SecurityWeek (1 hour ago)
Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.
Read the full story on SecurityWeek.
A good deal on a frighteningly cheap VPN
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site’s server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory.
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026.
Nearly 50 years of data caught up in breach, with probation service records also among the haul
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing reliable ways to verify it.
The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers’ registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify calls from unknown numbers and tackle spam or fraudulent…
The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.
James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope.
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.
MacRumors
Hugging Face Blog
72 active sources
27 Turkish · 45 English
All sources
