TikTok ads for fake stalkerware apps are scamming people who download them
Fake “stalkerware” apps promoted on TikTok are being used to lure would-be snoops into paying for services that do not deliver the invasive capabilities advertised,…
Month: October 2026
PHP2Shell exposes the weakness in coordinated vulnerability disclosure
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But…
ASPM in the AI Era Pt 2: Prioritize AppSec Risk
In Part 1, we established how to centralize your AppSec tools, correlate assets, and map scanner coverage across repositories. Establishing visibility is an essential baseline,…
Anthropic pitches AI safety bill.
7-minute read | 1,700 words Anthropic pushing for federal AI safety legislation. Behind the scenes, Anthropic has been working with federal lawmakers to create a…
Capcom confirms data breach affecting 11.7 million accounts
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.…
Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List
Several unpatched Linux-related security flaws were posted to public mailing lists in October, exposing technical details before fixes were ready. The reports, submitted by Trend…
Huntress Expands Ingram Micro Partnership Across Canada and Latin America
Cybersecurity company Huntress has expanded its distribution partnership with Ingram Micro into Canada, Latin America and the Caribbean, strengthening its channel presence across the Americas.…
K0T Hackers Target FortiGate, FortiWeb and Palo Alto GlobalProtect in Credential Theft Campaign
A widespread campaign targeting FortiGate, FortiWeb, and Palo Alto GlobalProtect appliances to steal credentials, establish persistent access, and exfiltrate corporate data. The investigation associates the…
Attackers abuse legitimate platforms to deliver phishing emails that pass authentication checks
A Dell order confirmation lands in your inbox and it looks pretty legitimate: it comes from Dell’s order domain, passes DKIM and DMARC checks, uses…
Woman faces years in prison over a Cash App account she says she never opened
A Cash App account opened in her name has left Amanda Smith facing criminal charges and potentially up to six years in prison. 404 Media…
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Swati KhandelwalOct 22, 2026Vulnerability / Enterprise Security Attackers are exploiting a zero-day SQL injection flaw in Arista’s VeloCloud Orchestrator (VCO), the central management system for…
The drift towards AI totalitarianism
Public anxiety around artificial intelligence (AI) is boiling over. Fuelled by frontier models’ summer hacking spree and former Anthropic researcher Jacob Coxon’s doom-laden resignation post…