Cybersecurity News: Breaches, Ransomware & Zero-Days

10,162 stories · Updated every 5 minutes · Page 7 of 25

1. Microsoft Teams to get AI-powered, context-aware phishing detection

   BleepingComputer · 24 Oct 2026, 00:24 IST · Medium severity

   Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026.

2. The US wants to fill thousands of acres of public land with AI data centers — land records show 35 data center-related developments are planned so far

   TechRadar · 23 Oct 2026, 23:50 IST · Medium severity

   Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...

3. Moonshot releases Kimi K3.1 Pro and says it cut its hacking skills

   TNW · 23 Oct 2026, 23:49 IST · Medium severity

   Moonshot has released Kimi K3.1 Pro, an upgraded version of its open-weight Kimi K3, with full weights due by 4 November. It says the model nearly matches Claude Opus 5.5 on a coding test. Moonshot also says it removed hacking-related...

4. Reports of PHP bug exploitation attempts grow as experts downplay viability of exploits

   The Record by Recorded Future · 23 Oct 2026, 09:30 IST · Medium severity

   The headline-grabbing bugs known colloquially as PHP2Shell are giving cyber analysts a lot to track — and a lot to debunk.

5. Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0

   CSO Online Security · 23 Oct 2026, 23:29 IST · Medium severity

   Oracle has patched 1295 security vulnerabilities with its October Critical Patch Update Advisory ; six of them scored the highest vulnerability rating of 10.0 on the CVSS version 3.1 scale. The company’s flagship Oracle E-Business Suite...

6. Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

   The Hacker News · 23 Oct 2026, 23:20 IST · High severity

   Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an "Autonomous Red Team Kill Chain...

7. Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0

   La santísima trinidad del 'cloud': muchos logos, poco gobierno | CIO · 23 Oct 2026, 23:26 IST · Medium severity

   Oracle has patched 1295 security vulnerabilities with its October Critical Patch Update Advisory ; six of them scored the highest vulnerability rating of 10.0 on the CVSS version 3.1 scale. The company’s flagship Oracle E-Business Suite...

8. Overlord RAT Uses Fake Legal Notices to Infect Windows PCs

   HackRead · 23 Oct 2026, 23:01 IST · Medium severity

   WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access…

9. The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)

   SentinelOne Blog · 23 Oct 2026, 22:48 IST · Medium severity

   The Good | Courts Sentence Tax Fraudster, Interpol Disrupts African Cybercrime, and Ex-AI Engineer Faces Wiretapping Charges A U.S. district court has sentenced Nigerian national Chukwuemeka Victor Amachukwu to eight years in prison for...

10. CISA KEV: CVE-2026-114625 — Arista VeloCloud Orchestrator actively exploited

    CISA KEV · 23 Oct 2026, 05:30 IST · Critical severity

    Arista VeloCloud Orchestrator SQL Injection Vulnerability. Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO...

11. Microsoft: Windows Server 2016 reaches end of support in January

    BleepingComputer · 23 Oct 2026, 22:35 IST · Low severity

    Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.

12. PHP exploitation moves at slower-than-expected pace, but millions remain at risk

    Cybersecurity Dive - Latest News · 23 Oct 2026, 22:16 IST · Medium severity

    Security researchers flag botnet activity, but successful compromises have yet to break through.

13. Quest Diagnostics confirms data breach exposed patient records

    BleepingComputer · 23 Oct 2026, 22:10 IST · High severity

    American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system.

14. "Today, we hacked what we'd set out to hack: the iPhone."

    Hacker News · 23 Oct 2026, 21:51 IST · Medium severity

15. Dual BIOS: The laptop security feature SMBs don’t know they need

    CSO Online Security · 23 Oct 2026, 21:24 IST · Medium severity

    Every security checklist starts with the basics: strong passwords, multifactor authentication, spotting phishing, and keeping software up to date. All four protect what happens after a laptop starts. But some attackers are more focused...

16. Large businesses’ cybersecurity insurance claims are now less frequent but more expensive

    Cybersecurity Dive - Latest News · 23 Oct 2026, 20:11 IST · Medium severity

    AI-powered attacks and hidden supply-chain weaknesses are making insurers’ work more difficult, according to a new report.

17. PHP shares mitigation for new RCE vulnerability with no patch

    BleepingComputer · 23 Oct 2026, 21:08 IST · Critical severity

    The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.

18. Rand Mutual Assurance probes alleged theft of 1.68 million claim records

    TechCentral · 23 Oct 2026, 20:33 IST · Medium severity

    A hacker claims it has 366GB of data from the insurer that handles injury claims for mineworkers and metalworkers.

19. Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach

    TechCrunch · 23 Oct 2026, 20:30 IST · Medium severity

    Quest is the latest in a series of healthcare technology companies that have been hacked in recent months.

20. A spate of cyber attacks has rocked Japan

    IT Pro · 23 Oct 2026, 20:00 IST · Medium severity

    A spate of cyber attacks has rocked Japan

21. Which VPNs work with the iPhone Duo at launch?

    TechRadar · 23 Oct 2026, 19:45 IST · High severity

    Rob is VPN Editor for TechRadar. Coming from a background in phones and technology, Rob has long been putting himself, and his data, online. Finding out the easy, and hard, ways to stay secure online is something that has come along the...

22. Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

    The Hacker News · 23 Oct 2026, 19:20 IST · Medium severity

    Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. "Artifacts from this investigation also...

23. In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

    SecurityWeek · 23 Oct 2026, 19:53 IST · High severity

    Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe. The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents,...

24. Stealing EV cables is big business. This company wants to make it too much effort to bother

    Tech.eu · 23 Oct 2026, 19:50 IST · Medium severity

    A few years ago, a couple arrived at an EV charging site on a mobility scooter in broad daylight, armed with a hacksaw. They proceeded to steal the charging cables, apparently unconcerned about being filmed from a passing bus. But what...

25. AWS says hackers tried to exploit PHP security issues days before fix — as Cloudflare CEO says it saw a huge rise in targeted attack attempts

    TechRadar · 23 Oct 2026, 19:35 IST · Medium severity

    AWS says hackers tried to exploit PHP security issues days before fix — as Cloudflare CEO says it saw a huge rise in targeted attack attempts

26. When It Makes Sense to Replace a Legacy Virtualization Stack

    HackRead · 23 Oct 2026, 19:38 IST · Medium severity

    Virtualization platforms often remain in place long after their original purpose because migration carries operational risk.

27. Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’

    SecurityWeek · 23 Oct 2026, 13:55 IST · High severity

    In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders. The post Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’...

28. Resident Evil maker Capcom warns of phishing after 11.7 million records exposed

    Malwarebytes Labs · 23 Oct 2026, 18:37 IST · High severity

    .kadence-column480618_38f885-ca > .kt-inside-inner-col{padding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;}.kadence-column480618_38f885-ca > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm,...

29. Hacker leaks 281 GB of data from Germany’s far-right AfD party

    Graham Cluley · 23 Oct 2026, 17:59 IST · Medium severity

    The AfD has confirmed that hackers breached its hosting provider. A leak site now claims to offer 421,179 of the party’s internal emails, and shows AI-written summaries rather than the emails themselves. Read more in my article on the...

30. Infostealer riding the AI Train

    Checkpoint Research · 23 Oct 2026, 18:30 IST · Medium severity

    Key Points Aokigahara , a newly observed infostealer, has been spotted in the wild. An earlier version may have been known as Kamidere or Stygian . The malware includes traditional data theft capabilities targeting browsers, VPN...

31. PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)

    SANS Internet Storm Center · 23 Oct 2026, 18:32 IST · Medium severity

    This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. By now, you either know about it, or you probably never will, so it is time to go back...

32. Capcom data breach confirmed — around 11.7 million accounts thought to have been affected

    TechRadar · 23 Oct 2026, 18:14 IST · High severity

    Capcom data breach confirmed — around 11.7 million accounts thought to have been affected

33. Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

    SecurityWeek · 23 Oct 2026, 18:15 IST · Medium severity

    Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on...

34. 426 Android and iOS Apps Linked to PHP2Shell Backend Risks

    HackRead · 23 Oct 2026, 18:11 IST · Medium severity

    Research found 426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns…

35. OTX Threat: StealC Is Back, and This Time It's a RAT

    AlienVault OTX · 23 Oct 2026, 00:38 IST · Medium severity

    Four months after Operation Endgame dismantled StealC in June, its seller returned in October with Stadia, a full-featured remote access trojan that incorporates StealC's code verbatim. Unlike its predecessor, Stadia offers...

36. OTX Threat: SEO Poisoning Campaign Delivers New Armorsteal Malware

    AlienVault OTX · 23 Oct 2026, 00:43 IST · Medium severity

    In September 2026, an SEO poisoning campaign distributed Armorsteal malware through fake websites impersonating Chocolatey package manager and Microsoft Activation Scripts (MAS) tool. Victims searching for software installation commands...

37. OTX Threat: VeloCloud Orchestrator SQL Injection Vulnerability

    AlienVault OTX · 23 Oct 2026, 17:58 IST · Medium severity

    VeloCloud Orchestrator (VCO) on-premises versions contain a critical SQL injection vulnerability that allows authenticated users with minimal privileges to escalate to superuser operator access. Any user with Enterprise Read Only role...

38. PHP2Shell: Failed Requests, Memory Corruption and Remote Code Execution

    Seqrite Blog · 23 Oct 2026, 17:44 IST · Critical severity

    PHP2Shell affects how PHP handles a request that runs out of memory or encounters a fatal error. If the failure interrupts an operation before it finishes, PHP can leave an array entry only partly initialized or retain a pointer to...

39. The most online generation is also the least protected: over half of Gen Z have already faced a cyberattack

    Tahawul Tech · 23 Oct 2026, 17:11 IST · Medium severity

    Despite spending more time online and feeling confident in the digital world, Gen Z are less likely than other generations to use antivirus software for mobile devices or change passwords, according to new research conducted by...

40. Microsoft 365 accounts compromised at 79 organizations without a single guessed password

    Help Net Security · 23 Oct 2026, 17:15 IST · Medium severity

    An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The...