Cybersecurity

Feeds last updated @: UTC - 12:15 - 13/10/2026

Security.nl

https://www.security.nl






Slashdot

https://slashdot.org/

After a 10-Year Redemption Arc, No Man's Sky Is Coming to the iPhone and iPad

  Pagina openen
No Man's Sky is coming to iPhone and iPad on October 28, more than a decade after its rocky launch and long-running redemption arc. The title will cost $19.99, but a free trial will let users try it out before purchasing. Ars Technica reports: It will run on devices as far back as the iPhone 11 and the third-generation iPad Air. No Man's Sky might not have the most cutting-edge AAA graphics (though they're still strong, and they've come a long way since launch via updates), but the game's uncommon method of generating galaxies of incomprehensible scale on device consistently for all players from a single-seed happening on a phone is remarkable for those of us who remember phones performing far behind consoles or desktop PCs. This version of the game includes all of the content and systems updates to the game that have been added over the years -- the expansions that famously took the game from a rocky launch reception to a widely beloved redemption story. There are a couple of compromises, though, and it's similar to what we saw with No Man's Sky on the Nintendo Switch. Hello Games says the ability to build and explore player-made planetary settlements is limited to the iPhone 15 Pro and later, and multiplayer is not supported on any iOS device. "We are excited to see player feedback on iOS, and will support it appropriately based on how many folks are playing," the company says, leaving the door open to perhaps not supporting all future content updates if the player base isn't there to justify it.

Read more of this story at Slashdot.

https://games.slashdot.org/story/26/10/13/0435236/after-a-10-year-redemption-arc-no-mans-sky-is-coming-to-the-iphone-and-ipad?utm_source=rss1.0mainlinkanon&utm_medium=feed


A New 'Super Ice' Is 10 Times Stronger, Bringing It Close to The Strength of Concrete

  Pagina openen
Researchers have created a strengthened "BioPykrete" by combining ice with cellulose nanocrystals and a custom protein that binds the plant-based crystals to the ice structure. In small-scale tests, the material was about 10 times stronger than regular ice and absorbed 70 times more energy before breaking. ScienceAlert reports: Instead of wood pulp's larger, disordered fibers, the researchers used cellulose nanocrystals here. Cellulose is the main structural material in plants, and in nanocrystal form, it can act as a microscopic strengthening agent for other materials, including ice -- essentially stopping cracks from spreading easily. The protein used here was called CBM3a-AFPIII, a combination of an antifreeze protein (AFP) and a carbohydrate-binding module (CBM). Its job was to act like glue, keeping the cellulose nanocrystals and ice bonded together. It's a clever approach, and the researchers think that by tweaking their ingredients and methods, they might be able to improve their 'super ice' even further. "Optimizing solidification kinetics and freezing protocols, alongside developing diverse AFP-CBM variants, could yield even higher-strength composites," write the researchers. Besides further tests of the durability of the material, the researchers are also keen to take a closer look at how cracks propagate through BioPykrete, to confirm that the underlying strengthening mechanisms are what they think they are. Further down the line, this approach could open up a whole new landscape for materials used in packaging, construction, and more: Using a custom protein to bring two unlikely compounds (ice and cellulose) together. "By bridging the gap between recombinant protein design and structural engineering, we have developed a high-performance material specifically engineered for the rigors of the world's most extreme environments," write the researchers. The findings have been published in the journal Colloids and Surfaces B: Biointerfaces.

Read more of this story at Slashdot.

https://science.slashdot.org/story/26/10/13/0428248/a-new-super-ice-is-10-times-stronger-bringing-it-close-to-the-strength-of-concrete?utm_source=rss1.0mainlinkanon&utm_medium=feed


Linus Torvalds On Why AI Works For Him

  Pagina openen
An anonymous reader quotes a report from ZDNet: Many open-source developers still dislike AI. The latest example is System76 banning AI-generated content from its COSMIC desktop. At Open Source Summit Europe, Linux creator Linus Torvalds offered a different take: "I actually really like using AI," Torvald told Dirk Hohndel, his good friend and head of Ericsson Software Technology, in their latest discussion. [...] Torvalds said, "I think that you need to be very careful using AI when you're doing something real and important." Torvalds explained he hadn't always felt that way about AI programming. "I used to think it was just not very good -- but now I'm at the point where I actually really like using AI." "To be fair," he continued, "I don't do a lot of kernel programming. I'm a maintainer. The Linux kernel is a project where other people do the real work, and I act as the collection point. But I still enjoy programming immensely. I think AI is a wonderful tool if you use it correctly and treat it as a tool, and I find it makes programming much more enjoyable." Torvalds recalled, "I started programming in 1981 or so, and back then computers were much simpler, and you could understand what they were doing, and also the programs you compared your own programs to were much simpler." "It's a different story today," Torvalds said. "The bar in software engineering has grown so high that it's hard to see your own small efforts as worth anything, because you're used to all these polished, professional programs. [...] A lot of people make fun of vibe coding, but I think it's a wonderful way to find joy in programming. It makes you feel like you're doing something relevant. It allows you, as a new programmer, to do things that you would otherwise have a really hard time with." He continued: "I love the concept of AI as a gateway drug because I was working on my own toy project, the guitar pedal, and I knew what I was doing. I had a user interface that I had written myself in C that was running on a microcontroller that was running on this small screen, and I was like, "This is just stupid. It looks like something from the '80s; I wanted it to look like something from this century. But I don't do Java. I do kernels." "So, I use AI to do the things that I'm bad at," Torvalds went on, "I'd seen all the same YouTube videos you have. Give AI a prompt, and it will do it. So I gave it a prompt, and it did it, and it was horrendous. Then I said, 'Hey, look! I already did this in C. I did it the right way. It's just ugly." Torvalds acknowledged that AI tools are helping identify security vulnerabilities and improve the Linux kernel, but at the cost of overwhelming maintainers with questionable bug reports and superficial fixes. He called some submissions "mindless band-aid kind of patches." That said, despite AI's growing influence, Torvalds believes Linux's success comes from steady, incremental development rather than sweeping changes. "I'm a big believer in the whole incremental small changes that, over time, turn into big features," he said. The development goal remains "incremental improvement and steady progress all the time."

Read more of this story at Slashdot.

https://linux.slashdot.org/story/26/10/13/034206/linus-torvalds-on-why-ai-works-for-him?utm_source=rss1.0mainlinkanon&utm_medium=feed


Firefox 158 Now Available With JPEG-XL Support By Default

  Pagina openen
Firefox 158 is now available with JPEG XL image support enabled by default, making .jxl images a standard part of the browser rather than an experimental feature. The release also adds JPEG XL to Firefox's default image Accept header, improves Smart Window form filling, and brings new CSS typed-arithmetic support for developers. Phoronix reports: At long last, Firefox 158 is ready to go with JPEG-XL image support as an alternative to the likes of WebP, JPEG, PNG, and GIF. The default HTTP Accept header for image requests also now supports "image/jxl" for the JPEG-XL image format. Prior releases of Firefox had JPEG-XL gated by an experimental option. Firefox 158 also now supports filling forms faster in Smart Window when clicking into a form field or selecting Fill from sources. On the developer side, CSS typed arithmetic are now supported to use functions like calc() to divide two values of the same data type even if of different units. Developer changes and release binaries can be found at their respective links.

Read more of this story at Slashdot.

https://news.slashdot.org/story/26/10/12/2131234/firefox-158-now-available-with-jpeg-xl-support-by-default?utm_source=rss1.0mainlinkanon&utm_medium=feed


Epic Games Delays Disney Project, Asks Developers To Use More AI

  Pagina openen
An anonymous reader quotes a report from Bloomberg: Epic Games delayed the release of an upcoming video-game collaboration with Walt Disney and told its developers to use more artificial intelligence tools to finish the game, according to people familiar with the project. The title had been slated for release in March, but is now delayed with no new date communicated, said the people familiar, who asked to not be identified because they weren't authorized to speak publicly. Developers on the game, a shooter featuring characters from the Marvel and Star Wars franchises, were instructed to implement an "AI first" production model using tools such as Anthropic's Claude. Humans will then manage and guide that work. "No more hand-written code," one of the game's directors told staff in an internal message reviewed by Bloomberg. The director added that all art for the game would be "generated with full AI workflows." Even before this announcement, the maker of the popular Fortnite game had been pushing hard for the use of AI across all of its divisions. But this is the first time a major video-game company has attempted to build a title primarily with AI. "We're embracing AI-accelerated development, led by Epic developers who are the visionaries and creative drivers for everything we do," said Jake Jones, communications director at Epic Games, in a statement to Bloomberg News.

