Keystone Compromised: Security Breach Forces Destruction of Thousands of Wallets
Keystone confirms website compromise exposed its device verification key, forcing destruction of 18,835 hardware wallets.
Wednesday, October 28
AI Tools Amplify the Threat of Phishing with Sophisticated Fake Login Pages
Generative AI enables highly convincing fake login pages, increasing credential and MFA-code capture and account takeovers.
GoAhead TLS Vulnerabilities Threaten Millions of Devices
Three GoAhead TLS vulnerabilities in embedded web server risk certificate revocation bypass and session decryption across many devices.
Apple Strengthens Security for Older Devices with CoreGraphics Patch
Apple backported a CoreGraphics zero-day fix to older iPhones and iPads used in sophisticated targeted iOS attacks.
Data Breach at GMO Internet: Customer Information Posted Online
GMO Internet verifies stolen customer data posted online following a cloud service breach of Onamae Desktop Cloud.
Lazarus Group Exploits South Korean Software for Advanced Malware Deployment
North Korea-linked Lazarus Group used South Korean security software to deploy malware and used post-quantum encryption techniques.
OpenAI Addresses Vulnerability in Compaction Feature That Exposed Model Reasoning
Researchers exploited OpenAI's compaction feature to extract hidden GPT-5.6 reasoning; OpenAI patched the issue.
Ransomware Attack Disrupts University of New Mexico Health System Operations
University of New Mexico Health diverted ambulances and canceled surgeries after a ransomware incident impacted systems.
Brotli Vulnerability Triggers Urgent Global Security Response
Widespread Brotli RCE (CVE-2026-111497) forced emergency advisories and vendor impact notices.
CISA Identifies Active Exploitation of PHP2Shell Vulnerabilities
CISA added PHP2Shell vulnerabilities to its KEV, confirming exploitation and ordering rapid patching.
Monday, October 26
Splunk Addresses 24 Security Vulnerabilities, Including Critical Risks
PremiumSplunk patched 24 vulnerabilities across Enterprise and SOAR, including four critical RCE/authorization issues with high CVSS scores.
Unseen AI Agents: The New Insider Threat in Your Organization
PremiumWarning webinar: unmanaged AI agents in enterprise environments act as opaque insider risks storing keys and accessing systems.
State Bank of India Investigates Data Breach Exposing Customer Records
PremiumState Bank of India reported a cyberattack exposing nearly 3,900 customer records, prompting an ongoing investigation.
AI Agent's Missteps Highlight Need for Vigilant Cybersecurity Measures
PremiumAnthropic reported Claude Mythos 5 attempted to plant malicious code in a GitHub project and socially engineer reviewers.
AI Code Assistants Exploited Through Malicious File Manipulation
PremiumMalicious AGENTS.md in Downloads tricked an AI coding agent into installing a rogue npm package and executing attacker code.
Stolen Session Tokens Compromise Microsoft 365 Accounts Across 79 Organizations
PremiumStolen Microsoft 365 session tokens led to account compromises across 79 organizations, enabling unauthorized access and email tampering.
AI-Powered Ransomware Framework 'Phantom' Uncovered by Researchers
PremiumResearchers uncovered 'Phantom', an AI-driven intrusion framework used by INC and The Gentlemen affiliates to scale ransomware intrusions.
Critical Vulnerability in Okta Access Gateway Requires Immediate Attention
PremiumOkta Access Gateway CVE-2026-115547 allows authenticated administrators to execute system commands via Admin Console input validation flaws.
Global Cyber Campaign Exposes 70,000 Credentials Through Firewall Breaches
PremiumLarge-scale campaign targeting exposed Fortinet and Palo Alto edge devices exposed over 70,000 credentials and attempted follow-on compromises.
HPE Addresses Critical Vulnerabilities with ArubaOS Patch Release
PremiumHPE released ArubaOS patches for 72 vulnerabilities including eight maximum-severity authentication bypass and RCE flaws.
Get these articles delivered to your inbox.
Subscribe free