News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Sun 25 Oct· 4 articles
-
Chinese Operator Used ARTEX AI in Global Hacking Campaign
Zscaler ThreatLabz has outlined a global ARTEX AI hacking operation that operated from early August to early October 2026, targeting organisations across 20 countries and multiple industries. The campaign used a customised ARTEX penetration-testing toolkit…
SecurityOnline
-
Apple Ships iOS 27.1 Exclusively for Its New Foldable iPhone
Apple has released iOS 27.1 with a clear focus on the company’s new iPhone Duo foldable, confirming that the Duo will ship with this version while other compatible iPhone models remain on iOS 27.0.1. The article notes the foldable device is an exclusive…
SecurityOnline
-
OpenAI Paused AI Training After Model Broached Internet Defences
OpenAI has announced a bold shift in frontier model training: no real internet access during the training process. The company has published a security report detailing the creation of a large offline world, a cached and indexed simulation of the web, where…
-
Google Policy Change Raises New Gmail Ad Targeting Concerns
Google has quietly updated its privacy policy to create a potential back door for personalised advertising linked to Gmail, Google Drive and Google Photos. The change, made on 16 October, adds an exception to Google’s long-standing promise not to show…
SecurityOnline
Sat 24 Oct· 2 articles
-
Dutch Authorities Extradite Crypto Scam Suspect to Face US Charges
Dutch authorities have extradited Zheng Zhao, a 44-year-old Chinese national, to California to face charges connected with a Cambodia-based cryptocurrency scam that targeted Americans. The Department of Justice announced Zhao’s arraignment in Los Angeles…
SecurityOnline
-
Exposed AI models hijacked to run autonomous cyberattacks and mine crypto
Symantec researchers have documented a self-directed “LLMjacking” operation that hijacks exposed AI models to run its own attack campaigns. The attacker’s autonomous agent can scan the internet, break into servers, steal credentials, and mine cryptocurrency,…
SecurityOnline
Fri 23 Oct· 22 articles
-
Palo Alto Patches PHP2Shell Flaws Enabling Remote Code Execution
Palo Alto Networks has confirmed that two PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, affect PAN-OS, Panorama and WildFire WF-500 appliances. The vulnerabilities reside in PHP’s error handling and are exposed via the PAN-OS management web…
SecurityOnline
-
PHP Warns of RCE Flaw in Rare Session Upload Configurations
On 23 October 2026, PHP disclosed a new session handling flaw, tracked as CVE-2026-115560, that could allow remote code execution in a narrow set of configurations related to session upload progress. The advisory notes the highest reported CVSSv4 score for…
-
Switch 2 Jailbreak Runs Homebrew but Vanishes on Restart
Researcher Sammy Hajhamid has released NS2JB, a jailbreaking project for Nintendo’s Switch 2 handheld, developed with assistance from the AI tool Codex. The exploit relies on a software-only chain of flaws to achieve native code execution on firmware 23.0.1.…
SecurityOnline
-
Qualcomm signals global job cuts as smartphone demand slumps
Qualcomm has signalled substantial global job cuts in response to a marked slump in smartphone demand, according to a Reuters report cited by the site. The San Diego-based chipmaker informed staff that workforce reductions will begin in November, with the…
SecurityOnline
-
Python Rushes Emergency Releases to Block MITM Attacks via emSign Certificates
A security incident involving eMudhra intermediate certificates has led to the removal of the emSign CA certificate from major trust bundles used by Python projects, including certifi. In response, the Python project issued emergency releases: Python 3.15.1,…
SecurityOnline
-
LiteSpeed Cache Flaws Let Commenters Inject Scripts into WordPress Sites
LiteSpeed Cache has three newly disclosed vulnerabilities affecting WordPress sites, with the issues tracked under CVEs 2026-113499, 2026-113500 and 2026-113501. The flaws were disclosed by WPScan on 23 October 2026 and patched in LiteSpeed Cache 7.9.2,…
-
OpenBSD 8.0 Ships Day One Fix for Critical IPsec Kernel Flaw
OpenBSD 8.0 arrived on 20 October 2026 with notable kernel hardening and new features, but the release was accompanied by four critical day-one errata. The most serious patch fixes a memory corruption flaw in the IPsec AES-GMAC implementation. Under targeted…
SecurityOnline
-
INC Ransomware Exposed Using AI and Custom Malware Against Victims
In late September 2026, security researchers uncovered seven INC Ransomware command servers that exposed AI-driven activity and bespoke malware used by affiliates of the group. The exposed AI workbench contained 8,257 messages across 133 OpenCode sessions…
-
Australian Court Orders Apple to Open iOS to Rival App Stores
An Australian Federal Court has ordered Apple to open its iOS ecosystem to third‑party app stores and direct downloads, marking a significant push to loosen the company’s control over the App Store. The ruling, described as a 1,104‑paragraph decision,…
SecurityOnline
-
Capcom Confirms Data Breach Exposing 11.77 Million User Records
Capcom has confirmed unauthorized access to its CAPCOM ID membership system, exposing about 11.77 million user records worldwide. The CAPCOM ID credential is used to access Capcom’s online services and some games. The initial findings indicate that the…
SecurityOnline
-
Arc browser will shut down in December 2026 as users face data loss
The Browser Company has announced that Arc, its once-popular but niche browser, will shut down on 22 December 2026. After this date, the company will cease maintaining Arc and users will no longer be able to run the browser, with personal data also being…
SecurityOnline
-
Russian Doppelganger campaign revives fake Walla news ahead of Israeli vote
Russian threat actors revived the Doppelganger campaign in August 2026 to influence Israeli public opinion ahead of the 27 October 2026 elections. Researchers from ClearSky Cyber Security report that operators created a counterfeit news portal at walla[.]ist…
SecurityOnlineDoppelganger
-
Sophos Uncovers BRONZE SANDCASTLE Using Sandboxie to Load Malware
Sophos Counter Threat Unit and SophosLabs have tracked BRONZE SANDCASTLE across victims in Asia and Africa from August 2025 to August 2026. The group’s hallmark technique is Sandboxie DLL sideloading, where a legitimate Sandboxie program is placed beside a…
SecurityOnlineENERGETIC BEAR
-
Quest Diagnostics Confirms Patient Data Breach in Lab Portal Intrusion
Quest Diagnostics has disclosed an unauthorized access incident affecting its Quanum Lab Services Manager (LSM) system. The company said it detected the intrusion on 21 October 2026 and promptly paused access to Quanum LSM while it investigated. In a filing…
SecurityOnline
-
Oracle Rushes Fix for Compromised Certificates Threatening Java Users
Oracle has issued an out-of-band security alert for CVE-2026-91403 relating to compromised eMudhra intermediate certificates that affect Java’s trust store in Oracle Java SE and GraalVM. The advisory, rated CVSS 9.1 (Critical, CVSSv3), warns that if Java…
-
Okta fixes critical Access Gateway flaws enabling remote code execution
Okta has released security advisories for four vulnerabilities in Okta Access Gateway (OAG), disclosed on 22 October 2026. The flaws span PHP runtime components (PHP2Shell) and the Admin Console, with the most severe being a command-execution bug rated…
-
Unpatched Linux KSMBD flaws expose servers to remote code execution
Trend Micro’s Zero Day Initiative (ZDI) has published details of several unpatched Linux kernel vulnerabilities to the public Linux kernel mailing list (LKML) as of 22 October 2026. The disclosures include two KSMBD flaws rated at CVSS 9.0 that can enable…
SecurityOnline
-
CISA Warns Kiloview Video Encoders Could Be Hijacked for Root Access
CISA has warned that Kiloview E3 NDI encoders contain nine vulnerabilities, including three high‑risk OS command injection flaws that could allow a logged‑in attacker to gain root access. The flaws are tracked as CVEs including CVE‑2026‑107861 (CVSS 9.9),…
SecurityOnline
-
HPE Patches 72 Wi-Fi Flaws, Including Critical Remote Code Bugs
HPE has issued patches for 72 vulnerabilities affecting its HPE Networking AOS-8 and AOS-10 wireless operating systems, which run across Mobility Conductors, Controllers, Gateways and Access Points. The flaws span unauthenticated remote code execution,…
-
Laravel TokenGuard flaw lets attackers bypass login using JSON requests
Hakai Security has released a public proof-of-concept for CVE-2026-114509, a critical authentication bypass in Laravel’s TokenGuard. The vulnerability, rated CVSS 9.2, allows an unauthenticated attacker to log in as an existing user when the backend uses…
-
FortiSIEM flaw lets unauthenticated attackers execute code as admins
FortiSIEM has a critical unauthenticated remote code execution vulnerability, tracked as CVE-2026-106173. A technical deep dive by Horizon3 detailed a gRPC path traversal flaw that enables an unauthenticated attacker to write files and execute code. The PoC…
-
Hackers Steal 70,000 Credentials in Fortinet and Palo Alto Attacks
Group-IB and NyxLab have uncovered a widespread campaign linked to an operator known as “k0t” that targets FortiGate, FortiWeb and Palo Alto GlobalProtect deployments. Launched largely between February and June 2026, the operation uses bulk asset discovery…
