TCE Weekly Roundup: PHP2Shell, Serengeti III & More
A decade-old flaw in the language behind much of the web, found by AI and serious enough to take Wikipedia offline. Driving licenses sold for…
Author: Cybernoz
Meta sued in Australian class action
A class-action lawsuit has been filed in an Australian court against Meta Platforms’ Facebook and Instagram that alleges the social media platforms exposed children to…
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal
Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal Pierluigi Paganini October 23, 2026 A New Mexico judge ordered Meta to pay $25 billion…
PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure | Blog
Andrzej Matykiewicz | Friday, 23 October 2026 at 13:50 UTC PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By…
ThreatLocker launches tool to control access and actions by AI agents
ThreatLocker has launched Zero Trust AI Control (ZTAIC), a product it says is designed to help organisations deploy so-called “agentic” AI while limiting what AI…
eMudhra quits global TLS certificate market after compromise of CA signing keys
“The harder finding for many organizations will be that they can’t answer these questions at all,” Grover said, referring to where certificate trust decisions are…
US Coast Guard releases NVIC 02-26 to guide maritime operators on cybersecurity plans, IT and OT risk assessments
The U.S. Coast Guard released Navigation and Vessel Inspection Circular (NVIC) 02-26 to help maritime organizations comply with federal cybersecurity regulations covering U.S.-flagged vessels, port…
Forescout warns internet-exposed refrigeration controls could enable attacks on food supply chains and hospitals
New research from Forescout’s Vedere Labs identified 12,976 internet-exposed service observations associated with refrigeration control systems across 6,017 distinct public IP addresses in 99 countries…
Why data security capabilities should be integrated w/ CNAPP
Editor’s note: Wiz recently announced the general availability of Wiz for DSPM. With this release, we enhanced our cloud security platform with broader coverage for…
HPE patches eight max severity RCE and auth bypass AOS flaws
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution…
Hackers Use New BlackX Bootkit to Bypass Windows Secure Boot on Fully Patched Systems
A new UEFI bootkit called BlackX has been used in cyberespionage attacks against diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan. The malware targets Secure Boot,…