Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system.…
Month: October 2026
Hackers Exploit Critical Collabora Online Flaw to Backdoor Nextcloud Servers
Hackers are exploiting a critical flaw in the Collabora Online Built-in CODE Server app for Nextcloud, with users reporting web shells on compromised servers. Tracked…
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit…
New infosec products of the week: October 16, 2026
Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds. NinjaOne combines Katana AI and…
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in…
UAE organisations must prepare for quantum security now, says Help AG CEO
The rapid adoption of artificial intelligence (AI) is forcing organisations to reconsider how they manage cyber risk, while the prospect of quantum computing is creating…
North Korean IT Workers Used Stolen US Identities to Earn $3 Million
North Korean IT Workers Used Stolen US Identities to Earn $3 Million Pierluigi Paganini October 17, 2026 The FBI raided 40 Texas homes over a…
Ransomware extortion gets personal as attackers target employees’ families
Exploiting enterprise AI As enterprises connect AI agents to corporate data, applications, and identity systems, these tools are becoming another potential attack surface. Semperis found…
Ta-da! Wiz launches Runtime Sensor to provide real-time detection and response
Today, we’re very excited to announce the launch of the Wiz Runtime Sensor into public preview, enabling organizations to detect threats affecting their cloud workloads…
Contents may be malicious.
Adam Meyers, Head of Counter Adversary Operations at CrowdStrike, is discussing their work on “PhantomRaven, An LLM-Generated Information Stealer Developed for Bug Bounty Hunting.” PhantomRaven,…
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants.…
Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes
Anthropic says an internal Claude research model has traced the origins of five NSA-supplied elliptic curve seeds in under 30 minutes, answering a cryptography question…