Sources
Computer Weekly Feed
- Subpostmasters and their families left out of Post Office scandal redress schemes as deadlines pass 5 min 53 sec old
- KPMG survey reveals belief that artificial intelligence will shake up the finance sector more than the 1986 financial Big Bang 10 hours 23 min old
- During the London event, Microsoft chief Satya Nadella outlined his view of how agentic AI needs to be managed as part of enterprise IT 2 days 19 hours old
- Mounting power demands and grid bottlenecks are reshaping the geography of the UK’s digital infrastructure, pushing developers to wherever they can connect fastest 2 days 22 hours old
- As security teams worldwide grapple with the deep impact of the PHP2Shell flaws, the PHP Foundation reveals how a carefully planned vulnerability disclosure process went horribly wrong 3 days 3 min old
- The Department for Business and Trade has announced its investigation of faulty software used in Post Office branches before the controversial Horizon system 3 days 3 min old
- Commercial AI has not invented new OT attacks, but it has sped up reconnaissance, compressing attackers time to understand targets. Process-specific engineering knowledge remains a barrier 3 days 3 min old
- Mohammed Retmi, vice-president of sovereign clouds at Core42, says organisations moving AI into production must address data classification, governance, integration and resilience, while balancing infrastructure costs with performance and regulatory... 3 days 3 min old
- As security teams worldwide grapple with the deep impact of the PHP2Shell flaws, the PHP Foundation has revealed how a carefully planned vulnerability disclosure process went horribly wrong. 3 days 13 hours old
- In the 20th century, totalitarian societies emerged at gunpoint. Going forward, they might arise from overwhelming deference to artificial intelligence 3 days 19 hours old
Hacker News
- Treap (Cartesian Tree) 19 min 33 sec old
- Pharo 14 23 min 14 sec old
- Tasks as Code: Move Your Tickets into the Repository 23 min 21 sec old
- Show HN: Ankita v2.7.1 – desktop AI companion with undo 24 min 38 sec old
- AI Is Making Verification the Bottleneck for Companies 24 min 45 sec old
- Build your first AI agent from scratch in Python: a web research agent 25 min 46 sec old
- Minnesota Is Whispering. Alabama Is Screaming 26 min 38 sec old
- Using Computers for Educational Freedom 29 min 5 sec old
- Show HN: Retro AI Concept 29 min 32 sec old
- Rewinding the exponential: How we keep hardware usage down 29 min 47 sec old
Guardian Security
- Anthropic’s Claude AI model accessed Georgia voter data in US 35 min 31 sec old
- Cookie theft: how fraudsters get the digital key to your accounts 1 day 4 hours old
- The Guardian view on AI safety: the push for global regulation must advance | Editorial 3 days 18 hours old
- The race to fix huge PHP flaw at the heart of the internet - The Latest 3 days 18 hours old
- PHP: Pretty Huge Problem with the internet - The Latest 3 days 18 hours old
- Tell us: have you been affected by the PHP code flaw? 3 days 21 hours old
- The internet has broken – again. Shouldn’t the tech firms that make billions from it pay to fix it? | Chris Stokel-Walker 3 days 21 hours old
- Websites across world hit by millions of attempts to exploit PHP code flaw 4 days 2 min old
- What is PHP, and how bad is the computer language flaw causing website shutdowns globally? 4 days 7 hours old
- Flaw in PHP computer language leads to shutdown of websites around world 4 days 17 hours old
Security Week
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages 1 hour 17 min old
- Mythos 5 Ignored Real-World Harm in July Attack 2 hours 29 min old
- Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave 1 day 39 min old
- In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware 2 days 21 hours old
- Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge 2 days 22 hours old
- China APT Uses AI Pentest Tool Artex in ConnectWise Attacks 3 days 1 hour old
- Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months 3 days 1 hour old
- 11 Million Impacted by Capcom Data Breach 3 days 3 hours old
- Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’ 3 days 3 hours old
- LiteLLM Compromised in Fresh Supply Chain Attack 3 days 3 hours old
Malware Bytes Security
- A week in security (October 19 – October 25) 4 hours 39 min old
- Resident Evil maker Capcom warns of phishing after 11.7 million records exposed 2 days 22 hours old
- Crime Stoppers chapter freezes tips after breach breaks anonymity promise 3 days 1 hour old
- Facebook’s misleading privacy claims land Meta a $25 billion penalty 3 days 18 hours old
- Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself 3 days 21 hours old
- Woman faces years in prison over a Cash App account she says she never opened 4 days 11 min old
- Delivery bots accused of illegally scanning customers 4 days 1 hour old
- WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators 4 days 16 hours old
- PHP2Shell: Why websites are going offline for emergency security updates 4 days 19 hours old
- Fake Amazon Music x YouTube deal lures creators into a Google login trap 4 days 22 hours old
Wired Security
- The PHP Meltdown Shows How AI Makes Bugs More Exploitable 1 day 23 hours old
- Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched 4 days 9 hours old
- ‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire 4 days 21 hours old
- AI Guardrails Aren’t Stopping Criminal Hackers 4 days 21 hours old
- A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse 4 days 23 hours old
- She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family 5 days 1 hour old
- OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody 6 days 15 hours old
- WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot 6 days 19 hours old
- Encryption Is Getting Squeezed From All Sides 1 week 1 day old
- Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists 1 week 2 days old
SlashDot
- People Are Vibe Coding Their Way to Better TVs 2 days 12 hours old
- Singapore Boffins Weave a GUI Into Fabric 2 days 12 hours old
- Greece Enacts Social Media Ban For Kids Under 15 2 days 14 hours old
- SpaceX In Talks to Access 80,000 Cell Sites For New Network 2 days 15 hours old
- Knicks Sent Employees Fake Offer of Championship Rings In Phishing Test 2 days 16 hours old
- Microsoft Announces Per-Hour Cost for Xbox Cloud Gaming Service 2 days 17 hours old
- Left Alone With Nothing To Do, AI Agents Started Playing 2 days 17 hours old
- Ukraine Is Wiping Out Data Centers Across the Border 2 days 19 hours old
- Comcast Loses More Customers, Claims Other ISPs' Cheap Prices Are 'Irrational' 2 days 20 hours old
- Physicists Trap a Single Antimatter Particle For a Month 3 days 3 min old
Cisco Security Advisories
- Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities 2 days 15 hours old
- Vulnerabilities in PHP Affecting Cisco Products: October 2026 4 days 12 hours old
- Multiple Cisco Products Snort 3 Denial of Service Vulnerability 4 days 15 hours old
- Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability 4 days 15 hours old
- Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability 4 days 15 hours old
- Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability 4 days 15 hours old
- Cisco Unified Communications Products Security Hardening Release: October 2026 4 days 15 hours old
- Cisco Expressway Series Remote Code Execution Vulnerability 4 days 15 hours old
- Cisco Expressway Series Security Hardening Release: October 2026 4 days 15 hours old
- Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability 4 days 15 hours old
Microsoft Malware Protection Center
- Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks 2 days 17 hours old
- AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise 4 days 17 hours old
- Agents are your newest insiders. Security must move at their speed. 6 days 22 hours old
- Managing open-weight model risk in enterprise deployments 1 week 2 days old
- The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime 1 week 4 days old
- Post-quantum authentication: Why organizations should start testing certificate ecosystems now 2 weeks 3 days old
- 3 lessons from frontier AI vulnerability research 2 weeks 4 days old
- CISO perspectives on managing vulnerability risks in the age of AI 2 weeks 5 days old
- Insights from the 2026 Microsoft Digital Defense Report 3 weeks 3 days old
- Preparing governments for an era of interconnected cyber risk 3 weeks 3 days old
Cloud Security Briefing: News and Advice
- Frameworks provide the structure for an effective incident response program. Here's where to turn for guidance on what to include. 2 days 18 hours old
- Threats from cyberattacks continue to grow in frequency and severity. Considering the potential disruptions from such events, an organization needs an incident response plan. 5 days 37 min old
- Containers are an integral part of a growing number of production environments. But they can become security risks if not managed correctly. 1 week 1 day old
- While prevention is key, it's not enough to protect a company's systems from ransomware. Learn how early detection with these four methods helps reduce damage from attacks. 1 week 2 days old
- Know thine enemy -- and the common security threats that can bring an unprepared organization to its knees. Learn what these threats are and how to prevent them. 1 week 2 days old
- The Cloud Security Alliance (CSA) is a nonprofit organization that promotes research into best practices for securing cloud computing and the use of cloud technologies to secure other forms of computing. 1 week 3 days old
- What are the necessary components of a cloud security policy, and why should an organization go to the trouble to create one? Download a template to get the process started. 1 week 3 days old
- This cloud security guide explains challenges enterprises face today; best practices for securing and managing SaaS, IaaS and PaaS; and comparisons of cloud-native security tools. 1 week 3 days old
- Automating security in the cloud can be invaluable for threat detection and mitigation. Explore key areas where security professionals should implement automation. 1 week 3 days old
- With so many apps and data residing in cloud, employing a security framework to help protect cloud infrastructure is an essential move for an organization. 1 week 3 days old
Graham Cluely Security Blog
- Hacker leaks 281 GB of data from Germany’s far-right AfD party 2 days 23 hours old
- Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside 4 days 12 hours old
- Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death 6 days 1 hour old
- Irish police force has its Twitter hacked in cryptocurrency scam 1 week 2 days old
- Krybit ransomware: what you need to know 1 week 3 days old
- Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference 1 week 4 days old
- GTA 6 leaker threatens to release full playable version of game ahead of official launch 1 week 6 days old
- $10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack 2 weeks 2 days old
