ICYMI: 2026-10-22
Latest Headlines
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook
Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts
eMudhra Exits Global SSL/TLS Certificate Business Following the Vulnerability Disclosure
Claude Security Now Scans Repositories Continuously to Find Flaws and Track Fixes
A New Extortion Gang Is Naming Companies on the Dark Web and Counting Down to Data Leaks
Hackers Were Targeting Critical PHP Vulnerabilities Days Before They Were Patched
Hackers Planted Malware on Japanese Cloud Servers, Forcing the Provider to Shut Down Its Service
North Korean Hackers Use Post-Quantum Encryption to Hide New Malware From Security Tools
A Hacker Tried to Turn an AI Chatbot Into a Tool for Attacking Other Servers
LiteLLM release pipeline hacked to distribute info-stealer malware
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Machine speed attacks require machine speed detection and response
Amazon says PHP2Shell exploitation began 4 days before patches
GitLab warns of new max severity code execution vulnerability
Authorities disrupt nearly 11,000 cybercrime networks in Africa
– MTZ