access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Datenleck: Mitarbeiter gewährte KI-Agenten Zugriff auf Pentagon-System
Ein Accenture-Mitarbeiter soll einem KI-Agenten Zugang zu einem Pentagon-System gewährt haben. Dabei gelangten offenbar Daten nach außen. First seen on golem.de Jump to article: www.golem.de/news/datenleck-mitarbeiter-gewaehrte-ki-agenten-zugriff-auf-pentagon-system-2610-214666.html also interesting: Cybersecurity Snapshot: CISA Hands Down Cloud Security Directive, While Threat from North Korean IT Workers Gets the Spotlight Cybersecurity Snapshot: What Looms on Cyberland’s Horizon? Here’s What Tenable…
-
Datenleck: Mitarbeiter gewährte KI-Agenten Zugriff auf Pentagon-System
Ein Accenture-Mitarbeiter soll einem KI-Agenten Zugang zu einem Pentagon-System gewährt haben. Dabei gelangten offenbar Daten nach außen. First seen on golem.de Jump to article: www.golem.de/news/datenleck-mitarbeiter-gewaehrte-ki-agenten-zugriff-auf-pentagon-system-2610-214666.html also interesting: Cybersecurity Snapshot: CISA Hands Down Cloud Security Directive, While Threat from North Korean IT Workers Gets the Spotlight Cybersecurity Snapshot: What Looms on Cyberland’s Horizon? Here’s What Tenable…
-
Spear-Phishing steigt um 41 Prozent – Angreifer setzen auf gezielte Identitätsangriffe
Spear-Phishing steigt um 41 %, BEC dominiert in Deutschland mit 79,2 %. KnowBe4 zeigt, wie KI und Identitätsmissbrauch die Phishing-Bedrohung verändern. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/spear-phishing-steigt-um-41-prozent-angreifer-setzen-auf-gezielte-identitaetsangriffe/a46951/ also interesting: Security und GenAI Zwischen Innovation und Sicherheit Cybersecurity Snapshot: AI Data Security Best Practices Released, While New Framework Seeks To Help IT Pros Gain…
-
Digitale Identitäten als neuer Perimeter – In vier Schritte zu einer effektiven Identitätssicherheitsstrategie
Tags: unclassifiedFirst seen on security-insider.de Jump to article: www.security-insider.de/identitaetssicherheitsstrategie-hybride-umgebungen-a-adfb5248c7abc1a901b044b21ffecb29/ also interesting: Online-Kunstauktionen: Matisse, Jade und ein Hündchen für 3000 Euro… Introducing the Aembit Kerberos Trust Provider US FBI Set Up Dotcom In Megaupload Raid Webseite eines öffentlich-rechtlichen Fernsehsenders in Uruguay verunstaltet
-
AI Exposure und Hexa AI – Tenable setzt bei Exposure Management auf Agentic AI
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/tenable-setzt-bei-exposure-management-auf-agentic-ai-a-c0d53f56b90681a47ad6024244d55d2b/ also interesting: Instagram: Erste Creator können eine KI-Version von sich erstellen wozu das gut ist AI Has Created a Battle Over Web Crawling Popular Chatbots Spout Russian Misinformation, Finds Study 10 Cybersecurity Startups To Watch In 2025
-
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Tags: cisa, cisco, cve, cybersecurity, dos, exploit, firewall, flaw, gitlab, infrastructure, kev, rce, remote-code-execution, software, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation.The vulnerabilities are listed below – CVE-2026-97229 (CVSS score: 10.0) – An integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise First seen on…
-
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Tags: cisa, cisco, cve, cybersecurity, dos, exploit, firewall, flaw, gitlab, infrastructure, kev, rce, remote-code-execution, software, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation.The vulnerabilities are listed below – CVE-2026-97229 (CVSS score: 10.0) – An integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise First seen on…
-
As Russia’s Cyberwar Evolves, Belarus Steps Forward
The FrostyNeighbor advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives. First seen on darkreading.com Jump to article: www.darkreading.com/physical-security/russia-cyber-war-belarus-steps-forward also interesting: Russian hacking group targets critical infrastructure in the US, the UK, and Canada The most notorious and damaging ransomware of all time…
