Security news
Headlines from security news sites, newest first. Each opens the original article in a new tab.
Thursday, October 15
-
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
The Register Security · 2 days ago
-
Microsoft fixes bug causing Windows black screens, Explorer crashes
BleepingComputer · 2 days ago
-
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
The Hacker News · 2 days ago
-
UK Legal Aid Agency: Hackers stole records dating back to 1978
BleepingComputer · 2 days ago
-
Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog
The Register Security · 2 days ago
-
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
The Hacker News · 2 days ago
-
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Dark Reading · 2 days ago
-
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
The Hacker News · 2 days ago
-
Jev and other decision models can still be tricked with prompt injection
The Register Security · 2 days ago
-
ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)
SANS Internet Storm Center · 2 days ago
Wednesday, October 14
-
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
BleepingComputer · 3 days ago
-
Cisco make-me-root email bug exploited as a 0-day by unknown crims
The Register Security · 3 days ago
-
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
Dark Reading · 3 days ago
-
Yam Store: The Phishing Network Behind a Billion Messages
Dark Reading · 3 days ago
-
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
Dark Reading · 3 days ago
-
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
BleepingComputer · 3 days ago
-
Security researchers spent 6 days doing their Chromework, built 1B user exploit
The Register Security · 3 days ago
-
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
The Hacker News · 3 days ago
-
Ledger asks sellers across Asia to halt sales after supply-chain attack
BleepingComputer · 3 days ago
-
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
The Hacker News · 3 days ago
-
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
The Register Security · 3 days ago
-
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
The Hacker News · 3 days ago
-
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
The Hacker News · 3 days ago
-
U.K. Sanctions Cryptomus for RU Money Laundering
Krebs on Security · 3 days ago
-
Russian Influence Operation Widely Targets Latin America
Dark Reading · 3 days ago
-
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The Hacker News · 3 days ago
-
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
The Hacker News · 3 days ago
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Advisories · 3 days ago
-
How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
The Hacker News · 3 days ago
-
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
The Hacker News · 3 days ago
-
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
The Hacker News · 3 days ago
-
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
The Hacker News · 3 days ago
-
OpenAI engineer charged after boardroom bug found wrapped in toilet paper
The Register Security · 3 days ago
-
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
The Hacker News · 3 days ago
-
Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)
SANS Internet Storm Center · 3 days ago
-
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
The Hacker News · 3 days ago
-
Ransomware gets personal: 'We-know-where-you-are kind of stuff'
The Register Security · 3 days ago
-
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Dark Reading · 3 days ago
-
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
The Hacker News · 3 days ago
-
ISC Stormcast For Wednesday, October 14th, 2026 https://isc.sans.edu/podcastdetail/10136, (Wed, Oct 14th)
SANS Internet Storm Center · 3 days ago
-
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
The Hacker News · 3 days ago
Tuesday, October 13
-
Microsoft Patches More Than 1,400 Security Flaws
Krebs on Security · 4 days ago
-
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
Dark Reading · 4 days ago
-
North Korea Phishes Ukrainians for War Intel
Dark Reading · 4 days ago
-
Anthropic Finds Ingredients for Future AI Worms
Dark Reading · 4 days ago
-
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
SANS Internet Storm Center · 4 days ago
-
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
The Hacker News · 4 days ago
-
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
The Hacker News · 4 days ago
-
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
The Hacker News · 4 days ago
-
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
The Hacker News · 4 days ago