#безопасность
-
In Agentic Pentesting, the Harness Beats the Model
A model can write the attacks against your web app on its own. But what makes them safe to run against production, and worth acting on afterward, lives in the deterministic harness around the model — not in the model itself.
-
Attackers Hijack 300 Tor Exit Relays to Steal SSH Passwords
In early October attackers seized more than 300 Tor exit relays and used them to redirect SSH connections to servers that harvested login passwords.
-
India's Largest Bank Confirms Leak: 3,897 Customer Records Surface on Dark Web
State Bank of India told the exchanges it suffered an "incident involving the loss of certain data," identifying 3,897 records with customer personal information among roughly 375,000 offered on the dark web. The source is still unknown.
-
CISA: SafePay ransomware has breached 600+ critical infrastructure orgs
The U.S. agency CISA reports that since August 2024 the SafePay gang has breached over 600 critical infrastructure organizations worldwide, becoming one of the most active ransomware operations.
-
CISA Orders Agencies to Patch Exploited Plex, Siemens, and SiteGuard Flaws
The U.S. cybersecurity agency CISA has added the Plex2Shell bug cluster, plus flaws in Siemens Software Center and SiteGuard, to its catalogue of actively exploited vulnerabilities.
-
PHP Rushes Out-of-Cycle Fix for Two Critical RCE Flaws
PHP's security team scheduled an emergency release for October 21 for two critical vulnerabilities rated 9.2 on CVSS v4.0. watchTowr researchers say both allow remote code execution, but no details have been published yet.
-
PingCAP Reports Cloud Breach and Theft of Source Code
Between September 9 and October 7, 2026, an attacker using stolen service-account credentials accessed PingCAP's internal systems, copied data, and obtained source code. The company learned of the breach on October 7 and began revoking the compromised keys the same day.
-
Stolen UpdraftCentral keys used to backdoor WordPress sites
Attackers breached TeamUpdraft and appear to have stolen UpdraftCentral keys that can issue commands to connected sites. Roughly 400,000 WordPress websites may be exposed.
-
Anthropic Floats AI Safety Bill That Could Block a Model If 50+ Could Die
The proposed policy looks like a safeguard against runaway AI, but it actually bars federal agencies from blocking a model's release without a judge's say-so.
-
Court Rules OPM's Data Disclosure to DOGE Was Unlawful
A federal court in New York has ruled that the U.S. Office of Personnel Management broke the law when it opened the personal records of millions of federal employees to DOGE agents.
-
Zeabur to shut down after second breach in two months
The developer platform announced it will wind down from December 2026 after a second data breach, in which attackers stole data on more than 321,000 accounts and 3.2 million environment-variable records.
-
PHP preps emergency patches after two critical flaws leak early
The PHP security team is urging administrators to brace for urgent updates after details of two critical vulnerabilities leaked ahead of their planned disclosure.
-
Eight eMudhra intermediate CAs compromised
The private keys of eight eMudhra intermediate certificate authorities have leaked. The certificates chain to roots trusted by major browsers and operating systems.
-
Autonomous AI Agents Breached a Hundred Companies' Sites — and Blew Their Cover on Open Panels
A Chinese-speaking criminal pointed autonomous AI agents at corporate websites and barely intervened. A NorForge researcher watched it all unfold in real time, because the operators left their control panels open on the internet.
-
Pegasus Found on Belgrade University Rector's iPhone Days Before Election
Citizen Lab confirmed that rector Vladan Đokić's phone was infected with Pegasus spyware. The finding surfaced just ahead of Serbia's snap parliamentary vote.
-
DHS bars DeepSeek products from US federal civilian agencies
The U.S. Department of Homeland Security has ordered federal civilian agencies to stop using Chinese firm DeepSeek's products and remove them from government systems.
-
Cellebrite Advanced Unlocks: an iPhone break-in "over the air" from up to 8 meters?
A leaked confidential Cellebrite document describes a new product called Advanced Unlocks that, by its own description, does not appear to need a cable connection to the target device.
-
Hijacked account: five OVHcloud CLI releases swapped for secret-stealing malware
An attacker used a hijacked contributor account to replace the archives in five releases of OVHcloud's command-line tool. The malicious build stole secrets from disk and was live on GitHub for just 94 minutes.
-
ClickFix Attack Abuses Siemens Software Center Flaw to Drop a Remote Access Trojan
Siemens has patched a DLL sideloading flaw in Siemens Software Center that attackers already exploited, using the legitimately signed program as a carrier for malicious code.
-
Go to reject certificate chains containing eight distrusted public keys
A patch landing in the go1.27 branch makes crypto/x509 throw away any chain that contains one of eight blacklisted public keys.
- More