-
WordPress 7.1.4 Fixes 22 Security Vulnerabilities, Including RCE Flaw Under Active Attack
WordPress released version 7.1.4 on October 28, 2026, which addresses 22 security vulnerabilities. Among them is an unauthenticated remote code execution flaw that attackers are actively exploiting. Administrators should ensure the update is installed, rather than assuming automatic background updates have completed. The official release documentation details fixes spanning stored cross-site scripting, information disclosure, authorization…
-
WordPress 7.1.4 Fixes 22 Security Vulnerabilities, Including RCE Flaw Under Active Attack
WordPress released version 7.1.4 on October 28, 2026, which addresses 22 security vulnerabilities. Among them is an unauthenticated remote code execution flaw that attackers are actively exploiting. Administrators should ensure the update is installed, rather than assuming automatic background updates have completed. The official release documentation details fixes spanning stored cross-site scripting, information disclosure, authorization…
-
12 Managed Security Service Providers (MSSP): The 2026 Buyer’s Verdict Guide
Choosing an MSSP is choosing a relationship model pure-play SOC specialists, telecom-scale operators, consulting houses attaching run to transform, and the outsourcing giants folding security into contracts you already hold and 2026 adds ownership homework (Secureworks now answers to Sophos). This verdict guide judges twelve providers on delivery truth, contract shape, and the governance disciplines…
-
11 SOC-as-a-Service Providers: The 2026 Buyer’s Verdict Guide
SOCaaS is bought on the 3 a.m. question what may the provider do without waking you, and how fast does a human touch your alert? This verdict guide judges eleven providers (our sheet’s twelfth, Blackpoint Cyber, is excluded under this publication’s standing editorial policy) across the operating dialects that actually differ: concierge squads, transparent co-management,…
-
12 Managed SIEM Services: The 2026 Buyer’s Verdict Guide
Managed SIEM’s quiet failure is dependency: two years in, the detections and parsers live in the provider’s head, and leaving means starting over. This verdict guide judges twelve services on content ownership, tuning evidence, and delivery dialect vendor-run platforms, co-managed operations in your tenant, Microsoft-practice specialists, and the SMB-to-enterprise spectrum with merger-era notes where platforms…
-
12 Digital Forensics Incident Response (DFIR) Companies: The 2026 Buyer’s Verdict Guide
You retain a DFIR firm for the breach you’ll actually have nation-state intrusions want attribution benches, ransomware wants negotiation-density operators, insurance-routed incidents want panel firms and 2026’s roster carries one acquisition flag buyers must know: Coveware now operates under Veeam. This verdict guide matches twelve companies to breach lanes, with telemetry advantages, panel realities, and…
-
12 Incident Response Retainer Services: The 2026 Buyer’s Verdict Guide
A retainer is a contract you buy hoping to waste, and its differences surface at 2 a.m.: SLAs that mean hours versus best-effort, unused fees that convert versus evaporate, and benches whose post-acquisition structures either carried over or didn’t. This verdict guide judges twelve retainer services on terms, not just talent including one ownership flag…
-
Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access
A trojanized version of the Claude Code extension, identified as anthropic.claude-code version 2.1.313, contains a malicious loader that enables persistent SSH access to developer systems. Researchers analyzed an artifact obtained from Open VSX and discovered 66 lines of JavaScript added to the legitimate extension bundle. This additional code lets the attacker’s script run before the…
-
EUVD-2026-108569 / CVE-2026-115547 – Böswillige Admins führen im Okta Access Gateway Systembefehle aus
