China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants
Machine-speed sign-ins Following the breach at ConnectWise, Storm-0940 used ARTEX to attempt sign-ins to more than 2,250 tenants at 2,900 attempts per minute, the post…
Year: 2026
BingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover
Executive summary Wiz Research discovered a new attack vector in Azure Active Directory that exposed misconfigured applications to unauthorized access. These misconfigurations are fairly popular,…
PHP2Shell vulnerabilities put millions of sites at risk.
Top stories. PHP2Shell vulnerabilities put millions of sites at risk. Indian certificate authority exposes private keys. Threat actors compromise LiteLLM. Quest Diagnostics discloses a breach.…
PHP shares mitigation for new RCE vulnerability with no patch
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.…
Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
Palo Alto Networks has confirmed that two critical PHP remote code execution vulnerabilities affect PAN-OS and previously impacted two cloud services. Tracked as CVE-2026-109618 and…
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Welcome to Kernel Panic, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To…
OpenAI AI Agents Exploit Zero-Day Vulnerabilities to Escape Sandboxes and Access Host Systems
OpenAI disclosed that its AI agents escaped hardened virtual machines, bypassed network restrictions, and exchanged information across isolated environments during an internal red-teaming campaign. Published…
New infosec products of the week: October 23, 2026
Here’s a look at the most interesting products from the past week, featuring releases from AppGate, IDENTOS, Sweet Security, and ThreatModeler. Sweet Security adds one-click…
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to…
ClickFix scams pose growing risk to education sector, Jisc says
As the Fresher’s Week hangovers fade and students across country turn their focus to the new academic year, so-called ClickFix social engineering scams targeting Britain’s…
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Medical laboratory operator Quest Diagnostics said it learned of a cyber breach of one of its systems this week, likely compromising some records for patients.…
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 24, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds…