Today, page 41
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline
Infosecurity Magazine ·
Election Website Security: 42% of US County Sites Still Lack .gov Domains
US election websites show improved security, but weak email protection, non-.gov domains and third-party tracking still expose voters to risks.
Security Affairs ·
Endpoint
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data
Infosecurity Magazine ·
Identity
Admin dropped the F-bomb in a password to show hackers who was really 1337
The Register Security ·
ENGIE Data Breach Exposes Customer Details and Energy Contracts
ENGIE says attackers accessed French customers’ contact and energy contract data through a partner sales tool. Banking data was not affected.
Security Affairs ·
Virtualine Domain Seized, but Allegedly Abusive Website Remains Online
The FBI seized Virtualine, a hosting service accused of supporting criminal sites, ignoring abuse reports and helping launder money from illegal activities The FBI seized the website of Virtualine, a hosting service that sold its services to criminals.
Security Affairs ·
HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications. The post HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million appeared first on SecurityWeek .
SecurityWeek ·
Vulnerabilities
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
The Hacker News ·
VulnerabilitiesReportKEV
Low-Rated VMware ESX Logging Flaw Used as Zero-Day by China-Linked Group
CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged. The post Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day appeared first on SecurityWeek .
4 outlets · latest: SecurityWeek ·
Endpoint
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Kaspersky Securelist ·
Threat Intel
Amatera: How the prolific infostealer works and spreads
The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized
ESET WeLiveSecurity ·
Vulnerabilities
Qualys CISO on what security teams can do as exploit campaigns grow
In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities.
Help Net Security ·
Threat Intel
Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)
Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it&#;x26;#;39;s convenient to play with snapshots in your lab.
US-CERT / SANS Internet Storm Center ·
IT bosses are confident they’ve found the certificates they don’t know about
Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because automated systems are already in place. Their more specific answers point elsewhere.
Help Net Security ·
Threat Intel
Shame and sleepless nights haunt scam victims long after the money is gone
Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report.
Help Net Security ·
Stolen staff logins are spreading attacks between K-12 school districts
Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their staff accounts or credentials were circulating on underground and dark web marketplaces.
Help Net Security ·
ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
US-CERT / SANS Internet Storm Center ·