Pakistan has extended its airspace ban for Indian aircraft for another month, until Nov 24, according to a Notice to Airmen (Notam) issued by the Pakistan Airports Authority (PAA). The previous extension of the ban was set to…
Police and protesters clashed violently in Paris and other French cities on Saturday on the sidelines of nationwide marches against soaring inflation, with one demonstrator’s hand blown off, multiple blazes set, and looters…
From US threats to cut off intelligence support for Ukraine to a diesel deal that could help Russia fund its war, it has been a damaging week for ties between Kyiv and its most important ally, Washington. Frustrated by high…
FOR decades, discrimination and prejudice have narrowed the space for the country’s minority communities. The HRCP has warned that non-Muslim groups subjected to the misuse of the blasphemy laws as well as forced marriages and…
India’s Cockroach Janata Party (CJP) founder Abhijeet Dipke was released from detention on Saturday, a day after he was detained during a police crackdown on protests against the election authority. Dipke, 31, was detained on…
Pope Leo XIV left the hospital to enthusiastic cheers and applause from well-wishers and returned home to the Vatican on Saturday, four days after undergoing surgery for lung cancer. The 71-year-old pope was seen crossing the…
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]
Shaheen Shah Afridi has been one of the casualties of Pakistan cricket’s brutal game of captaincy musical chairs. But at a stage in his career when he has much to prove, the left-arm pace spearhead has the One-day…
Jamiat Ulema-i-Islam-Fazl (JUI-F) chief Maulana Fazlur Rehman on Saturday clarified that his party’s remarks regarding the country’s security situation were directed at policies, not institutions, and termed the allegations…
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
Iranian Foreign Minister Abbas Araghchi said on Saturday that Tehran supports a “political process” to resolve the conflict between Saudi Arabia and Yemen’s Houthi rebels. The Houthis have repeatedly attacked Saudi targets,…
Prime Minister Shehbaz Sharif on Saturday reiterated that the Centre was “compelled” to impose emergency and governor’s rule in Khyber Pakhtunkhwa due to the provincial government’s lack of cooperation in countering terrorism.…
President Donald Trump signed an executive order on Friday that waived sweeping US sanctions and tariffs targeting Russia’s energy revenues, marking a new low in Washington’s ties with war-torn Ukraine. The move came as…
Egyptian President Abdel Fattah al-Sisi said on Saturday that he would not seek to remain in office when his current term expires in 2030, describing the matter as “completely settled”. Sisi, 71, a former army general who…
'Hold my beer, have fun getting into your offices'
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on…
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. The post Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel appeared first on…
Screengrab shows iPhones floating in the water after a vessel reportedly met with an incident in the Strait of Hormuz. — X/@Telegraph Iranian fishermen and salvage boat operators recovered hundreds of iPhones, French perfumes,…
QUETTA: Unidentified armed men kidnapped 20 police recruits undergoing training at the Kalat Police Training Centre while they were travelling in a passenger van along the Quetta-Karachi Highway in Mastung district, officials…
THE much-anticipated, and somewhat dreaded, emergency in KP was finally proclaimed by the president on Oct 11. The federal cabinet’s recommendation, the summary of the prime minister’s advice to the president, and the…
North Korea has tested a “new-type” precision-guided torpedo system that uses artificial intelligence for target detection and guidance, state media reported Saturday, as the nuclear-armed country steps up weapons testing. The…
Commander National Strategic Command (CNSC) General Aamer Raza warned the country’s adversaries on Saturday that “any miscalculation will be met with a response far beyond the imagination or the calculation of the initiator”.…
Finance Minister Muhammad Aurangzeb on Saturday told AFP that Pakistan had so far withstood the shock from skyrocketing energy prices due to the US-Israeli war on Iran , but that attacks on infrastructure in Saudi Arabia and…
Anthropic, the creator of the AI assistant Claude, confirmed on Friday it is circulating a draft bill among US lawmakers aimed at regulating artificial intelligence to address the lack of federal legislation on the risks posed…
UNITED NATIONS: More than 340 children have been reportedly killed and hundreds more injured in Gaza since a ceasefire between Hamas and Israel was announced, the UN Children’s Fund (Unicef) said on Friday, warning that…
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick)…
ISLAMABAD: Pakistan is among the 10 countries bearing the brunt of the global hunger crisis, with climate-related disasters, economic hardship, displacement and shrinking humanitarian funding pushing vulnerable communities…
• Demands verifiable mechanism to end terrorist attacks from Afghan soil • FO says no formal Russian mediation initiative currently under discussion • Warns India that any future aggression will be met with a stronger response…
KARACHI: A septuagenarian man died of rabies at a local hospital, raising this year’s tally from the deadly infectious disease in Sindh to 40, officials said on Friday. They said that the victim, a resident of Baldia Town, was…
New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t…
The actions could have resulted in criminal charges had humans been behind the keyboard.
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.
Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.
Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP…
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. [...]
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program…
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an…
Legacy protocol is going to be axed, and enforcement by default will highlight how migration is going
Cybersecurity giant Proofpoint says it will acquire Miami-based data visibility and security company Varonis in an all-cash transaction worth $6.3 billion.
A researcher found serious flaws in Eiliko’s security, exposing private conversations and allowing remote changes to what the robot says.
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack. The post In Other News: ICS-Sniper Attack, Hacking…
OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent…
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can investigate unauthorized AI use…
Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed vast amounts of customer information.
Legal eagles still plodding along with some operations, but paper and e-notices delayed until further notice
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
An alleged Chinese state-backed group is using a new zero-day affecting BeyondTrust IT support software to conduct espionage attacks.
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. [...]
The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) published Key Practices for…
CISA is aware of critical authentication bypass vulnerability CVE-2026-102764 , affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and…
CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CVE-2026-102764…
Sending out lots of job applications without keeping track could make a scammer’s message look like a reply you’ve been waiting for.
A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week. The post BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts appeared…
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced…
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the…
Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek .
Eight US states and a mother of two accuse the ChatGPT maker of putting children’s safety and privacy at risk.
Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. The post OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks appeared first…
Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek .
UK school admits data protection bungle as children's data at risk
Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update. [...]
In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office. The post Microsoft Patches Two Dozen RCE Flaws in Office appeared first on SecurityWeek .
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. [...]
School staff seemed to be trying to get ransomware – for a second time
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company. The post Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis appeared first on SecurityWeek .
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The…
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond…
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of…
I believe the cybersecurity industry may be approaching AI security the wrong way.
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.
The entrance to Shanidar Cave in Iraq's Kurdistan region, a site of important Neanderthal remains, is seen in an undated photograph released on October 15, 2026. — Reuters The bones of a Neanderthal from a cave in Iraq's…
The incident, which involved a government contractor, has halted all production of bankruptcy notices.
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel…
Most attempts were pranks, but some could fool unwary AI agents
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
They tried to sound the alarm in August
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways.…
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter.
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate. The post Context Is King in the Fight Against Modern Cyberattacks appeared first on SecurityWeek .
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]
This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies. The post Watch Now: Zero Trust Strategies Summit – All Sessions Available on…
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis each public-key…
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen…
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August…
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google's seal of approval
Some flaws could let attackers run malicious code on your device through a crafted webpage.
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed ROI777. Help TDS is assessed…
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and weaknesses of both…
CEO said the workers were hired in Q2 and are still helping today
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. [...]
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker…
Not sure if a link is safe? Malwarebytes Scam Link Check scans suspicious links for signs of phishing, scams, malware, and other online threats before you click.
Platform points to Iran, Russia, and China but provides no public evidence for attribution
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React…
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw…
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following versions of Thermo Fisher Torrent Suite Software are affected: Torrent Suite…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The following versions of Guangzhou Juan IoT Technology EseeCloud are affected: EseeCloud App…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External…
View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334) Malcolm <=v26.08.0 (CVE-2026-107333,…
The FTC accuses Digital Forensics Corporation and affiliated companies of exploiting people seeking help with intimate-image blackmail.
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of…
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote…