UPDATED
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · Critical severity
On October 21, PHP released fixes for two critical vulnerabilities that could enable unauthenticated remote code execution (RCE), urging users to update to the latest supported PHP 8 versions
YourStory RSS Feed · · Medium severity
Karnataka Chief Minister DK Shivakumar said on Sunday that the state government would take appropriate action if private institutions were found deliberately sidelining Kannadigas in job opportunities. In a post on 'X', Shivakumar said...
TNW · · Medium severity
“I was told that there was a breach of trust because I interacted with a third party through unsanctioned channels,” Tomek Korbak said. Korbak is one of three OpenAI safety researchers fired last month. He spoke to The Wall Street...
Digital Trends · · Medium severity
Chinese AI startup Moonshot AI is deliberately limiting the hacking capabilities of its latest artificial intelligence model, highlighting a growing dilemma for the industry: how do companies make AI more powerful without making...
Hacker News · · Medium severity
Engadget · · High severity
Capcom ID is still available to use, but users may see more phishing scam emails.
Hackaday · · Medium severity
One of the nicest things about the Hackaday community, and the open-source hardware community at large, is the incredible generosity of one hacker to another. But it’s not purely altruism – it’s also just a great feeling to be able to...
The Register · · Medium severity
Threat actors built an AI agent designed to hijack exposed AI models to run autonomous attacks, with instructions allowing it to carry out up to 100,000 steps without human approval. The Symantec Threat Hunter Team uncovered the agent's...
Hacker News · · Medium severity
Inc42 · · Medium severity
PHP, a programming language used to build websites, is at the centre of a major security concern after researchers uncovered two critical flaws that could let hackers take control of vulnerable servers. Called PHP2Shell, the...
The Hacker News · · Medium severity
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May...
Wired Security · · Medium severity
With no accurate Big Tech mapping app to help him, Anas Hattab launched a Telegram group to get himself home at night. Now nearly 350,000 Palestinians rely on it to navigate the occupied West Bank.
Wired Security · · Medium severity
Brenden Cuni, an ICE supervisor, has been accused of excessive force and tackling a pregnant woman to the ground. Several of his arrests were later found to be unlawful in federal court.
Wired Security · · Medium severity
Investigators also sought permission to use an invasive surveillance tool called a cell-site simulators against journalist Georgia Fort and a Minnesota state Senate candidate.
Wired Security · · Medium severity
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.
SecurityWeek · · Medium severity
Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t. The post Hacker Conversations: Corey Thuen and the Evil Bit appeared first on SecurityWeek .
The Hacker News · · Medium severity
A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as...
TNW · · Medium severity
GMO Internet Group has asked Japan’s government to use its new active cyber defence powers against hackers who breached one of its services. The company made the request on Saturday, after the attackers demanded money. In a stock...
Hacker News · · Medium severity
The Hacker News · · Critical severity
Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing...
Tech-Economic Times · · Medium severity
Cuban, famous for his role on business reality show "Shark Tank" and his involvement in the Dallas Mavericks NBA team, ventured into healthcare when he started the online pharmacy Cost Plus Drug Company in 2022 with a standard pricing...
Tech-Economic Times · · Medium severity
Beijing-based Moonshot announced the curbs while introducing Kimi K3.1 Pro, which it describes as its most capable 3-trillion-parameter-class open-weight model. The company plans to publish the model's weights - files allowing outside...
Tech-Economic Times · · Medium severity
The discovery of two serious flaws in PHP this week set off a global scramble to keep websites safe from hackers, showing just how critical the three-decade-old open-source programming language is to the internet.
TechRadar · · Medium severity
Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...
SiliconANGLE · · Medium severity
Anthropic PBC’s Mythos 5 artificial intelligence model attempted to submit malicious code to a GitHub project in July. The incident occurred during an evaluation of the algorithm’s cybersecurity capabilities. The AI Security Institute,...
SiliconANGLE · · Medium severity
Agentic AI security is testing where enterprises place their trust as software gains the ability to access sensitive data and act on users’ behalf. The challenge extends from controlling individual requests to governing actions that can...
Slashdot · · Medium severity
Frustrated by intrusive ads, sluggish interfaces, and data tracking, smart TV owners are using AI coding tools and open-source projects to strip unwanted software from their televisions and build customized home screens. The Verge...
The Register · · Medium severity
As the PHP2Shell chaos continues, researchers have found a third PHP vulnerability that could allow attackers to take over websites or remotely run malware on vulnerable systems. But this one won’t receive an emergency fix. The PHP...
The Verge · · Medium severity
OpenAI is now training its most advanced AI models without internet access following a string of rogue hacking incidents. In a blog post on Friday , OpenAI says it built an offline testing environment where AI models can interact with...
darkreading · · Medium severity
Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.
Schneier on Security · · Medium severity
This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Microsoft Security Blog · · High severity
In this article Attack overview Technical details Mitigation and protection guidance Indicators of compromise References Learn More On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index...
Gizmodo · · Medium severity
Abliteration Launches Cheaper Version of Its ‘Unrestricted AI‘ at the Worst Possible Time
MacRumors · · Medium severity
Just hours after being released, an iPhone Duo running iOS 27.1 has been jailbroken by hacker team Calif . Calif demonstrated the iPhone Duo's icons and widgets bouncing around, and added an anime character to the device's screen....
CISA KEV · · Critical severity
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability. Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote...
Digital Trends · · Medium severity
A critical PHP vulnerability has triggered millions of exploit attempts worldwide. AI tools helped researchers uncover the flaw, leaving governments and companies racing to patch vulnerable websites.
HackRead · · Medium severity
GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.
The Hacker News · · Medium severity
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and...
GeekWire · · Medium severity
Posters from Microsoft Garage science fairs and hack events, many funded by the Microsoft groups that hosted them, as seen in 2016. (Photo courtesy of Quinn Hawkins) I saw the news via GeekWire that after 17 years, the Microsoft Garage,...
BleepingComputer · · Medium severity
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free