GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
GoDaddy revoked 404,607 SSL (Secure Sockets Layer) and TLS (Transport Layer Security) certificates on October 21, 2026, after finding errors in how they had been…
Month: October 2026
Microsoft 365 accounts compromised at 79 organizations, no passwords needed
An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to…
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out…
Can Britain’s grid keep up with the datacentre boom?
Ramping datacentre demand is putting a new kind of pressure on the UK’s energy grid. Developers are jostling for position in an increasingly saturated connection…
Operation Serengeti III Led To 1,462 Arrests In 21 Countries
A cybercrime crackdown spanning 21 countries has led to 1,462 arrests, the disruption of 10,909 malicious networks and the recovery of more than USD 105…
India’s eMudhra exits website security business
Digital security firm eMudhra is exiting its global business of issuing security certificates for websites including India’s tax portal after major browser makers blocked them…
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Two days after PHP rolled out emergency fixes for the PHP2Shell vulnerabilities, threat actors have tried to use the flaws to spread a Mirai botnet.…
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches Pierluigi Paganini October 23, 2026 PHP warns of a new, unlikely code execution flaw,…
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Security researchers flag botnet activity, but successful compromises have yet to break through. Source link
Senators say targeted ads are a security risk. Ad groups say the critics are off base.
Two senators say that revelations about online targeted advertising being used as a vector for spyware infections underscore the need for better security practices in…
Oracle patched 1295 security flaws in October, six rated 10.0
One, tracked as CVE-2026-91231, is in the Adapters component, and enables unauthenticated attackers to compromise Oracle SOA Suite resulting in its takeover, with potential impact…
Knicks sent employees fake offer of championship rings in phishing test: Report
The New York Knicks organization sent employees a phishing email promising free championship rings in a test of its staff’s ability to detect scams, The…