Vulnerabilities
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
The Hacker News ·
Today, page 46
VulnerabilitiesReportKEV
ShinyHunters Keeps Exploiting Oracle PeopleSoft Flaw, Now Shown to Be Three Chained Bugs
3 outlets · latest: The Hacker News ·
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
US-CERT / SANS Internet Storm Center ·
Never Bring a Knife to a Gun Fight!
Cyber incidents create both technical and legal challenges, making coordination between DFIR teams and experienced legal counsel essential.
Sophos News ·
Cloud
Introducing Route 53 Resolved IP Validation for AWS Network Firewall
Your workloads reach most destinations by domain name, but a firewall can only act on what it sees in the traffic. For HTTP and HTTPS, AWS Network Firewall domain rules match the name that the client puts in the request, and the client chooses that name.
AWS Security Blog ·
Endpoint
Japan's GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack today. [...]
BleepingComputer + 1 outlet ·
AI
OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. [...]
BleepingComputer ·
Endpoint
UNM Health ransomware attack disrupts patient care, surgeries
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. [...]
BleepingComputer ·
Vulnerabilities
Before you file that AI bug report, OpenAI has some advice
Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more coordination.
CyberScoop ·
Threat Intel
Hackers hijack Convertr analytics script to steal payment card data
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout. [...]
BleepingComputer ·
Vulnerabilities
Adobe security advisory (AV26-697) – Update 1
Serial number: AV26–697 Date: July 14, 2026 Updated: October 27, 2026 On July 14, 2026, Adobe published security advisories to address critical vulnerabilities in the following products: Adobe After Effects - version 25.6.5 and prior Adobe After Effects …
Canadian Centre for Cyber Security ·
AI
All the security risks Anthropic is worried about before its IPO
Anthropic has said out-of-control AI poses a threat to the world, but perhaps unsurprisingly suggests that profit will shape those decisions, too. The post All the security risks Anthropic is worried about before its IPO appeared first on CyberScoop .
CyberScoop + 1 outlet ·
Vulnerabilities
Google security advisory (AV26-1085) - Update 1
Serial number: AV26-1085 Date: October 26, 2026 Updated: October 27, 2026 As of October 22, 2026, Google is affected by a vulnerability in the following product: Brotli Versions 1.0.3 to versions prior to v1.0.10 Versions 1.1.0 to versions prior to v1.1.1…
Canadian Centre for Cyber Security ·
Vulnerabilities
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Ars Technica Security ·
Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters
Italy ’s Parliament cyberattack highlights hybrid warfare risks and the need for transparency, stronger defenses and accountability.
Security Affairs ·
Vulnerabilities
AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours
The Register Security ·