Blahalla

Netflix, Facing Slowing Growth, Cuts 6% of Its Work Force

www.nytimes.com · 4 days ago

The streamer’s share price is down more than 40 percent over the last year as the company has struggled with stalling engagement.

Microsoft Patch Tuesday Fixes 1,413 Flaws: Windows Zero-Day Already Under Attack

www.techrepublic.com · 4 days ago

Microsoft's October 2026 Patch Tuesday fixes 1,413 vulnerabilities, including an exploited Windows zero-day and critical Outlook security flaws.

ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw

www.securityweek.com · 4 days ago

ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability.

Senators Question Meta’s Data Center Tax Strategy

www.nytimes.com · 4 days ago

Democrats on the Senate Finance Committee sent a letter to Mark Zuckerberg, Meta’s chief executive, questioning the company’s $6.6 billion in tax breaks.

Microsoft fixes VPN issues caused by September Windows updates

www.bleepingcomputer.com · 4 days ago

Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 security updates.

The Future of AI Cryptanalysis

www.schneier.com · 4 days ago

Matthew Green has been writing a rather pessimistic series of posts about the potential for AI systems to vastly outperform humans in cryptanalysis of both symmetric and public-key ciphers. I am more optimistic than he is. That is, I have stronger faith in the over-engineering cryptographers tend to do. I am trying to write this up in more detail.

U.K. Sanctions Cryptomus for RU Money Laundering

krebsonsecurity.com · 4 days ago

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions.

Cyberattack on Connected Fridges in France

www.schneier.com · 4 days ago

Another IoT cyberattack, this one in France: Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected. Normally, supermarket freezers go through a short period of defrosting overnight, in which temperatures rise slightly.

Harmonic Security Raises $50 Million for Workforce AI Protection

www.securityweek.com · 4 days ago

The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK.

The Blind Spots of Agentic Pentesting and How to Close Them

www.bleepingcomputer.com · 4 days ago

AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested. Picus Security explains how combining agentic pentesting with exposure validation and breach simulation can help close these gaps.

Virtual Event Today: Zero Trust Strategies Summit

www.securityweek.com · 4 days ago

SecurtyWeek’s 2026 Zero Trust Strategies Summit kicks off today at 11AM ET as a fully immersive virtual conference and expo. This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies for a world where every user, device, and workload must be explicitly verified.

Ransomware Gangs Threaten Employees’ Families as AI-Powered Attacks Escalate

gbhackers.com · 4 days ago

Ransomware operators are extending their extortion tactics beyond corporate networks by threatening employees’ families and using artificial intelligence to enhance their attacks, according to the Semperis 2026 Ransomware Risk Report. Among the surveyed victims, 37% reported threats against their family members or friends, while 84% experienced attacks that involved AI in some form.

Global takedown hits network behind 1 billion phishing messages

www.bleepingcomputer.com · 4 days ago

A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 150 countries has been disrupted by law enforcement agencies and partners worldwide.

The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime

www.microsoft.com · 4 days ago

Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for large-scale phishing.

Russian Influence Operation Widely Targeting Latin America

www.darkreading.com · 4 days ago

The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.

How Claude Code’s 256KB blind spot put developers’ secrets in the preview pane

www.csoonline.com · 4 days ago

Simply asking Anthropic’s Claude Code to review an HTML file could hand attackers access to a developer’s machine, cloud credentials and software development environment, according to a new Noma Security finding.

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages

www.securityweek.com · 4 days ago

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

www.bleepingcomputer.com · 4 days ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st.

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

thehackernews.com · 4 days ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability. The security flaw, tracked as CVE-2026-104935 (CVSS score: 8.

Google Pays $250,000 for AI-Assisted Chrome Exploit Enabling Windows Code Execution

gbhackers.com · 4 days ago

Google has awarded XBOW $250,000 for creating an AI-assisted exploit chain that enabled code execution outside the Chrome browser’s renderer sandbox on Windows. This reward marks the first full-chain payout for Chrome under Google’s vulnerability reward program, introduced in April 2026. According to XBOW, all three vulnerabilities involved have since been fixed.

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

thehackernews.com · 4 days ago

A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0.

Meta GitHub Repositories Compromised, Exposing Software Code and Employee Personal Data

gbhackers.com · 4 days ago

Meta has revealed a breach of a GitHub repository that exposed software code and personal information belonging to about 1,500 individuals, most of whom are U.S. employees. The company began notifying affected individuals on October 13, after discovering the intrusion several weeks earlier, which involved the theft of an employee’s credentials.

How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team

thehackernews.com · 4 days ago

Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes in at 4:40 on a Friday.

Hackers abuse the Ivanti Connect Secure bug to gain access without accounts

www.csoonline.com · 4 days ago

Attackers without an account of their own were found logging in to Ivanti Connect Secure appliances using an authentication bypass flaw that the vendor has since fixed. Once inside, attackers ran arbitrary commands on the appliances. “Ivanti initially discovered a portion of this vulnerability as part of our product security program and patched it in the July release 25.1.3.

Hirudo Android malware replaces banking apps to evade security checks

www.bleepingcomputer.com · 4 days ago

A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks.

