Australia sanctions North Korean IT worker bosses and financiers
Key points Australia has sanctioned two North Korean individuals, Yu Pu Ung and Sim Hyon Sop, and two companies, Korea Mangyongdae Computer Technology Company and…
Month: October 2026
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Signal has resolved a critical-severity vulnerability that could allow a malicious caller to keep audio and video tracks enabled even after the user hung up.…
Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX Pierluigi Paganini October 22, 2026 China-linked Storm-0940 used AI tool ARTEX to target…
Agentic AI helps hackers level up, even without detailed instructions
Low-skilled hackers are likely to become a lot more dangerous over the next 12 months, CrowdStrike warned. Source link
eMudhra kills its certificate business after researchers cracked its private keys in under a second
Indian certificate authority eMudhra said Thursday it will stop issuing SSL/TLS certificates days after researchers showed that the private keys securing eight of its certificates…
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some…
Disgraced eMudhra drops out of TLS business after using cert private key of 4
eMudhra, the certificate authority that issued eight intermediate TLS credentials so weak that anyone could mint certificates for any website or mail server—one had a…
Localizing compliance at scale: Achieving South Korea’s ISMS certification
For ten days, auditors appointed by the Korea Internet & Security Agency (KISA) sat together with us and worked through 80 controls. That is what…
Behind Japan’s Warnings of a Cyber Crisis
A Significant Increase in Cyberattacks Throughout Q3 2026, Insikt Group observed a significant increase in reported cyberattacks targeting organizations in Japan. Between Q2 and Q3,…
The early bird gets the exploit.
Amazon spots PHP exploits before disclosure. GitLab patches a critical flaw. Meta faces a $25 billion penalty. Autonomous AI agents power new cyberattacks. Hackers breach…
Railway warns devs to rotate secrets after potential breach
Cloud hosting provider Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week.…
Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts
Major U.S. banks are detecting third-party AI agents inside customer accounts, raising concerns that automated tools could act beyond the instructions customers give them. Some…