Read more of this story at Slashdot.

https://games.slashdot.org/story/26/10/12/2128209/epic-games-delays-disney-project-asks-developers-to-use-more-ai?utm_source=rss1.0mainlinkanon&utm_medium=feed


theregister.com/security

https://www.theregister.com/security






CISO2CISO.com

https://ciso2ciso.com

Vuldb

https://vuldb.com

CVE-2026-63316 | Payload up to 3.89.x Query Parameter in/not_in sql injection

  Pagina openen
A vulnerability was found in Payload up to 3.89.x. It has been declared as critical. This issue affects some unknown processing of the component Query Parameter Handler. Such manipulation of the argument in/not_in leads to sql injection. This vulnerability is uniquely identified as CVE-2026-63316. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

https://vuldb.com/vuln/417543


CVE-2026-89279 | AuthTake Technology Authtake up to 1.3 cross-site request forgery

  Pagina openen
A vulnerability was found in AuthTake Technology Authtake up to 1.3. It has been classified as problematic. This vulnerability affects unknown code. This manipulation causes cross-site request forgery. This vulnerability is handled as CVE-2026-89279. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

https://vuldb.com/vuln/417542


CVE-2026-78556 | Siemens Industrial Edge App Publisher up to 1.27.8 certificate validation

  Pagina openen
A vulnerability was found in Siemens Industrial Edge App Publisher up to 1.27.8 and classified as problematic. This affects an unknown part. The manipulation results in improper certificate validation. This vulnerability is known as CVE-2026-78556. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

https://vuldb.com/vuln/417541


CVE-2026-89206 | Siemens RUGGEDCOM CROSSBOW up to 5.x improper authorization

  Pagina openen
A vulnerability has been found in Siemens RUGGEDCOM CROSSBOW up to 5.x and classified as very critical. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-89206. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

https://vuldb.com/vuln/417540


CVE-2026-89203 | Siemens Ruggedcom Crossbow up to 5.x information disclosure

  Pagina openen
A vulnerability, which was classified as problematic, was found in Siemens Ruggedcom Crossbow up to 5.x. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-89203. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

https://vuldb.com/vuln/417539


advisories.ncsc.nl

https://advisories.ncsc.nl/

NCSC-2026-0415 [1.00] [M/H] Kwetsbaarheden verholpen in Siemens-producten

  Pagina openen
Siemens heeft kwetsbaarheden verholpen in diverse producten zoals Desigo, Industrial Plus, RUGGEDCOM, SIMATIC en SIPLUS. De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Manipulatie van gegevens - Omzeilen van een beveiligingsmaatregel - (Remote) code execution (root/admin rechten) - Toegang tot systeemgegevens - Toegang tot gevoelige gegevens - Verhogen van rechten De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.

https://advisories.ncsc.nl/advisory?id=NCSC-2026-0415


NCSC-2026-0414 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab

  Pagina openen
GitLab heeft kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE), specifiek in versies voorafgaand aan 19.2.8, 19.3.5 en 19.4.2. De kwetsbaarheden zijn aanwezig in verschillende onderdelen van GitLab, waaronder de CI/CD pipelineomgeving, autorisatiemechanismen, API, Kubernetes-integratie en package registry. Kwaadwillenden kunnen de kwetsbaarheden misbruiken voor het uitvoeren van willekeurige code, vergrijken van ongeautoriseerde toegang tot gevoelige gegevens en het uitvoeren van cross-site-scripting-aanvallen. De kwetsbaarheid met kenmerk CVE-2026-97229 heeft de hoogste CVSS3.1-score van 10.0 gekregen. Een ongeauthenticeerde kwaadwillende kan deze kwetsbaarheid misbruiken om via een malafide CI/CD-configuratie willekeurige code uit te voeren.

https://advisories.ncsc.nl/advisory?id=NCSC-2026-0414


NCSC-2026-0413 [1.01] [M/H] Kwetsbaarheden verholpen in HPE Networking AOS-Switch

