UPDATED
Graham Cluley · · High severity
A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang. Detectives have linked the man to the attack against blood-testing firm Synnovis, that disrupted London...
The Hacker News · · Medium severity
An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to...
HackRead · · Medium severity
Compare five healthcare software development firms and learn how to build secure, compliant products under HIPAA, GDPR and FDA requirements.
BleepingComputer · · Medium severity
Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today.
SecurityWeek · · High severity
Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals. The post 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach appeared first on...
The Hacker News · · Medium severity
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow...
The Hacker News · · Medium severity
court on Monday granted the U.S. government's request to detain a former OpenAI engineer accused of planting a recording device in an executive conference room at the company's San Francisco office to allegedly steal sensitive secrets....
Help Net Security · · Medium severity
Mastercard has announced Stablecoin Security, a new risk intelligence solution, with Borderless.xyz and Keyrails as initial partners. As stablecoins play a growing role in cross-border and business-to-business payments, financial...
TechCentral · · Medium severity
A researcher says the agents worked from start to finish without any human supervision at all.
The Hacker News · · Medium severity
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader. According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware...
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · Medium severity
As businesses deploy autonomous systems to automate operations, Microsoft says organisations must rethink security to address risks posed by AI agents.
StartupDaily · · Medium severity
Rogue AI can hack Australia with fewer penalties than hacked firms face.
Cybersecurity Dive - Latest News · · Medium severity
Managed service providers said an attacker used compromised credentials to gain access to tenants.
BleepingComputer · · High severity
disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.
BleepingComputer · · Medium severity
Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week.
Slashdot · · Medium severity
Longtime Slashdot reader fahrbot-bot shares a report from ProPublica: A few months into President Donald Trump's second term, political appointees at the Department of Homeland Security (DHS) wanted Cybersecurity and Infrastructure...
The Register · · Medium severity
Dutch grocery giant Ahold Delhaize, which operates US supermarket chains Food Lion, Giant Food, and Stop & Shop, said it proactively took IT systems offline following a cyberattack, affecting most of its US and European brands. The...
Slashdot · · Medium severity
An anonymous reader quotes a report from The Verge: A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security firm Norforge. Though Norforge...
The Record by Recorded Future · · Medium severity
WhatsApp argued that NSO Group violated a 2025 injunction against using the messaging app to spread spyware. A federal judge said WhatsApp hurt its case by not revealing enough information.
Wired Security · · Medium severity
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a “blank check.”
BleepingComputer · · Medium severity
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the...
TechCrunch · · Medium severity
OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept...
BleepingComputer · · Medium severity
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage.
News – MeriTalk · · Medium severity
Ron Wyden, D-Ore., urged the Trump administration to address a privacy gap that could let foreign adversaries and hackers monitor visits to sensitive federal websites. 19 letter to the Cybersecurity and Infrastructure Security Agency...
The Hacker News · · Medium severity
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the...
CIO.com · · Medium severity
Software supply chain risk used to have a fairly contained definition: open-source packages, build pipelines, and the occasional compromised maintainer account. An agent assembles capability at runtime, pulling in models, MCP servers,...
The Register · · Critical severity
Updating your software only gets you so far. A scary scenario - security fixes themselves being bypassed - is becoming more common, according to AI penetration-testing startup Terra Security, which found a sharp rise in reported patch...
SecurityWeek · · Medium severity
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures. The post Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks appeared first on...
BleepingComputer · · Medium severity
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.
The Hacker News · · Medium severity
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math...
The Record by Recorded Future · · Medium severity
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.
Ars Technica · · High severity
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has begun notifying victims impacted by a recent data breach of driver’s license and motor vehicle data, but not everyone whose information was stolen will receive an...
HackRead · · High severity
Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations.
TechRadar · · Medium severity
Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...
Infosecurity Magazine · · Medium severity
Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report
SecurityWeek · · Critical severity
Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16. The post Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack appeared first on SecurityWeek .
AlienVault OTX · · Critical severity
Multiple Plex Media Server vulnerabilities announced in September 2026 are being actively exploited to deploy cryptominers and proxy software. The exploitation chains together four CVEs to achieve remote code execution on vulnerable...
AlienVault OTX · · Medium severity
Between April and July 2026, attackers compromised AOMEI Technology's update and notification infrastructure to distribute malware to users of AOMEI Backupper, backup software used by over 100 million people worldwide. During three...
TechRadar · · Medium severity
US federal court work hit after BAE Systems cyberattack affects bankruptcy court systems
darkreading · · Medium severity
Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's Greg Pollock explains what...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free