Railway warns devs to rotate secrets after potential breach
Cloud hosting provider Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week.…
Month: October 2026
Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts
Major U.S. banks are detecting third-party AI agents inside customer accounts, raising concerns that automated tools could act beyond the instructions customers give them. Some…
WorkNest Secure Gains The Cyber Scheme Accreditation
UK cybersecurity specialist WorkNest Secure has achieved Accredited Organisation status under The Cyber Scheme, providing further independent recognition of the technical expertise and professional standards…
Cybercriminals Used Claude and Grok to Launch Automated Attacks Against Banks
Cybercriminals used a multi-agent system called CARLIY0S to coordinate attacks against more than 400 financial institutions and payment providers across Latin America. The system combined…
Paying in ADA: Cardano’s vision for the future of payroll
The crypto economy is maturing faster than the bulk of traditional organizations could’ve imagined. In light of this financial revolution, payroll is emerging as one…
New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619
Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution…
Facebook’s misleading privacy claims land Meta a $25 billion penalty
Facebook’s Cambridge Analytica scandal may feel like very old news. But the consequences are still arriving, and the latest comes with a $25 billion price…
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
The Hacker NewsOct 22, 2026Enterprise Security / Artificial Intelligence Right now, there is probably an AI agent running on a laptop somewhere in your network.…
Botched PHP2Shell disclosure revealed as panic continues
A worldwide cyber panic sparked by the discovery and disclosure of two critical vulnerabilities – dubbed PHP2Shell – in the core PHP code underpinning almost…
SafePay Ransomware Hit 600+ Victims, FBI And CISA Warn
The FBI, CISA and international partners have issued a warning about SafePay ransomware, a group that has impacted at least 600 victims across multiple critical…
PHP2Shell CVE-2026-109618 PHP Flaw Hits Gov Sites
Governments and cyber-security agencies worldwide are urging website operators to patch PHP2Shell, two critical PHP flaws tracked as CVE-2026-109618 and CVE-2026-109619. Found with AI, the…
Relationships Australia SA uses AI agent to assess at-risk clients
Key points Relationships Australia SA is using AI agents to risk-assess clients and trigger safety checks during the five-to-six week wait for an appointment. A…