Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
Amsterdam-based industrial cybersecurity firm Indurex has raised €7 million (roughly $7.84 million) in a round led by Contrarian Ventures, with Axeleo Capital and Curiosity also…
Year: 2026
Signal Vulnerability Could Keep Calls Alive After Users Hang Up
Signal Vulnerability Could Keep Calls Alive After Users Hang Up Pierluigi Paganini October 22, 2026 A critical Signal flaw could keep calls active after hang-up,…
China-nexus actor linked to attack on ConnectWise Cloud Backup
Researchers said the hackers employed a powerful AI tool to accelerate and scale the attacks against hundreds of Microsoft 365 users. Source link
Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
A new bipartisan House bill would charge the federal government with developing formal guidance for defending AI models against distillation attacks. The AI Cyber Defense…
Malaysia’s TuJu app struggles after Anwar suggests switching from Waze
Malaysia’s highway authority is working to resolve technical disruptions affecting its TuJu navigation application following a sharp increase in users. In a statement on Thursday,…
EMudhra Intermediate CA Certificates Compromised
Executive Summary Eight intermediate certificate authority (CA) private keys belonging to Indian CA eMudhra Limited were compromised due to a critical cryptographic defect during the…
Security teams urged to center defense on the flaw profile attackers target most
“If your patching cadence still has the word ‘monthly’ in it, you’re defending against an adversary who abandoned that schedule a long time ago,” McKee…
Hackers got a four-day head start on epic PHP2Shell vulnerability
Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments…
Corsha launches Folio to automate OT network mapping and industrial system documentation
Corsha, a provider of industrial identity security solutions, announced on Wednesday Folio, a new module on the Corsha Industrial Identity Security Platform that automatically creates…
ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors
Throughout October 2026, we identified an actor using tooling associated with ARTEX, an autonomous AI penetration-testing agent, to target multiple IT and software vendors. The…
GitLab patches a maximum-severity vulnerability.
Threat actors compromise LiteLLM. Amazon detected PHP2Shell exploitation days before disclosure. Source link
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. VCO is a web-based management portal that…