This month in security with Tony Anscombe – October 2026 edition
The PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out cyber-readiness plans 30 Oct 2026 With October coming…
Latest Cybersecurity News — Page 33
View all →
Everyday channels are available in an incident, but you may not want them
What was already said As I discussed in my previous CSO article, putting a lawyer in a large incident channel does not make every conversation…
Streamlining OS and Application Hardening: Revealing Misconfigurations with Wiz’s Agentless Custom Host Configuration Rules
Editor’s note: In our previous blog post, we announced that Wiz was expanding its risk assessment capabilities beyond cloud infrastructure by now including host and…
The long road to root.
Today we are joined by Subhajeet Singha, Senior Security Researcher at Acronis Threat Research Unit, discussing their work on “Red Heron exploits Gitea n-day flaw…
SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
SS7 and Diameter signaling attacks can track, intercept, and impersonate you. Here’s how they work and how to stop them. Your phone can be tracked,…
Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours
Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence threat intelligence snapshot lists 60,471…
Russian Hackers Exploit MDaemon Mail Server Flaw to Install Backdoors Without User Interaction
Russia-aligned threat actors are exploiting a flaw in MDaemon mail server software to run code on the server. Victims don’t have to open or click…
Claude Code extension poisoned with persistent SSH backdoor
A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion…
Hackers steal and publish data on 41,000 Homeland Security workers
In this article Hackers published work details and internal group memberships for more than 41,000 DHS workers. The data could enable targeted scams, harassment, stalking,…
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Ravie LakshmananOct 30, 2026Vulnerability / Web Security Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches…
North Korean ‘elite’ hacking group steals $6.36bn from Binance
A North Korean hacking group has transferred about $6.36bn from Binance wallets. According to TRM, the cryptocurrency was held on 10 blockchains, and the transfer…
Passkeys Are Better Than Passwords. But They Are Not Enough.
For decades, passwords have been one of cybersecurity’s most persistent weaknesses. Users forget them, reuse them, share them, and surrender them to convincing phishing sites.…