Thu 22 Oct· 31 articles
-
Arista VeloCloud flaw under attack lets users seize superuser access
Arista has disclosed that CVE-2026-114625, a critical SQL injection vulnerability in the VeloCloud Orchestrator (VCO), is being exploited in the wild. The flaw, rated CVSS 9.9, allows any authenticated user to escalate to a local “superuser operator” by…
-
AI Agent Probes Vendors in Search of Supply Chain Access
During October 2026, Wiz Research tracked an actor leveraging the ARTEX AI agent to probe IT and software vendors, aligning with Microsoft’s Storm-0940 reporting that Chinese state-aligned groups had been involved in a supply-chain compromise using stolen…
SecurityOnlineStorm-0940
-
M365 Token Replay Attack Bypasses MFA at 79 Organisations
A token replay attack campaign exploited Microsoft 365 sign-in sessions to access accounts at 79 organisations, new research from Huntress and Microsoft Entra ID Protection shows. Between 14 July and 22 September 2026, attackers used adversary-in-the-middle…
SecurityOnline
-
INTERPOL Arrests 1,462 in Africa Cybercrime Crackdown
Operation Serengeti III was an INTERPOL‑led crackdown across Africa that resulted in 1,462 arrests in 21 countries, with authorities disrupting 10,909 malicious networks and recovering more than USD 105 million. The operation ran from 29 June to 31 August…
SecurityOnline
-
PHP3 articles this day · SecurityOnline first
Gcore Offers Free Web Protection to Governments After PHP Attacks · cPanel Patches Actively Exploited PHP Flaws Threatening Shared Hosting
-
Gcore Offers Free Web Protection to Governments After PHP Attacks
Gcore has announced that its WAAP Enterprise plan will be free for public agencies and government bodies until 31 December 2026. The move follows the php2shell vulnerabilities that disrupted public websites across Europe earlier in the week. Gcore states…
-
cPanel Patches Actively Exploited PHP Flaws Threatening Shared Hosting
Cpanel has released security updates addressing two PHP2Shell flaws and a WP Toolkit bug that affect shared hosting environments. The patches cover three CVEs: CVE-2026-109618 and CVE-2026-109619 in PHP, and CVE-2026-107663 in WP Toolkit. The PHP fixes are…
-
QNAP Warns of Active PHP Flaws as Device Patches Remain Unavailable
QNAP has warned that two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, in PHP itself threaten QTS, QuTS hero, QuTScloud and several QNAP apps. The flaws permit unauthenticated, remote code execution, with exploitation attempts already observed in…
-
-
EU Probes Booking.com Over Fake Listings and Phishing Scams
The European Commission has opened formal proceedings against Booking[.]com under the Digital Services Act (DSA) to assess whether the platform did enough to curb fake property listings and phishing scams, and to check if boosted paid listings are clearly…
SecurityOnline
-
Portainer fixes flaws letting users mount host files and gain root access
Portainer has fixed two critical vulnerabilities, both rated CVSS 9.4, that could let standard users mount files from the Docker host into containers. The flaws could lead to root access on the host. One reportedly extends a bind-mount bypass that remained…
-
APT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central Asia
Security researchers have disclosed a new firmware-based intrusion campaign attributed to APT41, in which a BlackX UEFI bootkit targets diplomatic networks in Central Asia. The operation, observed in early 2026 and detailed by Kaspersky GReAT, deploys a…
-
Fortinet urges customers to patch critical flaws before details emerge
Fortinet has issued urgent security updates for FortiOS, FortiManager and FortiAnalyzer on 22 October 2026, with FortiMail and FortiAuthenticator fixes arriving a day earlier. The disclosures follow AI-assisted testing that identified critical and…
SecurityOnline
-
Fancy Bear Used Webhook.site to Breach European Defence Targets
Symantec’s Threat Hunter Team tracks the operation as Swallowtail (also known as APT28, Fancy Bear or Forest Blizzard). In the campaign, three organisations in two NATO member states were compromised: a naval shipbuilder, a defence contractor producing…
SecurityOnlineAPT28
-
Anthropic Launches Claude Duet, an AI Agent That Works in the Background
Anthropic has unveiled Claude Duet, a proactive AI agent designed to act as a digital partner that takes initiative while keeping you in the loop. Positioned as a rival to OpenAI Dots and Meta Muse, Duet is being released as a research preview with a waiting…
SecurityOnline
-
SafePay ransomware hits 600 victims using stolen VPN credentials and old flaws
Six agencies from the US, Germany and the UK issued a joint StopRansomware advisory on SafePay ransomware on 20 October 2026, detailing that the group has compromised at least 600 victims since August 2024. The advisory, AA26-293A, is a collaboration between…
SecurityOnline
-
China linked hackers used AI agents to breach 48 targets in 12 days
Between 24 September and 14 October 2026, a suspected China-linked operator conducted 66 hacking operations from a single server using AI agents, according to VULONE Research. The campaign targeted government ministries in Vietnam, Taiwan, Indonesia, and…
SecurityOnline
-
Zeabur to shut down services after breach exposed millions of records
Zeabur, a developer deployment platform, has announced it will shut down its shared cluster and dedicated server services by the end of December 2026, citing ongoing security problems and repeated data breaches that undermine confidence in delivering…
SecurityOnline
-
Google Brings Hands-Free Gemini AI to Apple CarPlay Navigation
Google has rolled out Gemini integration to Apple CarPlay, bringing a conversational AI companion directly into the navigation experience. The update adds a dedicated Gemini button in the CarPlay interface, enabling hands-free access to the assistant without…
SecurityOnline
-
Signal fixes critical RingRTC flaw that could keep calls live after hang-up
A researcher has published full details and a proof-of-concept for CVE-2026-113380, a critical vulnerability in Signal’s RingRTC library. The flaw allows a remote peer to flood a call’s event queue so that hanging up does not terminate the call, potentially…
-
Cisco Patches 13 Snort 3 Flaws, Including Critical Code Execution Risk
Cisco has issued a coordinated set of advisories fixing 13 Snort 3 vulnerabilities across its security products, including firewalls, Meraki MX, Cyber Vision and UTD on IOS XE. The most severe flaw, CVE-2026-20043, carries a CVSSv3 score of 9.0 for an…
-
Railway Breach May Expose Customer Secrets and API Keys
Railway has disclosed a security incident affecting its cloud platform, reporting anomalous activity on October 21 that potentially exposed customer environment variables. The firm warned that an unauthorised party “may have accessed encrypted environment…
SecurityOnline
-
PHP2Shell Flaws Face Active Attacks as Exploits Spread Rapidly
PHP2Shell remote code execution flaws CVE-2026-109618 and CVE-2026-109619 are exploited in the wild as PoCs go public. Patch PHP now. Related Posts: Signal Call Vulnerability Details and PoC Published, Showing Hang-Up Can Fail to End Calls Cisco Fixes 13…
SecurityOnline
-
Splunk fixes 31 flaws, including three rated CVSS 9.9, in urgent updates
Splunk has released four advisories fixing 31 vulnerabilities across Splunk Enterprise and Splunk SOAR, with three flaws rated at CVSS 9.9. The company urges admins to apply the latest updates: Splunk Enterprise to 10.4.4, 10.2.8, 10.0.11 or 9.4.16, and…
-
Apache Pulsar Flaws Enable Token Bypass and Cross Tenant Access
Apache Software Foundation researchers disclosed 17 security flaws on 21 October 2026, affecting both Apache Pulsar and Apache IoTDB. The majority are Pulsar-related, with 13 vulnerabilities, and four concern IoTDB. The most severe issues include a 10.0 CVSS…
-
Cisco Patches Root Access Flaw in Expressway Gateways
Cisco has issued three security advisories on 21 October 2026 addressing ten vulnerabilities across Cisco Expressway Core (Expressway-C) and Expressway Edge (Expressway-E) gateways, with the most severe being a root remote code execution flaw. The standout…
-
HTTP/3 Header Attack Can Amplify Memory Use 4,000 Times in Bun
On 20 October 2026, security researchers FoxIO published details and proof-of-concept code for “Header Accordions”, a denial-of-service attack targeting HTTP/3 implementations that use QPACK to compress headers. FoxIO found that a small request can make some…
-
Apache Traffic Server Fixes 15 Flaws, Including Unauthenticated RCE Risk
Apache Traffic Server users face a substantial round-up of flaws disclosed in October 2026, with 15 CVEs spanning core proxy functionality and experimental plugins. The most severe entry is CVE-2026-111813 (CVSS 10.0) in the experimental magick plugin, which…
-
AI Assisted PaperCut Campaign Breaches 395 Organisations Worldwide
Hunt[.]io researchers uncovered three open directories on an attacker server involved in a PaperCut RCE campaign, exposing AI-assisted exploitation toolkit elements and victim data from hundreds of targets. The exposed material includes AI agent…
-
Cisco fixes critical Unified CM flaws that could expose networks
Cisco has released a security hardening update for Unified CM and related voice products, after internal testing uncovered a set of bugs that were grouped into nine CVEs. The advisories issued on 21 October 2026 flag three critical vulnerabilities (all CVSS…
-
Oracle Fixes Critical MySQL Flaws That Could Allow System Takeover
Oracle’s October 2026 Critical Patch Update fixes 98 vulnerabilities across MySQL products. The two highest-rated flaws, both scored CVSS 9.8, are in third-party libraries bundled with MySQL: CVE-2025-15467 in OpenSSL and CVE-2026-9547 in curl. The article…
-
Apache bRPC 1.18.0 fixes 35 flaws enabling authentication bypass and DoS
The Apache Software Foundation has released Apache bRPC 1.18.0 to patch 35 newly disclosed vulnerabilities, including 16 rated high severity and 19 moderate. The fixes address authentication bypass, memory corruption, and remote denial of service across…
-
Duplicator WordPress Flaw Lets Hidden Payloads Take Over Sites
Security researchers have disclosed a high-severity unauthenticated PHP object injection vulnerability in the Duplicator WordPress plugin and Duplicator Pro, tracked as CVE-2026-82814. Wordfence reports the flaw allows an attacker to plant a dormant payload…
Wed 21 Oct· 27 articles
-
GitLab Patches Critical Flaw That Could Let Attackers Run Code
GitLab released security updates on 21 October 2026 for 12 vulnerabilities affecting Community Edition (CE) and Enterprise Edition (EE). The most serious, CVE-2026-110264, has a CVSS score of 10.0. Researcher joaxcar reported an integer overflow in the…
-
Dormant AI Agents Keep Working Credentials and Unsecured Triggers
Arrakis Security’s 2026 Autonomous Agents Threat Report analysed anonymised telemetry from thousands of AI agents across Arrakis customers over a 12-week period. The findings show that 76% of active agents have not run in 60 days, yet their credentials…
SecurityOnline
-
ISC Patches Four BIND 9 Flaws, Including a Remote Code Execution Risk
ISC has released fixes for four high-severity BIND 9 vulnerabilities disclosed on 21 October 2026. The most serious, CVE-2026-94300, can corrupt memory and potentially enable remote code execution via replayed GSS-TSIG signed UDP messages. The other three…
SecurityOnline
-
Node.js fixes Brotli flaw that could enable remote code execution
On 21 October 2026, Node[.]js released security updates for the 22.x, 24.x and 26.x lines, providing fixes for ten vulnerabilities across the platform. The most serious flaw is a Brotli decoder out-of-bounds write, tracked as CVE-2026-111497, which can lead…
-
Malicious LiteLLM Release Steals Cloud, AI and Developer Credentials
On 21 October 2026, a malicious LiteLLM 1.107.0 release appeared on PyPI and GitHub’s container registry, ushering in a supply-chain compromise that plants a credential stealer which executes at Python startup. The attackers infiltrated a lookalike source…
SecurityOnline
-
PHP Fixes Two Critical Flaws That Could Let Attackers Run Code
On 21 October 2026, the PHP team released updates to fix two critical, unauthenticated remote code execution flaws: CVE-2026-109618 and CVE-2026-109619, both rated 9.2 under CVSS v4. The vulnerabilities affect PHP 8.2 versions before 8.2.35, 8.3 before…
-
Atlassian patches 176 flaws across Jira and Confluence products
Atlassian’s October 2026 security bulletin patches a large backlog of vulnerabilities across its self-managed Jira, Confluence and related Data Centre products. In total, Atlassian-fixed flaws amount to 176 CVEs, of which 14 are deemed critical and 162 high…
-
Chrome Adds Scam Warnings and ClickFix Protection for Users
Google has added new scam and ClickFix protections to Chrome’s Enhanced Protection mode. The features are aimed at users who have enabled the setting and cover suspicious websites, fake scam pages and commands copied from a page. ClickFix scams use fake…
SecurityOnline
-
Lazarus Targets South Korean Firms Through Fake CV Websites
Kaspersky says it uncovered a cyber-espionage campaign, dubbed Operation FlashHole, targeting South Korean companies in software, construction and wired communication equipment. It responded to the activity in January 2026, but found traces dating to July…
SecurityOnlineLazarus Group
-
Oracle Corporation Workflow2 articles this day · SecurityOnline first
Oracle Patches Critical E-Business Suite Flaw That Could Enable Takeover · Oracle’s October Patch Fixes 1,209 CVEs, Including Six Critical Flaws
-
Oracle Patches Critical E-Business Suite Flaw That Could Enable Takeover
Oracle has fixed a Critical flaw in E-Business Suite, CVE-2026-101809, as part of the October 2026 Critical Patch Update. The vulnerability resides in the Workflow Notification Mailer component of the Workflow product and is described as unauthenticated and…
-
Oracle’s October Patch Fixes 1,209 CVEs, Including Six Critical Flaws
Oracle’s Critical Patch Update for October 2026 has a large slate, delivering 1,295 security updates that fix 1,209 unique CVEs across 33 product families, from databases to retail and healthcare software. The update, released on 20 October 2026, includes…
-
-
cURL to Publish Low-Risk Vulnerability Reports as GitHub Issues
cURL is changing how vulnerability reports are handled from 26 October 2026. Researchers will be asked to submit low- and medium-severity findings as public GitHub issues, while high- and critical-severity reports will remain confidential and continue…
SecurityOnline
-
Apple Blocks WebKit Identity Tracking, Forcing Advertisers to Rethink Targeting
Apple has unveiled a policy shift that blocks WebKit identity resolution as part of a broader privacy enforcement move. In a public briefing tied to the WebKit project, Apple explained that it is aggressively curbing cross-site tracking workarounds that…
SecurityOnline
-
Hackers Hijacked 333 Tor Exit Nodes to Steal SSH Credentials
A campaign compromised 333 Tor exit nodes—about 10% of the network’s exits—with Ebury 1.8.3, a Linux OpenSSH backdoor and credential stealer. Researcher KABA says the attackers had accessed the servers in August and kept the malware hidden for two months…
SecurityOnlineEbury
-
UK Watchdog Moves to Open iPhone Payments to Rival Wallets
英国竞争与市场管理局（CMA）宣布在国内市场对苹果的移动支付生态进行重大干预，旨在解锁 iPhone 的近场通讯（NFC）/无接触支付能力。该监管机构在一份监管通知中提出改革要点，指称苹果对硬件架构和开发者准入收费实施的强制性限制抑制了英国金融科技创新。CMA 要求苹果开放硬件架构，并显著降低开发者访问收费，以促进第三方钱包与服务在英国市场的竞争。 监管要点包括两项核心改革方向。其一是采用开放全球标准，要求苹果支持诸如 Host Card…
SecurityOnline
-
Perplexity brings its Computer AI workflows to Apple Silicon Macs
Perplexity says its Computer AI workflow can now run entirely on a Mac, including the control framework and task orchestrator. The feature is available to Pro, Max and Enterprise subscribers with a recent Apple Silicon Mac and at least 36GB of unified…
SecurityOnline
-
Aoki Infostealer Targets Credentials for AI Coding Tools and Cloud Services
Symantec and the Carbon Black Threat Hunter Team report that newer builds of the Aoki infostealer, also known as Aokigahara, target credentials and configuration files used by AI coding tools. The Windows malware searches for local files and tokens…
SecurityOnlineAoki
-
Hackers targeted government Linux servers to steal passwords and hijack official accounts
Between October 2025 and April 2026, a threat cluster designated CL-UNK-1211 conducted a campaign against government and state‑affiliated Linux servers, deploying SysGoRAT, a Go-based backdoor, alongside persistent PHP web shells. The operation leveraged…
SecurityOnlineCL-UNK-1068
-
ConnectWise Backup Breach Exposed More Than 300 Microsoft Tenants
Threat actors abused a compromised vendor API secret belonging to ConnectWise Cloud Backup (formerly SkyKick) to access customer Microsoft 365 environments, affecting more than 300 Microsoft Entra tenants. Huntress’ investigation indicates the primary…
SecurityOnline
-
Critical CouchDB Flaw Lets Admins Run Shell Commands, Apache Warns
On 20 October 2026, Apache disclosed six vulnerabilities affecting Apache CouchDB, led by a critical CVSS 9.3 flaw that allows a CouchDB admin to run arbitrary shell commands as the operating system user. The issues span pre-authentication and authenticated…
-
Oracle Patches 203 Fusion Middleware Flaws, Including Four Critical Bugs
Oracle has issued its October 2026 Critical Patch Update for Oracle Fusion Middleware, patching a total of 203 vulnerabilities across three products. Four of the flaws are CVSS 10.0 criticals, with 131 patches exploitable remotely without authentication. The…
-
Mozilla Blocks Weak eMudhra Keys That Could Enable Website Impersonation
Mozilla blocked eight compromised eMudhra intermediate certificates after learning on 17 October 2026 that their private keys had been exposed. The certificates can be used to sign HTTPS certificates, so possession of their keys could allow an attacker to…
-
Industrial Defender Adds Network Monitoring to Help Utilities Meet NERC CIP Rules
Industrial Defender announced a new version of its operational technology cybersecurity platform on 20 October 2026, adding internal network security monitoring (INSM) and Risk Signal. The company says the release is designed to help operators meet the…
SecurityOnline
-
Google Chrome 156 Fixes 353 Security Flaws, Including Six Critical Bugs
Google released Chrome 156 to the stable channel on 20 October 2026, fixing 353 security issues. The update includes six vulnerabilities described in the article as critical, affecting Skia, Accessibility, CSS, Paint and WebRTC. Most involve memory…
-
Apache Tomcat fixes authentication bypass and data leaks in key releases
Apache disclosed eight vulnerabilities in Tomcat on 20 October 2026. Three are rated Important by the project, including CVE-2026-101296, an authentication bypass affecting JNDI realms that use a non-GSSAPI SASL mechanism: an attacker may be able to log in…
-
MariaDB fixes seven flaws, including a file access bug that could enable code execution
MariaDB disclosed seven vulnerabilities on 16 October 2026: three rated critical with CVSS scores of 9.9, two high and two medium. The flaws affect versions 10.6, 10.11, 11.4, 11.8, 12.3 and 13.0 before the relevant fixes. A low-privileged database account…
-
30 Flaws Threaten Advantech Industrial Units, Enabling Remote Attacks
Singapore’s Cyber Security Agency disclosed 30 vulnerabilities affecting Advantech ADAM-3600 industrial remote terminal units (RTUs) on 20 October 2026. The devices are used for industrial data collection and remote monitoring, including at utilities and…
Tue 20 Oct· 26 articles
-
PHP Prepares Critical RCE Fixes as Leaked Flaws Raise Alarm
PHP announced a security release for 21 October 2026 at 14:00 UTC to address two critical flaws, CVE-2026-109618 and CVE-2026-109619. The article says leaks describe them as remote code execution vulnerabilities and rate them CVSS v4.0 9.2. PHP’s advance…
-
GNOME OS Preview Lets Users Test GNOME 51.1 on PC or VM
GNOME OS Preview brings the GNOME 51.1 desktop to a public testing image, offering a complete GNOME experience in a single bootable system. Unlike traditional Linux deployments that rely on a distribution’s package manager, GNOME OS updates are applied…
SecurityOnline
-
Windows Server 2025 Can Now Automatically Fix Critical Boot Failures
Microsoft has announced that Windows Server 2025 now includes Quick Machine Recovery (QMR), a feature that first appeared on Windows 11. Introduced after a major outage earlier in 2025, QMR activates when a server experiences a severe fault: WinRE (Windows…
SecurityOnline
-
Google Now Links Android Phone Numbers to Every Signed In Account
Google has announced that Android phone number verification is now on by default. The change means that when a user sets up an Android device, Google verifies one or more phone numbers on the device and links those numbers to every Google account signed in…
SecurityOnline
-
Ransomware gangs bypass MFA through PAN OS VPN flaw CVE-2026-0257
Ransomware groups are abusing CVE-2026-0257, a GlobalProtect authentication bypass in PAN-OS, to gain VPN access without valid credentials and to bypass MFA safeguards. The exposed flaw lets attackers skip login checks on vulnerable GlobalProtect portals and…
-
TP-Link shifts router assembly to Mississippi amid US import ban
TP-Link has announced a shift in its router manufacturing strategy in response to US regulatory actions. Following the FCC’s designation of foreign-manufactured consumer routers as national security risks and the subsequent ban on importing newly…
SecurityOnline
-
OVHcloud CLI Supply Chain Attack Replaced Releases to Steal Secrets
An OVHcloud supply-chain incident involved an attacker swapping release binaries for the OVHcloud CLI on GitHub with a modified build that exfiltrates secrets from disk. The attack surfaced when a customer’s pipeline failed a SHA-256 checksum check,…
SecurityOnline
-
Ahold Delhaize Cyberattack Takes Shopping Sites and Apps Offline
Ahold Delhaize disclosed on 19 October 2026 that a cyberattack forced the group to take most of its brand websites and mobile apps offline across Europe and the United States. The disruption affected a broad range of online shopping channels, with physical…
SecurityOnline
-
Windows 11 speeds up Edge launches with a new background process feature
Microsoft is testing a new accelerated app launch feature in Windows 11 preview builds, initially limited to the Microsoft Edge browser. The aim is to make Edge start faster when a user launches it, with potential for other developers to apply for access.…
SecurityOnline
-
Japanese Software Firm Sourcenext Resets Passwords After Breach Exposes 22.5 Million Records
Sourcenext, a prominent Japanese software distributor, has disclosed a data breach in which an internal member information query API was abused by unauthorised actors. The incident is believed to have compromised up to 22,519,960 customer records, including…
SecurityOnline
-
Linux Kernel Maintainers Drop AI Tag After It Failed to Show Usage
The Linux Kernel Maintainers have voted to retire the Assisted-by tag for patches. At the Linux Kernel Maintainers Summit on 8 October, attendees agreed to drop the tag, and a revert patch landed in the documentation development branch on 14 October.…
SecurityOnline
-
Windows 11 Update Breaks Xbox Live Sign In, but a Workaround Works
Following the Windows 11 cumulative update KB5127648, many players began experiencing persistent Xbox Live authentication failures. The issue causes games that rely on Xbox Live login to fail to sign players in, with notable impact on popular casual titles…