  Pagina openen
HPE Networking, onder andere bekend als HPE Aruba Networking, heeft meerdere kwetsbaarheden verholpen in de HPE Networking AOS-Switch (AOS-S). De kwetsbaarheden bevinden zich onder andere in de management interface en API van AOS-S. 6 van de verholpen kwetsbaarheden hebben een CVSS-score van 9 tot 9.8. De kwetsbaarheden met kenmerk CVE-2026-76742 en CVE-2026-76743 hebben een CVSS-score van 9.8. De kwetsbaarheden bevinden zich in de managementinterface van AOS-S en maken het mogelijk voor een niet-geauthenticeerde externe aanvaller om authenticatiecontroles te omzeilen en toegang te verkrijgen tot het systeem. Voor CVE-2026-76743 geldt dat deze alleen te misbruiken is onder door HPE niet gespecificeerde randvoorwaarden. De kwetsbaarheid met kenmerk CVE-2026-76744 heeft een CVSS-score van 9.8. Het betreft een buffer overflow die door een niet-geauthenticeerde externe aavaller misbruikt kan worden om willekeurige code uit te voeren op het getroffen systeem. De kwetsbaarheid met kenmerk CVE-2026-76745 heeft een CVSS-score van 9.6. Wanneer een ongeauthenticeerde aanvaller vanuit een aangrenzend netwerk deze fout misbruikt kan dit leiden tot geheugen corruptie en het uitvoeren van willekeurige code op het getroffen systeem. De kwetsbaarheid met kenmerk CVE-2026-76746 heeft een CVSS-score van 9.3. Het betreft een buffer overflow die door een niet-geauthenticeerde aanvaller vanuit een aangrenzend netwerk misbruikt kan worden en kan leiden tot het lekken van gevoelige informatie of het veroorzaken van een denial of service op het getroffen systeem. De kwetsbaarheid met kenmerk CVE-2026-76747 heeft een CVSS-score van 9.1. Het betreft een buffer overflow die door een niet-geauthenticeerde externe aanvaller misbruikt kan worden. Misbruik van deze fout kan leiden tot het lekken van gevoelige informatie of denial of service op het getroffen systeem. De succesvolle exploitatie van deze kwetsbaarheden kan de vertrouwelijkheid, integriteit en beschikbaarheid van het getroffen systeem beïnvloeden.

https://advisories.ncsc.nl/advisory?id=NCSC-2026-0413


NCSC-2026-0412 [1.00] [M/H] Kwetsbaarheden verholpen in Splunk Enterprise

  Pagina openen
Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise. De kwetsbaarheden betreffen verschillende versies van Splunk Enterprise en omvatten onder andere onvoldoende autorisatiecontroles in REST API endpoints, waardoor niet-bevoegde gebruikers toegang kunnen krijgen tot geprivilegieerde functionaliteit of gevoelige gegevens. Sommige kwetsbaarheden maken het mogelijk voor gebruikers zonder admin- of power-rollen om configuratiewijzigingen door te voeren, payloads te laten ondertekenen, of zoekopdrachten en loggegevens van andere gebruikers in te zien. Daarnaast zijn er problemen met onjuiste validatie van invoer, zoals SQL-injectie in SPL2 modules, manipulatie van indexnamen, en het injecteren van vervalste loggegevens. Verder is er een privilege-escalatie mogelijk tijdens pakketupgrades op Linux-systemen door vertrouwen op gemanipuleerde installatie-inhoud. Ook kunnen gebruikers met bepaalde rechten de broncode van de Discover Splunk Observability Cloud app inzien door blootstelling van embedded source maps. Andere kwetsbaarheden betreffen het omzeilen van toegangsrestricties tot interne indexen, het wijzigen van alertdata en mobiele ontvangerinformatie in key-value stores, en het creëren van gebruikersnamen met een punt aan het einde, wat leidt tot gedeelde configuratiegegevens. De kwetsbaarheden zijn aanwezig in meerdere recente versies van Splunk Enterprise en sommige ook in Splunk Secure Gateway.

https://advisories.ncsc.nl/advisory?id=NCSC-2026-0412


NCSC-2026-0411 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco networking producten

  Pagina openen
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco IOS XE Software. De kwetsbaarheden zijn intern door Cisco's engineering teams ontdekt tijdens beveiligingsreviews. Deze kwetsbaarheden zijn van invloed op Cisco IOS XE-software wanneer deze in autonome modus of controllermodus wordt uitgevoerd, ongeacht de apparaatconfiguratie. De geïdentificeerde problemen betreffen onder andere onjuiste access control, buffer management fouten, onjuiste resource control en onjuiste input validatie.

https://advisories.ncsc.nl/advisory?id=NCSC-2026-0411


NCSC Nieuws

https://www.ncsc.nl/actueel

Kwetsbaarheden in HPE Networking AOS-Switch met hoog risico

  Pagina openen
Er zijn meerdere, ernstige kwetsbaarheden gevonden in HPE Networking AOS-Switch. Deze kwetsbaarheden hebben hoge CVSS-scores tot 9,8 en kunnen het systeem ernstig beïnvloeden. De kans op misbruik is medium en de mogelijke schade is hoog. Het NCSC adviseert om de aanbevolen beveiligingsmaatregelen en -updates zo snel mogelijk toe te passen.

https://www.ncsc.nl/alerts/kwetsbaarheden-in-hpe-networking-aos-switch-met-hoog-risico


Meerdere kwetsbaarheden in Android en Samsung Mobile-apparaten: update nu

  Pagina openen
Er zijn diverse kwetsbaarheden gevonden in Android, waaronder CVE-2026-45524 met een risico score van 8,8. Deze kwetsbaarheden kunnen leiden tot ernstige problemen zoals het overnemen van systemen. De kans op misbruik is middelgroot, maar de mogelijke schade wordt als hoog beoordeeld. We adviseren om de beschikbare updates van Google en Samsung zo snel mogelijk te installeren.

https://www.ncsc.nl/alerts/meerdere-kwetsbaarheden-in-android-en-samsung-mobile-apparaten-update-nu


NCSC en toezichthouders maken afspraken over samenwerking bij Cyberbeveiligingswet

  Pagina openen
Het Nationaal Cyber Security Centrum (NCSC) en de toezichthouders Rijksinspectie Digitale Infrastructuur (RDI), Inspectie Leefomgeving en Transport (ILT), Autoriteit Nucleaire Veiligheid en Stralingsbescherming (ANVS) en Nederlandse Voedsel- en Warenautoriteit (NVWA) hebben op woensdag 7 oktober tijdens de ONE Conference, officieel hun handtekening gezet onder nieuwe samenwerkafspraken. Deze stap vloeit voort uit de Cyberbeveiligingswet (Cbw), die organisaties verplicht maatregelen te nemen om hun digitale weerbaarheid te vergroten. Naast de afspraken tussen het NCSC en de toezichthouders, hebben de toezichthouders ook onderling afspraken vastgelegd.

https://www.ncsc.nl/nieuws/ncsc-en-toezichthouders-maken-afspraken-over-samenwerking-bij-cyberbeveiligingswet


Veiligheidsdiensten verwachten toename Chinese cyberaanvallen

  Pagina openen
Het aantal cyberaanvallen door Chinese hackers op kwetsbare edge devices neemt de komende jaren aanzienlijk toe. Dat schrijven de Militaire Inlichtingen- en Veiligheidsdienst (MIVD) en Algemene Inlichtingen- en Veiligheidsdienst (AIVD) op basis van inlichtingen. De diensten publiceren daarom in nauwe samenwerking met het Nationaal Cyber Security Centrum (NCSC) een cyberadvies met uitleg over welke factoren leiden tot deze waarschuwing en hoe organisaties zich hier tegen kunnen weren.

https://www.ncsc.nl/nieuws/veiligheidsdiensten-verwachten-toename-chinese-cyberaanvallen


Kwetsbaarheid in Microsoft Exchange Server met risico op misbruik

  Pagina openen
Er is een kwetsbaarheid gevonden in Microsoft Exchange Server met het nummer CVE-2026-96940 en een risico score van 8,8. Deze kwetsbaarheid maakt het mogelijk dat een aanvaller met een geldig account hogere rechten krijgt dan toegestaan. De kans op misbruik is middelgroot en de mogelijke schade wordt als hoog beoordeeld.

https://www.ncsc.nl/alerts/kwetsbaarheid-in-microsoft-exchange-server-met-risico-op-misbruik


NIST Cybersecurity

https://www.nist.gov

wid.cert-bund.de

https://wid.cert-bund.de

[NEU] [hoch] Siemens SIMATIC S7: Mehrere Schwachstelle

  Pagina openen
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Siemens SIMATIC S7 Produkten ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Daten zu manipulieren oder offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3891






cert.ssi.gouv.fr

https://www.cert.ssi.gouv.fr






theHackerNews

https://thehackernews.com

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

  Pagina openen
Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmware

https://thehackernews.com/2026/10/lg-smart-tvs-vulnerable-to-pre-auth.html


Product Walkthrough: Bitdefender AI Visibility and Control

  Pagina openen
A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs models directly on the machine instead of sending data to an external service, because they were told not to send company data

https://thehackernews.com/2026/10/product-walkthrough-bitdefender-ai.html


Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

  Pagina openen
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store's fridges and freezers, a device made by Danish company Danfoss that maintenance firms can manage remotely. Les Mousquetaires

https://thehackernews.com/2026/10/attackers-heat-french-supermarket.html


Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

  Pagina openen
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected

https://thehackernews.com/2026/10/two-critical-marklogic-flaws-could-give.html


GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

  Pagina openen
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD

https://thehackernews.com/2026/10/gitlab-patches-cvss-100-flaw-that-could.html


Techrepublic

https://techrepublic.com/topic/security






BleepingComputer.com

https://www.bleepingcomputer.com/






securityboulevard.com

https://securityboulevard.com

CXSecurity.com

https://cxsecurity.com/






Brian Krebs

https://krebsonsecurity.com


ShinyHunters Extorted Boeing Spin-off Prior to Arrests

  Pagina openen
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle "Rey," was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey's father -- Royal Jordanian Airlines.

https://krebsonsecurity.com/2026/10/shinyhunters-extorted-boeing-spin-off-prior-to-arrests/


Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

  Pagina openen
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p.

https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/



Data Broker Radaris Loses Domains in Privacy Fight

  Pagina openen
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that provides for hefty fines against data brokers that publish personal information on state law enforcement officials. In the face of repeated stonewalling and prevarication by attorneys for Radaris, the judge in the case ordered that radaris.com and more than a dozen other data broker domains be transferred to the plaintiffs.

https://krebsonsecurity.com/2026/09/data-broker-radaris-loses-domains-in-privacy-fight/


Troy Hunt

https://www.troyhunt.com

Weekly Update 525: AI Data Breach Hyperbole

  Pagina openen

Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.

I remember the name of that AI doco now - The AI Doc: Or How I Became an Apocaloptimist. I was watching it on the long-haul flight home the other day, and what I found particularly engrossing was the polar-opposite opinions from a bunch of people: "it'

https://www.troyhunt.com/weekly-update-525/


Weekly Update 524: Live From Copenhagen

  Pagina openen

Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.

I'm in Denmark! Well, just, I'm now at Copenhagen airport ready to begin the long trek home, with the final event at GOTO now done and going just perfectly. This week, there are two ShinyHunters arrests in the news: Pepijn in the Netherlands and then Saif

https://www.troyhunt.com/weekly-update-524/


Weekly Update 523: Live From a Norwegian Fjord

  Pagina openen

Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.

How's that view?! With NDC Oslo now done, it's a little bit of sightseeing before heading to Denmark for GOTO in Copenhagen for Scott's and my "Cyber-broken" talk. In the meantime, this week is mostly about the ShinyHunters trajectory targeting both

https://www.troyhunt.com/weekly-update-523/


Weekly Update 522: Live From Oslo with Scott Helme

  Pagina openen

Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.

Heads up: the first 7 mins is a bit quiet until we worked out the external mic was misbehaving - sorry! But get through that and have a listen to Scott's experiences with how Report URI is identifying malware-infected machines within orgs, all due to CSP reporting. It&

https://www.troyhunt.com/weekly-update-522/


Weekly Update 521: Breach Perception v. Reality

  Pagina openen

Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.

I think what really resonates with me this week is being able to completely turn the tables on perceptions around things like AI being the big bad hacking tool the news would have you believe. There's the stat I talk about where it's had literally 0%

https://www.troyhunt.com/weekly-update-521/


Bruce Schneier

https://www.schneier.com


Friday Squid Blogging: I Caught a Squid

  Pagina openen

On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and mackerel (all of which we could keep). And...I caught a squid! Near as I can tell, it’s a longfin squid, sometimes called a Boston squid (Doryteuthis (Amerigo) pealeii).

That night I cooked it over a barbecue grill—hot and fast. Delicious.

https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-i-caught-a-squid.html


How Technology Empowers—and Imperils—Dictators

  Pagina openen

This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs.

Two weeks after Moscow’s full-scale invasion of Ukraine in March 2022, the Russian TV Channel One editor Marina Ovsyannikova burst onto the set of the evening newscast. She held up a hand-drawn sign behind the anchor’s head that read: “Stop the war. Don’t believe propaganda. They’re lying to you!” She shouted, “No to war!” until she was dragged away.

No one has protested the war on Russian television since then, partly as a result of tighter security and a general climate of fear. But in October 2024, Margarita Simonyan, one of Russia’s chief propagandists, gave another explanation. A growing number of the RT network’s anchors, she explained to an interviewer, are not real. “That face doesn’t exist. We generated the voice and everything else.” They were, she meant, produced by artificial intelligence. In a follow-up interview with the newspaper ...

https://www.schneier.com/blog/archives/2026/10/how-technology-empowers-and-imperils-dictators.html


Apple’s Verified Photography System

  Pagina openen

Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photographer. It can also verify that multiple images came from the same iPhone.

Other industry solutions require a photographer or institution to vouch for an image using their own credentials. We are concerned this puts some photographers, such as those operating in conflict zones, in a difficult position; it should not be necessary to forgo anonymity in order to prove image authenticity. We built Apple Reference Image to avoid using an explicit, public credential for photographers, and to avoid even implicit public association between different photos taken by the same sensor. The final reference image is instead signed by Apple’s signing service, after validation by PCC. That signature is backed by Apple’s strongest technical guarantees...

https://www.schneier.com/blog/archives/2026/10/apples-verified-photography-system.html


Possible Vulnerability in Apple’s Automatic Reboot

  Pagina openen

404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn’t been used for 72 hours.

The new technology to get around inactivity reboot was developed by Magnet Forensics, the company behind GrayKey, a popular tool sold to law enforcement agencies that allows them to unlock and access data stored in iPhones and Android smartphones. Magnet has developed a new device called GrayKey Preserve and a feature for its regular GrayKey devices called Evidence Preservation Mode, according to the video...

https://www.schneier.com/blog/archives/2026/10/possible-vulnerability-in-apples-automatic-reboot.html


Security Affairs

https://securityaffairs.co

Hackers cranked French supermarkets’ freezers up to 50 degrees, causing hundreds of stores to lose their stock

  Pagina openen
Hackers hit French supermarkets via unpatched Danfoss refrigeration systems, remote-heating freezers and destroying stock worth millions. Overnight from Sunday to Monday, a large cyberattack hit the refrigeration systems of hundreds of French supermarkets, BFMTV revealed. The attackers targeted equipment from the Danish maker Danfoss that many French stores use to regulate their cold. Fresh and [...]

https://securityaffairs.com/200863/hacking/hackers-cranked-french-supermarkets-freezers-up-to-50-degrees-causing-hundreds-of-stores-to-lose-their-stock.html


ShinyHunters arrest number three: a Canadian ransomware negotiator

  Pagina openen
A Canadian ransomware negotiator faces extortion charges in the FBI’s ShinyHunters crackdown. Here’s what is known, and what isn’t. ShinyHunters is the focus of a global FBI investigation, and the crackdown has led to the October 8 arrest of a Canadian ransomware negotiator who now faces extortion charges. Reuters reported the arrest, citing court documents, [...]

https://securityaffairs.com/200847/cyber-crime/shinyhunters-arrest-number-three-a-canadian-ransomware-negotiator.html


Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted

  Pagina openen
Canonical suffered its second DDoS attack this year, disrupting public websites for over four hours while Launchpad and the Snap Store remained online. Ubuntu’s parent company Canonical spent part of last week fighting off a sustained distributed denial of service (DDoS) attack, the second one to hit its infrastructure this year. The company revealed the [...]

https://securityaffairs.com/200832/security/canonical-hit-by-second-ddos-attack-in-2026.html


SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin

  Pagina openen
Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure. Attackers have begun exploiting a critical flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after public disclosure. The vulnerability is a server-side request forgery (SSRF) flaw that requires no login. [...]

https://securityaffairs.com/200816/hacking/sonicwall-patches-cvss-10-0-ssrf-flaw-as-attacks-begin.html


CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records

  Pagina openen
CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure. CyberXero is an operation that combines traditional hacking tools with AI agents to carry out cyberattacks. According to SOCRadar researchers, the attackers use the same infrastructure for two different campaigns: one targets WordPress websites and e-commerce platforms [...]

https://securityaffairs.com/200803/cyber-crime/cyberxero-used-51-ai-agents-to-steal-628000-ukrainian-records.html


news.sophos.com

https://news.sophos.com