Intro to forensics in the cloud: A container was compromised. What’s next?
Forensics in cyber security is the process of extracting and recovering data after an attack has occurred in order to fully assess it. It is…
Year: 2026
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft says Teams will begin using AI-powered phishing detection in early November 2026 to detect malicious behavior in messages. The rollout is part of a…
HPE Warns Critical Aruba Networking Flaws Could Let Hackers Take Complete Control of Devices
Hewlett Packard Enterprise has released security patches for multiple vulnerabilities in Aruba Networking wireless software that could let attackers take complete control of affected devices.…
Critical Okta Access Gateway Vulnerability Enables Remote Command Execution
A critical command execution vulnerability has been identified in Okta Access Gateway (OAG), which could allow an authenticated administrator to execute system commands by submitting…
Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign
WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access campaign targeting users in Portugal. Overlord RAT…
Hackers hijack exposed AI models to launch cyberattacks at victims’ expense
An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while…
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Swati KhandelwalOct 23, 2026Vulnerability / Software Security Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine…
Suspect Post Office systems that came before Horizon to be investigated by the government
The government expects to report on the impact of pre-Horizon software system errors on subpostmasters by spring next year. It said it is currently looking…
Japan AI Cyberattack Simulations Planned As PHP Flaws Spread
Japan is preparing to set up a dedicated team to run AI-driven cyberattack simulations to expose weaknesses in technology systems. Japan’s plan for AI cyberattack…
Russia-linked hackers use decentralised network in Ukraine cyberattack
Russia-linked hackers used the volunteer-run Yggdrasil network to conceal communications during an attack on a Ukrainian grain logistics company, marking the first documented use of…
Attackers Exploit Third Arista VCO Zero-Day in Four Months
Networking solutions provider Arista Networks on Thursday rolled out patches for an exploited zero-day vulnerability in its centralized management tool VeloCloud Orchestrator (VCO). The critical-severity…
PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet
PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet Pierluigi Paganini October 23, 2026 PHP2Shell attacks have surged into the millions, but no successful exploitation…