Latest news
-
AI Security via Simon Willison
My obituary for programming
My obituary for programming Jeremy Scheff poignantly captures the key loss caused by coding agents for career programmers who enjoyed the puzzle of developing code…
-
Vulnerabilities via Palo Alto Networks Unit 42
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)
We include indicators of activity and mitigations for PAN-OS vulnerability CVE-2026-0257.
-
Ransomware via ransomware.live
🏴☠️ Global secret group has just published a new victim : Rosenberg & Pittinsky
NameCompany: Rosenberg & Pittinsky, LLP | Country: New York, NY 10016 | Website: rpllplaw.com | Revenue: $5 Million | Industry: Legal Services, Law Firm, Real Estate &…
-
Vulnerabilities via Debian Security
DSA-6572-1 ca-certificates - security update
https://security-tracker.debian.org/tracker/DSA-6572-1
-
Breaches via BleepingComputer
Nikkei discloses third data breach in a month, 1.8M records exposed
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.
-
Ransomware via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : chooseultimate.com
Ultimate Health Plans is a local Medicare Advantage Plan based in Spring Hill, Florida, serving vari...
-
Threat Intel via BleepingComputer
WordPress SEO plugin Rank Math compromised to backdoor websites
Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week.
-
Threat Intel via Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare…
- Advertisement
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Vormittag Associates Inc
ERP software and hosting company · USA | Internal network configurations and security credentials of an ERP hosting company; Administrator and remote access credentials…
-
Ransomware via ransomware.live
🏴☠️ Global secret group has just published a new victim : Seminole Schools
NameCompany: Seminole Schools | Domain: internal.seminole.org | Country: Seminole,Florida,US | Website: sps.k12.ok.us | Revenue: $15.5 Million | Industry: Education…
-
Vulnerabilities via Canadian Centre for Cyber Security
Siemens security advisory (AV26-1063)
Serial Number: AV26-1063 Date: October 19, 2026 As of October 15, 2026, Siemens is affected by a vulnerability in the following product: Siemens Software Center Prior to…
-
Vulnerabilities via Canadian Centre for Cyber Security
Eptura security advisory (AV26-1062)
Serial Number: AV26-1062 Date: October 19, 2026 As of October 19, 2026, Eptura is affected by a vulnerability in the following product: Archibus Prior to 2025.02 The…
-
Vulnerabilities via Canadian Centre for Cyber Security
Red Hat security advisory (AV26-1061)
Serial Number: AV26-1061 Date: October 19, 2026 As of October 19, 2026, Red Hat is affected by vulnerabilities in the following products: Fast Datapath for RHEL 10/8/9…
-
Vulnerabilities via Wordfence
PSA: UpdraftCentral Connection Key Compromise Used to Install Malicious Plugins on WordPress Sites
TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer database was…
-
Threat Intel via Dark Reading
'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
-
AI Security via Wired
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a “blank check.”
-
Threat Intel via The Record
Judge denies WhatsApp’s bid to hold spyware maker in contempt for allegedly targeting users
WhatsApp argued that NSO Group violated a 2025 injunction against using the messaging app to spread spyware. A federal judge said WhatsApp hurt its case by not revealing…
-
Threat Intel via The Record
ConnectWise suspends Cloud Backup service after supply chain attack
ConnectWise initially said on Friday that it was investigating “attempts of unauthorized access associated with the ConnectWise Cloud Backup environment,” and confirmed…
-
Threat Intel via Flashpoint
Inside Joint Disruption Week: 28 Arrests and 3.7 Million Scam Accounts Removed
Table Of ContentsTable of ContentsJoint Disruption Week: The ResultsDisrupting the Infrastructure Behind Online FraudContinuing Efforts to Disrupt Scam…
-
Threat Intel via BleepingComputer
Hackers hijack AOMEI update servers to secretly spread malware
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration…