A week in security (October 19 – October 25)
Last week on Malwarebytes Labs: Resident Evil maker Capcom warns of phishing after 11.7 million records exposed Crime Stoppers chapter freezes tips after breach breaks…
Latest Cybersecurity News — Page 88
View all →
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher…
Gartner: Winning in the edge
Enterprises are shifting agentic artificial intelligence (AI) demand from intensive compute consumption and mass data transfers among endpoints towards real-time execution and performance economics to…
GMO Internet, Japanese Companies Pay Users After Cyberattack
Japanese companies are starting to compensate customers after a run of cyberattacks disrupted internet services and stirred concerns about economic stability. GMO Internet is the…
Node2Shell Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
A vulnerability in Google’s Brotli data compression library, tracked as CVE-2026-111497 and dubbed Node2Shell, has led to security updates from Microsoft, the Node.js project and…
PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts
PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts Pierluigi Paganini October 26, 2026 Cyfirma links PHP2Shell scans of 216 vulnerable hosts to a…
Chinese video AI models beat US rivals in visual quality, but lag on safeguards: HKU study
Chinese AI video-generation models have surpassed leading US rivals in visual quality, but several fall behind in safety safeguards, according to researchers at the University…
10 most powerful cybersecurity companies today
10. SentinelOne: Covering the full AI lifecycle Why they’re here: A perennial leader in endpoint protection, SentinelOne is expanding its product portfolio to challenge the…
CVE-2023-25610 a critical RCE vulnerability in FortiOS: everything you need to know
On March 7, Fortinet published an advisory for CVE-2023-25610, a critical remote code execution (RCE) vulnerability in FortiOS, Fortinet’s operating system. This vulnerability is a…
Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own
Executive Summary PHP2Shell’s fix is to update PHP, but patching at scale is slow. Only 199,000 of 156 million PHP installations were patched in the…
HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow
The HTTP2Shell vulnerability reaches beyond web traffic, with new research showing how the same Brotli decoder flaw (CVE-2026-111497) can disrupt .NET applications, FFmpeg media processing,…
OpenAI Codex Breaks USB Drive Encryption in Minutes, Exposing Critical Security Flaws
OpenAI Codex helped researcher Xusheng Li identify vulnerabilities in encrypted USB and copy-protection products, showing how AI can speed up reverse engineering. Published on October…