KVM escape exposes broader attack surface in Linux networking
In their demonstration, the researchers managed to change the header length from 20 to 60 bytes, while the packet buffer held only 28 bytes of…
Month: October 2026
The Internet goes on high alert after discovery of 8 compromised TLS certs
Heartbleed is the name of a critical vulnerability in the OpenSSL cryptography library. In 2014, it came under mass exploitation. Exploits let many unaffiliated hackers…
H₂O Retailing deploys Tenable One to unify cyber exposure management across multi-cloud infrastructure
Exposure management company Tenable Holdings announced that H₂O Retailing has deployed the Tenable One Exposure Management Platform across its diverse multi-cloud infrastructure. The implementation provides…
Advantech and DEKRA target industrial cybersecurity gaps as EU Cyber Resilience Act implementation advances
As the European Union’s Cyber Resilience Act (CRA) enters its implementation phase, cybersecurity compliance is becoming an increasingly important requirement for industrial equipment and Edge…
8 eMudhra certificates are compromised. Here’s what you need to know
On October 19, 2026, at approximately 17:00 UTC, Cloudflare became aware that private keys associated with eight eMudhra intermediate certificates were compromised. These certificates were widely trusted…
Introducing ITDR Lookback: Find Out Who Was in Your Microsoft 365 Tenant Before You Were
Today, Huntress Managed ITDR’s Lookback feature is generally available for newly onboarded Microsoft 365 tenants. Lookback automatically examines up to 180 days of login history…
Cloudy with a chance of outages.
A Google Cloud outage disrupts UK banks. DHS bans DeepSeek. Shape-shifting ransomware targets Macs. Bank of America hires an army to patch AI-discovered flaws. Canada…
PHP warns admins of two critical flaws, emergency patches coming tomorrow
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has…
eMudhra Certificate Authority Compromise Triggers Emergency Action Across Browsers
The private keys behind eight eMudhra intermediate certificate authority certificates have been compromised, prompting emergency blocks across major browsers and software platforms. The affected certificates…
US Government Bans DeepSeek AI From Federal Civilian Agency IT Systems
The U.S. Department of Homeland Security (DHS) has instructed federal civilian agencies to remove DeepSeek artificial intelligence products from their information technology systems and to…
Multi-Cloud Blind Spots Are Leaving Security Teams Exposed
Most enterprises didn’t choose multi-cloud as a deliberate strategy. They ended up there: an acquisition brought in a company already running on a different provider,…
Chrome flags malicious commands that scammers pass off as fixes
Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The…