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

thehackernews.com · 4 days ago

A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the attack in six days by directing AI agents running OpenAI's publicly available GPT-5.6 Sol model.

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

thehackernews.com · 4 days ago

Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud.

Rogue A.I. Agents from China Chatted with American Researchers

www.nytimes.com · 4 days ago

Researchers discovered that the agents were trying to bypass security controls on websites and made contact with them. A Times reporter was invited to join the discussion.

An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

thehackernews.com · 4 days ago

The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer's production website, on its own. One login request let the user choose where the one-time passcode went. The attack was the easy part.

US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms

www.securityweek.com · 4 days ago

Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.

Hackers Use Compromised Credentials to Infiltrate European Bank Through VPN

gbhackers.com · 4 days ago

Hackers used compromised credentials to infiltrate a European bank through a misconfigured, third-party-managed VPN gateway, conducting months of reconnaissance and authentication attacks before endpoint defenses blocked an attempted escalation.

Microsoft: Recent Windows updates may trigger Remote Desktop failures

www.bleepingcomputer.com · 4 days ago

Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled.

Unplug your smart fridges, French supermarkets warned after cyberattack

www.csoonline.com · 4 days ago

More internet-connected refrigerators have joined the official list of those affected by a cyberattack that ruined stocks of chilled food at hundreds of French supermarkets over the weekend.

Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet

gbhackers.com · 4 days ago

Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single malicious DFS referral response. This vulnerability, tracked as CVE-2026-70111, affects Windows Server versions 2019, 2022, and 2025. According to Corelight’s disclosure on October 13, Microsoft addressed the flaw in its October 2026 updates.

Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws

gbhackers.com · 4 days ago

Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October 13, 2026, this desktop update resolves weaknesses across various browser components, including graphics, networking, PDF processing, media, and JavaScript execution.

Fake WatchGuard VPN Site Steals Credentials Then Delivers Legitimate Signed Installer

gbhackers.com · 4 days ago

A WatchGuard VPN impersonation attack that steals connection credentials in the browser before delivering the vendor’s genuine, digitally signed installer. The campaign removes the malicious executable from the download chain, leaving victims with legitimate software. At the same time, attackers collect information needed to attempt unauthorized VPN access. The lure, watchguard-vpn[.

Windows BitLocker Vulnerabilities Could Allow Attackers to Bypass Security Protections and Escalate Privileges

gbhackers.com · 4 days ago

Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections under various access conditions. Microsoft is the assigning authority, with a release date of October 13, 2026, and all three vulnerabilities are rated Important. Two require existing local privileges, while the third requires physical access.

22 People Got Together For a Dinner Party. So Did Their A.I. Agents.

www.nytimes.com · 4 days ago

As artificial intelligence bots spread, we are increasingly glimpsing how these digital entities interact and what they talk about with one another.

22 People Got Together For a Dinner Party. So Did Their A.I. Agents.

www.nytimes.com · 4 days ago

As artificial intelligence bots spread, we are increasingly glimpsing how these digital entities interact and what they talk about with one another.

This used to be a cornerstone of every job application. Not anymore.

www.washingtonpost.com · 4 days ago

Has AI finally killed the cover letter?

Cybersecurity is a leadership problem: Why the management model needs to catch up

www.csoonline.com · 4 days ago

When I started writing regularly about cybersecurity management in 2015, the environment looked very different. Cloud computing was still reshaping enterprise technology. Ransomware had not become the industrialised threat it is today. Artificial intelligence was not driving boardroom discussions.

Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution

gbhackers.com · 4 days ago

Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote, unauthenticated attackers to execute arbitrary commands. The company disclosed the issue on October 13, 2026. It confirmed that exploitation had affected a limited number of customers at the time of disclosure.

Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication

gbhackers.com · 4 days ago

Attackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then searched the affected network for credentials and sensitive Active Directory data. Volexity attributed the activity to an unknown threat actor it tracks as UTA0576, which repeatedly exploited an appliance running version 22.8R2.

Zoom Certificate Validation Vulnerability Allows Attackers to Access Sensitive Information

gbhackers.com · 4 days ago

Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked as CVE-2026-108185, could allow an unauthenticated attacker with network access to disclose sensitive information.

AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics.

www.csoonline.com · 4 days ago

Since July, US frontier AI labs and other AI leaders have revealed a string of incidents in which their models accessed external computer systems without authorization, events popularly described as AI agents “going rogue.

Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images

gbhackers.com · 4 days ago

Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as CVE-2026-105445 and dubbed GhostPat, exploited how Docker handled personal access tokens during account conversions.

Meta Removes 3.7 Million Scam Accounts as 28 Arrested in Global Crackdown

gbhackers.com · 5 days ago

Meta removed more than 3.7 million Facebook and Instagram accounts, Pages, and Groups during an international crackdown on West African scam networks that resulted in 28 arrests and the rescue of 117 trafficking victims. Announced October 13, the operation combined platform enforcement, financial tracing, and physical raids against fraud infrastructure targeting victims worldwide.

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

thehackernews.com · 5 days ago

A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine. The bug is tracked as CVE-2026-74580 and named Vghost.

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

www.securityweek.com · 5 days ago

Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

www.securityweek.com · 5 days ago

Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.