UPDATED
Analytics India Mag · · Medium severity
Clément Delangue, Co-founder and CEO of Hugging Face , has criticised Netflix’s documentary on the cyberattack involving OpenAI’s AI agents, accusing the filmmakers of exaggerating the risks of artificial intelligence while overlooking...
Help Net Security · · Medium severity
OVHcloud, the French cloud computing and web hosting company, alerted customers that a hacker tampered with its open-source command-line interface (CLI) tool to spread information-stealing malware. OVHcloud CEO Octave Klaba disclosed...
Infosecurity Magazine · · Critical severity
The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident
Help Net Security · · Medium severity
Apple’s new anti-tracking protections in Safari and WebKit, the open-source web engine used by Safari, block connections to identity resolution services that turn email addresses into persistent tracking identifiers. How email addresses...
BleepingComputer · · Critical severity
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.
CSO Online Security · · Medium severity
Attackers are increasingly abusing trusted SaaS platforms, cloud infrastructure, and identity systems to blend malicious activity into legitimate enterprise traffic. Adversaries are pushing command and control (C2) through...
Fast Company Tech · · Medium severity
In the wake of high-profile hacking incidents involving advanced artificial intelligence agents, some politicians and business executives have been calling for an AI kill switch : a safeguard that could shut down these AI systems in an...
Hackaday · · Medium severity
It’s plenty easy to do lots of vision tasks with a single camera, but using two cameras gives you lots of magical abilities, like depth perception! If you’d like to experiment with stereo vision, you might enjoy this board that...
Tahawul Tech · · Medium severity
Cybersecurity leaders joined TahawulTech.com and Certes in Dubai to explore data-centric security, crypto-agility and quantum readiness under the roundtable theme “Devalue the stolen data”. The post Certes puts data protection beyond...
DQ : Latest Posts · · Critical severity
As AI agents gain access to enterprise systems, security architectures built around human behaviour and response times face new challenges. Agents can operate at machine speed and scale, potentially amplifying the impact of a...
The Hacker News · · Medium severity
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian cybersecurity firm Solar, the activity has been attributed to a threat cluster...
The Hacker News · · Medium severity
Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that's collectively called...
SecurityWeek · · Critical severity
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws appeared first on SecurityWeek .
AlienVault OTX · · High severity
The Gentlemen is a Russian-speaking ransomware-as-a-service group that emerged in mid-2025 after operating as an affiliate of LockBit and Qilin. The group offers affiliates up to 90% of ransom revenue and has claimed over 800 victims...
AlienVault OTX · · Medium severity
Threat actors are conducting sophisticated campaigns targeting Google Cloud Platform environments through phishing attacks via sponsored search ads. Attackers compromise privileged user credentials using fake login pages, then...
AlienVault OTX · · Medium severity
A newly observed multi-stage phishing kit named Wazza has been actively targeting Microsoft 365 accounts since early July 2026. The campaign delivers phishing emails from compromised accounts containing PDF lures with business themes...
AlienVault OTX · · Medium severity
Midnight Mimosa is a widespread Android malware campaign involving malicious applications preinstalled in firmware of low-cost MediaTek-based devices, with infections observed across more than 150 countries. The campaign leverages...
AlienVault OTX · · Medium severity
Between May and September 2026, a Russian-speaking operator systematically targeted Ukraine's state data-exchange infrastructure by exploiting Log4Shell vulnerabilities in Graylog servers. The attacker swept 9.1 million Ukrainian IP...
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · High severity
A flaw during a key generation event led to weak keys being published to browser root stores, prompting the company to work with affected customers and browser root programmes on replacement certificates.
SecurityWeek · · Medium severity
Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader. The post Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI appeared first on SecurityWeek .
Ubuntu security notices · · Low severity
USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root"...
YourStory · · High severity
State Bank of India (SBI) has disclosed a suspected customer data breach, saying it found 3,897 records containing personal information on the dark web. The country’s largest public sector lender confirmed the findings in a stock...
Help Net Security · · Critical severity
DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One...
The Hacker News · · Critical severity
PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on the CVSS v4.0 scale but has not described. Security researchers at watchTowr say the...
Analytics India Mag · · Medium severity
Bengaluru-based digital trust company eMudhra generated eight intermediate certificate authority (CA) private keys with minimal randomness, which attackers could recover almost instantly. Six of the affected certificates were authorised...
SecurityWeek · · Medium severity
The first phase will cover up to 500 utilities, which will get free security tools, equipment, deployment help and training. The post Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities appeared first on...
Tech.eu · · Medium severity
Norwegian AI startup Jenz has raised €540,000 in pre-seed funding from Antler and Ada Ventures . The company has also received a NOK 1 million (€92,000) startup grant from Innovation Norway . Founded by Remi Bjørnestad (CEO), Jo Schou...
The Register · · Medium severity
An automotive tech startup claims that its IT systems were attacked by individuals trying to steal its driving model, and that those attacks came from an IP address associated with a rival in the space. The tech startup, IQ.Lvbs,...
BleepingComputer · · Medium severity
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites.
BleepingComputer · · Medium severity
Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for...
TechRadar · · Medium severity
Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...
Ubuntu blog · · Medium severity
Introduction The private keys of the eMudhra Certificate Authority (CA) have been demonstrated on 20 October 2026 to have been compromised. The Ubuntu Security Team has released updates to the system PKI (Public Key Infrastructure) root...
Ubuntu security notices · · Medium severity
It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacker could possibly use this issue to inject arbitrary mount options into a privileged mount, resulting in a...
Ubuntu security notices · · Medium severity
USN-8927-1 fixed vulnerabilities in curl. This update provides the corresponding fixes for Ubuntu 26.10. Original advisory details: It was discovered that curl, when built with GnuTLS support, had an out-of-bounds read in the WebSocket...
Ubuntu security notices · · Medium severity
It was discovered that libXtst did not properly handle certain RECORD replies from the X server. A malicious X server could possibly use this issue to cause libXtst clients to crash, resulting in a denial of service. (CVE-2026-94286)...
Ubuntu security notices · · Medium severity
It was discovered that the Perl XS::Parse::Keyword module did not correctly handle certain inputs. If a user or automated system were tricked into receiving specially crafted input, an attacker could cause a denial of service.
Ubuntu security notices · · Medium severity
It was discovered that Squid incorrectly handled certain HTTP Transfer- Encoding headers. An attacker could possibly use this issue to perform HTTP request smuggling attacks, bypass security mechanisms, or poison web caches....
Ubuntu security notices · · Medium severity
It was discovered that Protocol Buffers did not properly handle negative varint lengths or enforce recursion limits when parsing input in the PHP library. An attacker could possibly use this issue to cause applications using Protocol...
Ubuntu security notices · · Medium severity
Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues. .NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.13 in...
Ubuntu security notices · · Medium severity
This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised. In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free