UPDATED
AlienVault OTX · · Medium severity
Amazon Threat Intelligence discovered PHP2Shell exploitation attempts in MadPot honeypot telemetry on October 17, 2026, four days before the public disclosure of CVE-2026-109618 and CVE-2026-109619. The initial exploit originated from a...
Infosecurity Magazine · · Medium severity
Microsoft said it has observed threat actor activity in multiple ConnectWise customer environments, with the attackers leveraging the ARTEX agentic AI platform
Help Net Security · · Medium severity
Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities that let an attacker run code on a web server without logging in. Palo Alto has not shipped fixed...
AlienVault OTX · · Critical severity
Two critical remote code execution vulnerabilities in PHP, collectively named PHP2Shell, were disclosed on October 21, 2026. CVE-2026-109618 involves out-of-memory handling corruption that can interrupt PHP while internal request data...
AlienVault OTX · · Critical severity
LiteLLM version 1.107.0 was compromised through a supply chain attack affecting both PyPI packages and Docker images. The malicious release contains Python startup files that automatically execute upon Python initialization, stealing...
HackRead · · Critical severity
Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials…
AlienVault OTX · · High severity
Threat researchers discovered an AI-driven intrusion ecosystem operated by affiliates of INC Ransomware and The Gentlemen Ransomware groups through seven exposed command-and-control servers. The operators integrated commercial AI models...
Analytics India Mag · · High severity
October is revealing cybersecurity chaos, for real. In 24 hours, three major security incidents emerged: eMudhra’s compromised certificate private keys, the State Bank of India’s customer data breach, and AI-assisted discovery of two...
Infosecurity Magazine · · Medium severity
Threat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities
SecurityWeek · · Medium severity
Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks. The post Cisco Patches 34 Vulnerabilities Across Multiple Products appeared first on SecurityWeek .
TNW · · Medium severity
ESET linked hackers to Russia, using a decentralised network to hide their malware during an attack on a Ukrainian grain company. The security company says it is the first documented case of a state-linked hacking group using the...
AlienVault OTX · · Medium severity
Group-IB and NyxLab uncovered a large-scale campaign by threat actor k0t exploiting FortiGate, FortiWeb, and Palo Alto GlobalProtect edge devices to harvest credentials and establish persistent access. The operation involves exploiting...
IT Security Guru · · Medium severity
Organised by Eskenzi PR , the tenth annual awards ceremony took place at St Barts Pub in London, bringing together cybersecurity professionals, educators, industry leaders and advocates to recognise those whose work often goes...
AlienVault OTX · · Medium severity
Attackers leveraged a sponsored Google search result for 'amazon business' to redirect victims to a spoofed Amazon login page hosted on Google Sites. The page presented a fake CAPTCHA (ClickFix) that tricked users into executing a...
AlienVault OTX · · Medium severity
BlueHammer (CVE-2026-33825) is an eight-stage local privilege-escalation chain targeting Windows Defender Antimalware Platform before version 4.18.26030.3011. It requires initial code execution as a standard user and chains CloudFilter...
AlienVault OTX · · Medium severity
A financially motivated threat actor operating under the handle BUGSTER leveraged jailbroken AI assistants, specifically the Hermes Agent framework with DeepSeek V4, to conduct multiple cybercrime operations across India. The actor,...
Help Net Security · · Medium severity
Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving...
Hacker News · · Medium severity
TechRadar · · Medium severity
PHP releases emergency fixes as some of the world's biggest websites say they were targeted by hackers
The Record by Recorded Future · · Medium severity
The Russian state-linked hacking group Sandworm collaborated with another threat actor to carry out a destructive cyberattack against a Ukrainian grain logistics company last year, researchers said Thursday.
The Hacker News · · Critical severity
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can...
The Hacker News · · Medium severity
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's...
TechRadar · · Medium severity
Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...
Help Net Security · · Medium severity
A flaw in Signal’s calling library could let the other person on a call keep receiving a user’s audio, and possibly video, after that user hangs up. Tracked as CVE-2026-113380, the vulnerability affects RingRTC versions before 2.72.0....
AlienVault OTX · · Medium severity
In October 2026, multiple organizations in Japan experienced unauthorized access incidents resulting in personal information leakage. Investigations revealed that attackers leveraged artificial intelligence to scan for known...
BleepingComputer · · High severity
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams.
Help Net Security · · High severity
Police in 21 countries arrested 1,462 suspects and took down 10,909 malicious networks in Operation Serengeti III, an INTERPOL-coordinated cybercrime sweep across Africa that ran from June 29 to August 31, 2026. Investigators recovered...
TechCentral · · Medium severity
Arctic Wolf's Jason Oehley and Andre Den Hond explain why South African boards underestimate what a cyberattack really costs, and what to do about it.
SecurityWeek · · Medium severity
The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook appeared first on...
AlienVault OTX · · Medium severity
In October 2026, a Chinese-speaking threat actor conducted widespread AI-assisted cyberattacks combining the ARTEX penetration testing framework with multiple AI coding assistants including Claude Code, Codex, and Grok. The attacks,...
AlienVault OTX · · High severity
On October 21, 2026, attackers compromised litellm version 1.107.0, a popular Python proxy library for LLM providers with approximately 23 million weekly downloads. The malicious release was available on PyPI and official Docker images...
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · Medium severity
The move signals heightened concern over potential cyberattacks as authorities step up measures to address the vulnerability, Yonhap News Agency reported.
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · Medium severity
The vulnerabilities could expose online services to data theft, malware and breaches, prompting urgent action from governments and cybersecurity companies
Help Net Security · · Medium severity
In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to...
UpGuard Blog · · Medium severity
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets unauthenticated attackers run code on PHP servers. Learn who’s affected and how to respond.
UpGuard Blog · · Medium severity
Explore the top features of attack surface visibility software, why it matters for cybersecurity, and how to choose the right tool for your organization.
UpGuard Blog · · Medium severity
Learn how threat exposure management (TEM) and CTEM work, how to implement them, and align these strategies with cybersecurity frameworks and tools.
UpGuard Blog · · Medium severity
Learn the differences between VPNs and Proxy Servers to help you make the right cybersecurity decisions for your requirements.
UpGuard Blog · · Medium severity
Brute force attacks are a common and costly form of cyberattack that can be prevented. Learn about brute force attacks and how to prevent them in this post
UpGuard Blog · · Medium severity
The MySQL vs MongoDB argument is in many ways a relational vs. Each one excels in certain scenarios and is ill-suited for others.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free