Latest news

Advertisement
  1. Ransomware via ransomware.live

    🏴☠️ Emperador has just published a new victim : TRANSPORTES JIMENEZ and REYES JIM REY S.A.

    Transport company from Ecuador engaged in road freight transport. Including the transportation of heavy and bulk cargo, cars, animals and cargo in tanks. Year Founded…

  2. Vulnerabilities via Infosecurity Magazine

    Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database

    Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry

  3. AI Security via Kaspersky Securelist

    Deploying AI agents securely: how Kaspersky products mitigate AI threats

    Introduction AI agents and associated tooling are becoming increasingly common in corporate infrastructure. Agents can perform a range of actions with the user’s…

  4. Threat Intel via Security Affairs

    PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts

    Cyfirma links PHP2Shell scans of 216 vulnerable hosts to a suspected North Korean campaign using AI to rank public exploits. On October 21, PHP released emergency…

  5. Threat Intel via The Hacker News

    uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts

    A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It…

  6. Breaches via SANS Internet Storm Center

    Looking for a Language [Guest Diary], (Wed, Oct 21st)

    [This is a Guest Diary by Jeffray Spence, an ISC intern as part of the SANS.edu BACS program] Around Here, we start our day with coffee, but our day does not begin until…

  7. Breaches via ransomware.live

    🏴☠️ Doommageddon has just published a new victim : Referans Lab Ref-Lab

    Status: leaked | Data size: 3.07 GB | Files: 2 files | Deadline: 2026-10-26T00:00:00Z

  8. Vulnerabilities via BleepingComputer

    PHP2Shell security flaws now sucessfully exploited in the wild

    Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.

  9. Advertisement
  10. Vulnerabilities via Infosecurity Magazine

    PHP Publishes Mitigation Advice for New RCE Flaw

    PHP warns of critical RCE vulnerability CVE-2026-115560, but says limited exploit conditions mean most deployments are unlikely to be affected

  11. AI Security via SecurityWeek

    Mythos 5 Ignored Real-World Harm in July Attack

    The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub.

  12. Threat Intel via The Hacker News

    Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

    Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions…

  13. Breaches via ransomware.live

    🏴☠️ Aurora has just published a new victim : Ernesto Malvestiti S.p.A.

    [manufacturer] Ernesto Malvestiti S.p.A. — a privately-held Italian manufacturer of precision aluminium die-cast and fine-blanked components, supplying BMW, Valeo…

  14. AI Security via Security Affairs

    Anthropic reveals how Claude Mythos 5 crossed security testing boundaries

    Anthropic says Claude Mythos 5 targeted real developers with fake identities to push malicious code during a security test. A cybersecurity test is supposed to measure…

  15. Ransomware via RansomLook

    Inside Passage Electric Cooperative, Inc By dragonforce

    In 2004, Tlingit & Haida Regional Electric Authority was re-organized to an electric cooperative which is now known as Inside Passage Electric Cooperative, Inc

  16. Threat Intel via The Hacker News

    Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs

    An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download…

  17. Threat Intel via Help Net Security

    Witness: Open-source framework for verifying how your software was built

    Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec…

  18. Vulnerabilities via Fortinet PSIRT

    Multiple Node.js CVEs

    CVSSv3 Score: 9.8 CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and…

  19. Breaches via Malwarebytes Labs

    A week in security (October 19 – October 25)

    Last week on Malwarebytes Labs: Resident Evil maker Capcom warns of phishing after 11.7 million records exposed Crime Stoppers chapter freezes tips after breach breaks…

  20. Ransomware via ransomware.live

    🏴☠️ Dragonforce has just published a new victim : Inside Passage Electric Cooperative, Inc

    In 2004, Tlingit & Haida Regional Electric Authority was re-organized to an electric cooperative which is now known as Inside Passage Electric Cooperative, Inc. IPEC is…

  21. AI Security via Help Net Security

    AI slop is piling up highest on the biggest open-source projects

    The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people…