- Smashing Security podcast #487: Clippy’s crypto comeback 2 weeks 4 days old
- N0n ransomware: what you need to know 3 weeks 2 days old
Security Wire Daily News
- A cybersecurity technology proof of concept can validate a good purchasing decision -- or waste months of your team's time. Look out for these five common PoC missteps. 3 days 3 min old
- Security experts say the lesson isn't to abandon sandboxing, but to strengthen the security controls around surrounding systems as AI tests their limits. 3 days 9 hours old
- Deepfake phishing simulation software uses AI to probe organizational resistance to state-of-the-art social engineering attacks. Learn why they should be on CISOs' radar. 4 days 5 hours old
- AI accelerates exploit timelines from months to hours. Organizations must shift from patch-all to risk-based prioritization using exploitability metrics. 4 days 5 hours old
- Regularly reviewing cybersecurity plans and procedures helps organizations prepare for cyberattacks. This checklist outlines key steps for assessing cyber resilience. 4 days 19 hours old
- With so many services requiring access to sensitive data, encryption alone is not enough. Data obfuscation has evolved into a core element of modern cybersecurity architecture. 5 days 11 hours old
- A security data lake gives organizations a centralized repository of security information, but it can pose governance and operational risks. 6 days 4 hours old
- IAM is more crucial than ever in the AI era. To better control who -- and what -- is accessing systems and data, security teams need to move beyond standing access privileges. 1 week 2 days old
- In an unprecedented -- and unintended -- cyberattack, frontier AI models autonomously escaped their contained testing environment and breached another company's systems. 1 week 3 days old
- The Revolut data breach showed what can happen when organizations over-trust and under-verify. Experts warn that countless companies are currently at risk. 1 week 3 days old
Security Wire Weekly
- IT automation uses instructions to create clear, consistent and repeatable processes that replace an IT professional's manual work in data centers and cloud deployments. 3 days 14 hours old
- Create a security compliance plan for the data center that includes various standards, audit schedules, and 2026 AI governance and sustainability reporting requirements. 4 days 13 hours old
- A time-based one-time password (TOTP) is a temporary passcode generated by an algorithm that uses the current time of day as one of its authentication factors. 5 days 13 hours old
- Red teams can harness the power of LLMs for penetration testing. From session analysis to payload crafting, discover five ways AI transforms security testing. 5 days 17 hours old
- Security for information technology (IT) refers to the methods, tools and personnel used to defend an organization's digital assets. 1 week 1 day old
- Know thine enemy -- and the common security threats that can bring an unprepared organization to its knees. Learn what these threats are and how to prevent them. 1 week 2 days old
- Check out the latest security news from the Informa TechTarget team. 1 week 3 days old
- Loss of electric power presents a major risk to business continuity, and no organization is immune. Take these steps to create a solid business continuity plan for power outages. 1 week 4 days old
- AI can improve the speed and effectiveness of risk management efforts. Here are the potential benefits, use cases and challenges your organization needs to know about. 2 weeks 2 days old
- A passkey is an alternative user authentication method that eliminates the need for usernames and passwords. 2 weeks 3 days old
KrebsOnSecurity
- Widespread PHP Flaw May Cause Many Site Outages Today 4 days 20 hours old
- Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site 6 days 21 hours old
- U.K. Sanctions Cryptomus for RU Money Laundering 1 week 4 days old
- Microsoft Patches More Than 1,400 Security Flaws 1 week 5 days old
- FBI Arrests Founder of Ransomware Negotiation Firm 2 weeks 2 days old
- ShinyHunters Extorted Boeing Spin-off Prior to Arrests 2 weeks 4 days old
- Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation 3 weeks 6 days old
Security Now
- SN 1101: ECDSA's Curves Origins - When AI Becomes the Attacker 5 days 11 hours old
- SN 1100: Booby Trapping LLMs - AI Frenzy in Cybercrime 1 week 5 days old
- SN 1099: An Alien Mind - From RSA Weakness to Agentic Attacks 2 weeks 5 days old
- SN 1098: How worried should we be? - Unpredictable Agents 3 weeks 5 days old
- SN 1098: How worried should we be? - Unpredictable Agents 3 weeks 5 days old
EFF
- While the Country Rejects ALPR Mass Surveillance, SF Settles for Weak Safeguards 3 weeks 5 days old
- Privacy’s Defenders Podcast: Cowboys, Cypherpunks and Visionaries 3 weeks 5 days old
- EFF to San Francisco Police: Drones are Powerful Surveillance Tools That Require a Robust Policy 3 weeks 6 days old
Cisco Threat Outbreak
CNET Feed
Corero Security
CSOOnline - Salted Hash - Top Security News
Dark Reading Attacks and Breaches
Dark Reading Cloud
Dark Reading Security Monitoring
Dark Reading Threat Intelligence
Dark Readuing Vulnerability and Threats
Google Security Blog
InfoSec Island
InfoWorld
Naked Security
Network World
NoticeBored
Paul's Security Weekly
PC Magazine Security
Schneier on Security
Security News White Papers
Tao Security
Tech Crunch Security
Techworld Security
The Security Ledger
Threat Post
US-Cert Alerts
US-Cert Current Activity
ZDNet Security
