UPDATED
CISO Mag · · Medium severity
By Alex Holden, Chief Information Security Officer Hold Security For nearly two decades I made the Dark Web a place to be; however, I am a hacker nor a cyber threat actor. I am a cyber threat intelligence professional with a deep...
BleepingComputer · · High severity
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.
SecurityWeek · · Medium severity
A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week. The post BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts appeared first on...
Help Net Security · · Medium severity
Three weeks before Americans vote in the 2026 midterm election, fraudsters are borrowing candidate names, logos and slogans to collect fake donations and harvest personal data, the FBI warned. “The FBI warns the public that scammers...
CSO Online Security · · Medium severity
The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack , in which an attacker operating inside a virtual machine (VM) could cross the isolation boundary and access the underlying host. Dubbed PwnEscape...
Schneier on Security · · Medium severity
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most...
SecurityWeek · · Critical severity
Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek .
SecurityWeek · · Medium severity
Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. The post OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks appeared first on...
Phoronix · · Medium severity
Linux 7.4 is enabling support for a new Intel CPU feature for providing safety against possible denial of service attacks using Trust Domain Extensions "TDX" VMs. The new feature is Intel Instruction Timeout and previously...
CSO Online Security · · Critical severity
Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected Chinese espionage group exploited a critical zero-day to gain root control, access credential...
BGR · · Medium severity
A devastating cyberattack on French supermarkets shows how everyday connected systems can become unexpected targets, with consequences far beyond data theft.
Help Net Security · · Medium severity
Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source for Arch Linux and...
HackRead · · High severity
The Burger King Japan data breach occurred between October 2 and 7, exposing emails, birth dates and other…
SecurityWeek · · Critical severity
Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek .
Tech-Economic Times · · Medium severity
Concerns about AI guardrails have soared after models developed by OpenAI and Anthropic were involved in security incidents during testing, piling on pressure to regulate the technology.
CERT Polska · · Medium severity
W oprogramowaniu NordVPN wykryto podatność typu Incorrect Authorization (CVE-2026-106030).
Help Net Security · · Medium severity
Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams. “With scams growing harder to...
AI coding token costs are on track to rival human payroll | InfoWorld · · Medium severity
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are calling for tougher rules and the establishment of a new international body overseeing...
CSO Online Security · · Medium severity
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are calling for tougher rules and the establishment of a new international body overseeing...
CIO Africa · · Medium severity
Morocco’s role as a digital link between African and European networks is drawing more cross-border cyber threats, Mastercard said while...
CSO Online Security · · Medium severity
Fresh research suggests recent panic over AI-generated malware may be overblown. Last month Anthropic detailed how Russia-linked cyberespionage group Midnight Blizzard used Claude to rebuild malware each time security tools flagged its...
BleepingComputer · · Medium severity
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts.
The Hacker News · · Critical severity
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The...
AlienVault OTX · · Medium severity
An espionage campaign tracked as CL-UNK-1211 targeted government entities and state-affiliated infrastructure between October 2025 and April 2026, utilizing AI-generated payloads containing conversational annotations suggesting LLM or...
AlienVault OTX · · High severity
KGB RAT is a Windows Remote Access Trojan actively promoted on underground forums since late 2025, marketed deceptively as a legitimate administration tool. Sold through a Malware-as-a-Service model with pricing from $150 to $800, it...
AlienVault OTX · · Medium severity
Three exposed directories on infrastructure at 45.142.193[.]132 revealed an AI-orchestrated campaign targeting PaperCut NG/MF print management software. The exposed workbench contained AI-agent instructions, exploit code, operational...
AlienVault OTX · · Medium severity
A malicious cyber actor conducted a proxyjacking campaign, compromising at least 143 network edge devices across 34 countries to force them into residential proxy networks. The attacker exploited vulnerabilities in D-Link ShareCenter...
AlienVault OTX · · Critical severity
On October 15, BeyondTrust disclosed CVE-2026-102764, a vulnerability affecting BeyondTrust Remote Support appliances that enables arbitrary file upload. Mandiant identified ARMORY CASTLE, a suspected PRC-nexus espionage actor,...
AlienVault OTX · · Medium severity
Blackpoint's Adversary Pursuit Group traced a ClickFix intrusion to a previously unclassified modular Windows implant designated Variola. The malware establishes persistent host identity through encrypted storage, maintains...
SecurityWeek · · Medium severity
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company. The post Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis appeared first on SecurityWeek .
Seqrite Blog · · Critical severity
WP2Shell is a critical WordPress Core exploit chain disclosed in July 2026 that can enables pre-authentication remote code execution (RCE) on vulnerable WordPress installations. The chain is particularly significant from a...
· · Medium severity
The AI for Africa Hackathon Challenge gave UJ students hands-on experience developing AI solutions to real-world problems.
BleepingComputer · · Critical severity
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.
The Hacker News · · Medium severity
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of...
Help Net Security · · Medium severity
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift...
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · Medium severity
Suspected China-linked group Armory Castle exploited the flaw in August, prompting calls for swift patching
Help Net Security · · Medium severity
More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Large attacks and distributed targeting...
Tech-Economic Times · · Medium severity
Google warned on Thursday that organizations should prepare for "potential widespread exploitation" after a new bug was found in US cybersecurity firm BeyondTrust's remote support appliances.
BGR · · Medium severity
Phones are getting more expensive, making cheaper alternatives that much more appealing. But it gets risky when you buy no-name knockoffs.
Slashdot · · Medium severity
"Along with the dangers of continuing cyberattacks, the International Monetary Fund (IMF) reports that the threat of an AI market crash is putting the global markets at risk," writes Slashdot reader databasecowgirl, citing the IMF's...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free