First seen on security-insider.de Jump to article: www.security-insider.de/okta-access-gateway-kritische-code-injection-cve-2026-115547-a-0b8c2f27901ec1b1dce8dd9f3320b41c/ also interesting: Who’s Afraid of a Toxic Cloud Trilogy? Top 12 ways hackers broke into your systems in 2024 The unified linkage model: A new lens for understanding cyber risk Critical Okta Access Gateway Vulnerability Enables Remote Command Execution
-
Binance Reportedly Hacked as Attackers Steal Up to $5.7 Billion in Cryptocurrency
Binance has suspended deposits and withdrawals due to a security incident. Early estimates from blockchain tracking indicated that attackers may have drained as much as $5.7 billion in cryptocurrency. The exchange has committed to covering all losses while investigators work to trace the transactions and coordinate asset freezes throughout the cryptocurrency ecosystem. In its official…
-
Hackers Launch Over 18 Million DDoS Attacks in Three Months, Cloudflare Reports
In the third quarter of 2026, Cloudflare successfully mitigated 18.2 million network-layer distributed denial-of-service (DDoS) attacks. This increase indicates a trend among attackers who now favor short, frequent disruptions over large traffic floods. Compared to the same quarter in 2025, this represents a significant 208% rise in the frequency of attacks across Cloudflare’s network. Published…
-
Critical Linux Kernel Vulnerability Lets Remote Attackers Crash Ubuntu Systems
A critical vulnerability in the Linux kernel, identified as CVE-2026-98432, threatens Ubuntu systems through a networking memory flaw that could cause crashes and service disruptions. Ubuntu released an advisory on October 15, 2026, and provided an update on October 29. The vulnerability has been assigned a CVSS severity score of 9.8, indicating a high priority…
-
Fake IT help desk callers got by on little more than names and email addresses
Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/30/cisco-talos-it-help-desk-vishing/ also interesting: Despite Recent Security Hardening, Entra ID Synchronization Feature Remains Open for Abuse You should be aware…
-
Hacker leaks data on more than 40,000 Homeland Security employees
A hacker leaks personal data on more than 40,000 DHS employees, including CBP, ICE and CISA staff, after an undisclosed breach. Personal details of thousands of U.S. Department of Homeland Security (DHS) employees are now online after a hacker stole reams of data in a data breach that occurred earlier this year and nobody had…
-
Accenture Employee Allegedly Gave Claude Code AI Agent Administrative Access to Pentagon Systems
An Accenture employee reportedly linked a personal Claude Code account to a secure Department of Defense production environment, granting the AI coding agent administrative access and potentially exposing credentials and sensitive network information to an external service. According to WIRED’s investigation, published October 29, the agent operated on the Pentagon network for approximately two months…
-
Accenture Employee Allegedly Gave Claude Code AI Agent Administrative Access to Pentagon Systems
An Accenture employee reportedly linked a personal Claude Code account to a secure Department of Defense production environment, granting the AI coding agent administrative access and potentially exposing credentials and sensitive network information to an external service. According to WIRED’s investigation, published October 29, the agent operated on the Pentagon network for approximately two months…
-
Scammers rebuild fake shopping sites within hours of a takedown
Tags: scamOne retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs intended to harvest card … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/30/akamai-fake-account-abuse-report/ also interesting: Get Safe Online Launches New Scam Detector Sicher durch die Scam-Saison kommen: Wie nicht nur Urlauber ihre…
-
What exactly is ISOC? And what does it mean for you?
Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/30/stellar-cyber-integrated-security-operations-center/ also interesting: What is SIEM? Improving security posture through event log data Threat intelligence platform buyer’s guide: Top vendors, selection advice Top…
-
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
Cryptocurrency giant Binance said on Thursday that a “security incident” on its platform has impacted about $6.3 billion worth of assets.The world’s biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on-chain so far. Tether and Circle said they have frozen more than 1.567 billion USDT and 800 million related to…
-
New Zero-Click Android Vulnerability Lets Attackers Crash Phones With a Single SMS
A recently discovered Android vulnerability, referred to as SMS of Death, allows attackers to crash a phone’s telephony process with just one malformed SMS, without any interaction from the victim. Researcher Mark B reports that this flaw can disconnect active calls, including emergency calls, and leads to persistent service disruptions when malicious messages remain in…
-
Smart TVs can harbor unpatched security flaws and track what you watch
Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/30/bitdefender-smart-tvs-vulnerabilities-report/ also interesting: IoT Security Gaps Put Enterprises at Risk Mirai botnet weaponizes PoC to exploit Wazuh open-source XDR flaw Cybersecurity Snapshot:…
-
Binance Probes Suspected $5.8 Billion Crypto Hack, $3 Billion Frozen
Binance investigates a $5.8 billion crypto theft, with $3 billion in assets frozen. The exchange says user funds are safe as investigators trace funds. First seen on hackread.com Jump to article: hackread.com/binance-probes-5-billion-crypto-hack-3-billion-frozen/ also interesting: Hackers steal $305M from DMM Bitcoin crypto exchange Krypto-Rekordraubzug von Nordkorea gesteuert? Bybit Heist Fuels Record Crypto-Theft Surge, Says CertiK ‘White…
-
CyberBranche setzt auf die it-sa: Besucherplus von rund 20 Prozent
Mehr als 33.000 Fachbesucher aus über 70 Ländern kamen zur it-sa nach Nürnberg Die it-sa setzt in 2026 ihren Wachstumskurs fort: Mit 1.005 Ausstellern, mehr als 33.000 Fachbesuchern aus über 70 Ländern und einem Besucherplus von rund 20 Prozent gegenüber dem Vorjahr verzeichnet die Veranstaltung eine außerordentlich starke Entwicklung. Volle Hallen, intensive Fachgespräche und… First…
-
OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut
OpenAI says it won’t reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans, as well as Business Premium, and it also promised to keep Dots usage independent. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-doubles-chatgpt-pro-usage-limits-after-backlash-over-planned-50-percent-cut/ also interesting: Cybersecurity Snapshot: F5 Breach Prompts Urgent U.S. Gov’t Warning, as OpenAI Details Disrupted ChatGPT Abuses…
-
CIOs and HR Leaders Must Redesign Work for AI
Survey: Organizations Must Clarify Accountability as Leadership Roles Shift. AI is changing how work is divided and decisions are made, while many organizations still haven’t clarified who owns AI-related choices and outcomes. CIOs can work with HR and business leaders to redesign workflows, set decision rights and prepare managers for the change. First seen on…
-
Binance probes potential $5.8 billion crypto-theft hack
Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/binance-probes-potential-58-billion-crypto-theft-hack/ also interesting: Bybit Theft Drives Record-Breaking $2bn Haul for North Korea Crypto Theft in 2025 Concentrated in Fewer, Larger Breaches…
-
Lawsuit: ChatGPT Dispensed Fatal Medical Advice to Woman
Litigation Is Latest Against OpenAI Alleging AI Chatbot Safety, Danger Risks. OpenAI is facing a lawsuit alleging that inaccurate and dangerous medical advice dispensed by its artificial intelligence chatbot ChatGPT coached an epileptic young woman to drastically reduce and discontinue doses of a doctor-prescribed antiseizure drug, resulting in her preventable death. First seen on govinfosecurity.com…
-
Critical UEFI Flaw Exposes Systems to Pre-Boot Attacks
Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load. A critical buffer overflow in TianoCore’s EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute code during PXE network boot before OS security checks begin, exposing systems to pre-boot compromise despite an upstream source fix. First seen on govinfosecurity.com Jump to…
-
US Probes Suspected Hack Behind Military Base Freezer Failures
The Pentagon treats August freezer failures at US military bases as a suspected hack and is working with French investigators after a supermarket attack. The Pentagon is investigating freezer failures that spoiled food at US military bases in August as a suspected cyberattack, according to four officials who spoke to Reuters. One official said US…
-
Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion
Binance probes suspicious crypto transfers worth up to $5.8 billion as Tether and Circle freeze $1.79 billion in stablecoins linked to the activity. Binance is investigating a potential security incident after billions of dollars in cryptocurrency moved from wallets linked to the exchange on October 29. The transfers raised concerns about a possible hack, while…
-
Binance pauses withdrawals as hackers suspected of stealing billions in crypto
Some estimates say hackers stole billions in crypto from Binance, the world’s largest cryptocurrency exchange, during a cyberattack on Thursday. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/29/binance-pauses-withdrawals-as-hackers-suspected-of-stealing-billions-in-crypto/ also interesting: WazirX Confirms INR Funds Secure Despite $230 Million Cyberattack Stablecoin Bank Hit by Cyberattack, Loses $49.5M to Hackers Abracadabra Cyberattack: How Hackers Drained $13M from…
-
Rethinking Cybersecurity Awareness in the AI Era
This installment of the Reporters’ Notebook video series discusses some of the trends and topics from Cybersecurity Awareness Month, from using AI for better training to educating next-generation workforces on modern risks and emerging threats. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/rethinking-cybersecurity-awareness-ai-era also interesting: Not all cuts are equal: Security budget choices disproportionately impact…
-
Anthropic-Themed Phishing Emails Bypass Top Security Tools
Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/anthropic-phishing-emails-bypass-security-tools also interesting: AWS customers face massive breach amid alleged ShinyHunters regroup Top 12 ways hackers broke into your systems in 2024 Privacy Roundup: Week 7 of Year…
-
Polymarket halts trading after crypto-draining script breach, $2.5M traced
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/polymarket-halts-trading-after-crypto-draining-script-breach-25m-traced/ also interesting: AWS customers face massive breach amid alleged ShinyHunters regroup How defenders use the dark…
-
Japan Airlines suffers third-party data breach exposing passenger info
Japan Airlines (JAL) has announced that a data breach at Amadeus’s Passenger Service System exposed the data of about 92,000 customers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info/ also interesting: 6 ways hackers hide their tracks ApolloMD data breach impacts 626,540 people Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit…
-
Japan Airlines suffers third-party data breach exposing passenger info
Japan Airlines (JAL) has announced that a data breach at Amadeus’s Passenger Service System exposed the data of about 92,000 customers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info/ also interesting: 6 ways hackers hide their tracks ApolloMD data breach impacts 626,540 people Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit…
-
Hugging Face malware campaign returns to hijack GPUs for crypto mining
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a NetSupport RAT. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining/ also interesting: Supply…
-
Breach Roundup: Apparently Chinese Hackers Deploy PHP2Shell
Tags: ai, breach, cctv, china, cybercrime, defense, exploit, flaw, hacker, north-korea, oracle, ransomware, spy, ukraineAlso, Hackers Scan for Newly Patched Oracle Flaw and Chinese Cameras Spy Ukraine. This week: PHP2Shell exploits, a bulletproof host shot and an Oracle flaw. Ukrainian man imprisoned for ransomware, AfD breach, Ukraine warned about Dahua cameras, a defense contractor aided North Korean IT workers, Magecart hijack, African cybercrime and Aokigahara stealer targeted AI credentials.…
-
Linux-Lücke: Claude schreibt Root-Exploit, Ubuntu und RHEL ohne Patch
Eine schwere Sicherheitslücke im Linux-Kernel ermöglicht unter bestimmten Bedingungen Angriffe aus der Ferne. Es ist Patch-Zeit. First seen on golem.de Jump to article: www.golem.de/news/linux-luecke-claude-schreibt-root-exploit-ubuntu-und-rhel-ohne-patch-2610-214664.html also interesting: Hacker nutzen alte Windows-Sicherheitslücke aus Microsoft tut nichts Hacker nutzen gravierende Schwachstelle bei SAP S/4HANA aus Cl0p nutzt Schwachstelle bei Oracle aus Ivantis EPM-Systeme anfällig für Angriffe
-
Leaked DHS employee archive, Icepick, faces challenges to stay online
Tags: data-breachA DHS contractor requested its removal, while a social media site blocked links to it. It was offline for a spell before finding a new home. First seen on cyberscoop.com Jump to article: cyberscoop.com/dhs-employee-breach-icepick-database-takedown/ also interesting: Third Parties and Machine Credentials: The Silent Drivers Behind 2025’s Worst Breaches Average global data breach cost now $4.44…
-
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn’t.There’s a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are using…