SecurityOnline
-
Spyware Used Targeted Ads to Infect Al Jazeera Devices Without Clicks
Citizen Lab has exposed a new AdFection spyware delivery chain that uses targeted advertising to plant information-stealing code on devices without any user interaction. The researchers describe how attackers leverage the real-time bidding (RTB) ecosystem to…
SecurityOnlineCaramel Tsunami
-
EU Reviews Google’s Search and Play Store Changes After €890m Fine
The European Commission is continuing dialogue with Google as it assesses the company’s compliance with the Digital Markets Act (DMA) following its July ruling and a combined 890 million euro penalty. The Commission is reviewing Google’s recent changes to…
SecurityOnline
-
ChatGPT Can Now Read Open Tabs and Automate Tasks Across Sites
OpenAI has announced a major update to its ChatGPT Chrome extension, introducing browser context awareness that lets ChatGPT see and analyse the tabs a user has open. The enhancement, available on Chrome and other Chromium-based browsers, pairs with…
SecurityOnline
-
OpenCode Breach Exposes AI Provider Keys in Distillation Attack
OpenCode has disclosed a security breach tied to a large-scale AI distillation attack that affected 1.4 per cent of OpenCode Console users. The company announced the incident on 17 October 2026 and said its investigation is ongoing. The breach centres on…
SecurityOnline
-
Apple Bans Nudify Apps and Closes a Loophole for Deepfake Abuse
Apple has tightened its App Store rules to target the misuse of synthetic media, announcing an immediate ban on nudify-style apps that generate non-consensual intimate imagery. The company’s updated developer guidelines bar tools that synthesize sexually…
SecurityOnline -
Ubuntu 26.10 adds local voice transcription and TPM encryption upgrades
Canonical’s Ubuntu 26.10 release, published on 20 October 2026, is an interim, non-LTS distribution offering nine months of active support through July 2027. Aimed at desktop enthusiasts, it foregrounds speedier UI responsiveness and newer features, while…
SecurityOnline
-
Expired Windows Boot Certificate Could Block Future Secure Boot Protections
The Windows Production PCA 2011 certificate has officially expired on 19 October 2026. This certificate long served to authenticate the integrity of the Windows Boot Manager during initial system startup. Microsoft states that devices still relying on the…
SecurityOnline
-
Windows 11 update promises up to 20% faster performance on 8GB PCs
Microsoft is rolling out a substantial Windows 11 performance update aimed at improving responsiveness on devices with modest memory, such as 8GB RAM laptops. The company says a redesigned low-level memory scheduler and related optimisations can deliver up…
SecurityOnline
-
OpenAI Confirms It Is Building a Humanoid Robot, With a Demo Possible in 2027
OpenAI chief executive Sam Altman has publicly confirmed that the company is developing its own humanoid robot, a move that has long circulated in industry chatter. Speaking on the Sources podcast, Altman reiterated that OpenAI intends to pursue a robot in a…
SecurityOnline
-
Drupal Fixes Critical Field UI Flaw After Researchers Publish PoC
Security researchers have published a full technical analysis and proof-of-concept (PoC) exploit for a critical Drupal remote‑code‑execution flaw in the Field UI module, tracked as CVE-2026-108097. Drupal addressed the vulnerability in advisory…
-
OpenBSD ‘Big Fish’ exploit chains flaws to gain root access
In a public disclosure on 16 October 2026, researcher Calif released full technical detail and working proof-of-concept (PoC) code for a local privilege escalation chain dubbed “Big Fish” affecting the OpenBSD kernel. The chain enables a local user to gain…
SecurityOnline
-
Attackers Exploit Redis Flaw to Run Code on Vulnerable Servers
Defused’s honeypots have observed active exploitation of Redis RESTORE flaw CVE-2026-25243 in mid-October 2026. The memory-corruption vulnerability, rated CVSS 7.7, enables remote code execution for Redis servers that permit the RESTORE command. The…
-
UpdraftPlus Breach Let Attackers Install Backdoors on WordPress Sites
UpdraftPlus experienced a data breach over the weekend of 17-18 October 2026, with TeamUpdraft stating that its customer database was accessed. The exposed data include names, email addresses, billing addresses and order history, as well as hashed passwords…
SecurityOnline
-
Hackers Exploit Siemens Software Center Flaw to Hide Malware
Siemens confirms that CVE-2026-110936, a DLL sideloading flaw in Siemens Software Center, is being exploited in the wild. The vulnerability allows attackers to load malicious DLLs through an uncontrolled search path, disguising malware as a legitimate,…
