AI
15:32The Hacker NewsQilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
15:31Cisco TalosThere's only so much code: the rise in vulnerability numbersThe September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped…
14:36Dark ReadingHackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
14:19BleepingComputerDHS bans DeepSeek products across US federal civilian agencies
14:07The Hacker NewsHackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
12:00NCSC UKIntroducing a new AI chapter in the NCSC research problem bookA revolution is underway at the intersection of AI and cyber security.
11:03Schneier on SecurityPossible new Cellebrite iPhone Radio Zero-Day
02:00SANS ISCISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)

2026-10-19

21:13Dark ReadingResearchers Infiltrate Microsoft Tech Support Scam Operation
19:55Dark Reading'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
19:19Dark ReadingConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
13:48Krebs on SecurityFeds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
13:00Microsoft Security BlogAgents are your newest insiders. Security must move at their speed.New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection continuously. The…
11:07Schneier on SecurityTraining AIs to Solve CAPTCHAs

2026-10-18

12:59SANS ISCOrphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)Here is the YARA rule I used to detect "Orphaned VBA Projects Inside DWG Files".

2026-10-17

00:55Palo Alto AdvisoriesCVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)

2026-10-16

21:06Schneier on SecurityFriday Squid Blogging: Squid Before the Chicxulub Meteor Impact
17:47Unit 42Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential abuse and phishing…
16:00Microsoft Security BlogManaging open-weight model risk in enterprise deploymentsNew whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and…
11:04Schneier on SecurityBackdooring Open-Weight AI Models
02:00SANS ISCISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
00:46SANS ISCSmall Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)I believe the cybersecurity industry may be approaching AI security the wrong way.

2026-10-15

23:03SANS ISCPanchan's Mining Island [Guest Diary], (Wed, Oct 14th)[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
22:00Unit 42AI-Powered Espionage Campaign Targets Government Linux InfrastructureOur analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced…
18:30Palo Alto AdvisoriesCVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)
18:30Palo Alto AdvisoriesCVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)
18:30Palo Alto AdvisoriesCVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)
18:30Palo Alto AdvisoriesCVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW)
18:00Cisco TalosThe Q3 Vulnerability Pulse: Discovery ≠ ExploitationIs the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source…
16:24Schneier on SecurityMeasuring Human Cryptanalysis Effort
12:00NCSC UKPost-quantum updates to our TLS guidanceThe NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.
12:00NCSC UKUsing TLS to protect dataRecommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older…
02:00SANS ISCISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)

2026-10-14

22:00Unit 42Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate ImplantWe investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident…
16:02Schneier on SecurityUpcoming Speaking Engagements
16:00Palo Alto AdvisoriesCVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM)
16:00Palo Alto AdvisoriesCVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM)
14:24Schneier on SecurityThe Future of AI Cryptanalysis
14:22Krebs on SecurityU.K. Sanctions Cryptomus for RU Money Laundering
14:10Schneier on SecurityCyberattack on Connected Fridges in France
14:00Cisco TalosBreak the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizationsTalos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States…
13:00Microsoft Security BlogThe hidden network: Inside the phishing infrastructure ecosystem powering global cybercrimeMicrosoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as…
06:49SANS ISCOrphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
02:00SANS ISCISC Stormcast For Wednesday, October 14th, 2026 https://isc.sans.edu/podcastdetail/10136, (Wed, Oct 14th)

2026-10-13

23:24Krebs on SecurityMicrosoft Patches More Than 1,400 Security Flaws
22:00Unit 42The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party RiskUnit 42 dissects a cyberattack targeting a European bank's IT infrastructure, delivering concrete defense strategies to help organizations…
20:37Cisco TalosMicrosoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilitiesMicrosoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products…
07:00Fortinet PSIRTArbitrary file write in grpc phQueryMaster
07:00Fortinet PSIRTBroken authorization
07:00Fortinet PSIRTDouble free in signal handler
07:00Fortinet PSIRTFabric API Authentication bypass
07:00Fortinet PSIRTGUI Denial of Service
07:00Fortinet PSIRTImproper access control and session management in the web management interface
07:00Fortinet PSIRTMultiple Arbitrary File Read/Write via SQL Injection

2026-10-12

15:01Schneier on SecurityFBI Arrests Suspect in FBI-Hacking Case
12:00NCSC UKHelp the NCSC understand how organisations approach external attack surface riskWe're looking to hear from people involved in evaluating, selecting or adopting EASM.

2026-10-10

00:17Krebs on SecurityFBI Arrests Executive at Ransomware Negotiation Firm

2026-10-08

20:44Microsoft Security BlogPost-quantum authentication: Why organizations should start testing certificate ecosystems nowPrepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Program helps advance…
18:00Cisco TalosMaking sure the checks get printedPierre's debut newsletter explores the messy, real-world side of risk management and how to keep vital systems running when a perfect patch…
12:00NCSC UKChina-linked malicious actors called out by UK and international partners for targeting sensitive data globallyJoint advisory with international partners highlights malicious targeting of organisations from a range of sectors across the globe.

Times are UTC. Articles belong to their publishers; this page only lists headlines and links. Sources are listed in the site repository (automation/feeds.json).