WHATS Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
SecurityWeek ·
WHATS
THE HAX?
Top story
Also in coverage
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
infosecurity-magazine.com ·
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
The Hacker News ·
Russian APT29 Targets Mobile Users with Watering Hole Attacks
Security Affairs ·
Article feed
60 sources ↓Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks
Sysdig Adds Runtime Security and Governance for AI Agents
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
NATS Air Traffic Control Failure Cost UK Economy £33m
China-Aligned Group Abuses Sogou Input Method to Deliver Malware
APT29 Watering Holes Target Unpatched iPhones and Android Devices
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Russian APT29 Targets Mobile Users with Watering Hole Attacks
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
U.S. Charges Canadian Man in Alleged Hack of University Supercomputers
The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT devices
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
Zyxel patches a zero-day hiding behind an old fix
Building incident playbooks for machine identity breaches
The Sandbox Fights Back: Joe Security Launches Adaptive Detonation
GhostMap Android flaw lets malicious app trigger persistent boot loop
Vercel rolls out new protection against stolen session cookie attacks
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run
A banking malware sample led researchers to an Android bug that can loop-crash phones
Apple is bringing harmful content checks to iCloud link sharing with potential account penalties
How are you getting external attack surface findings into Jira or your SIEM?
adminide-stack npm compromise: an Ethereum dead drop that leads to a Node RAT persisting through npm and editor startup files
Case Study: Profiling a Telegram Initial Access Broker Through Infrastructure and Stealer-Log Pivots
Autopsy of a dead anti-cheat: rebuilding classic Valve Anti-Cheat (VAC) bit-for-bit in C++20
Hacking the Xbox 360 Hypervisor Part 3: Bad Update Improvements
AirPods 3 expose their motion sensors as HID devices over Apple RemoteHID, and the default L2CAP MTU on Linux hides them
Want to Rent an Internet Address at the White House?
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Widespread PHP Flaw May Cause Many Site Outages Today
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Cisco Identity Services Engine Authorization Bypass Vulnerability
Smashing Security podcast #491: How AI agents are spooking the banks
Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents
BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques
More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus
Canadian extradited to US for allegedly hacking schools in at least four states
What Democratic control of Congress means for cybersecurity
Officials extradite Canadian man to US for alleged cryptomining spree
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
Hackers exploited iOS and Android flaws to infect phones
Binance says hackers who stole billions in crypto spent months planning heist
Google dismantles botnet secretly running on 1.3 million Android TV boxes
Critical Rails Bug Threatens to Derail Vulnerable Servers
Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet
Incidents Move Too Fast for Pen & Paper
Escaping AWS Firecracker from guest userspace: VMM memory corruption (CVE-2026-122192)
Who Polices the Blockchain? The Binance Heist and the New Gatekeepers
Chinese Botnet (XCPE on Android) Broken
Tron, Tether and TRM Pivot to New Crypto Crime-Fighting Alliances After T3 Shutdown
Verifone Turns to Visa’s Featurespace to Combat Fraud
Most Firms Using Three or More AI Tools Stop 90% of Fraud Attempts
Hugging Face’s CEO Says His P(Doom) Is ‘Close to Zero’
Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
Fighting PHP Zombies
Attacks Are Accelerating
Microsoft Edge Did ANOTHER Awesome Thing
The fake $750 Apple Cash reward that pays out nothing
mSecure tells users to change passwords but won’t say why
Chrome 157 fixes 213 security issues, including 7 critical flaws
Fromage-Gate: Old-School Hacking Tactics vs. French Supermarkets
Understanding the Blast Radius of a Cryptographic Change
Eliminating the Blind Spots Between Humans, Machines, and AI
Meta paid a $300,000 bounty for this
OpenAI paid $5000 for this account takeover vulnerability that could also leak your private chats
I recreated a real MCP vulnerability and tested it with @snyksec’s Evo to see if it finds it. 👀 #ad
A 12-Year-Old Security Flaw Was Just the Beginning | Threat Wire
🍍📟 [PAYLOAD] 🔴 Hak5 Live: WiFi Pineapple Pager with Darren Kitchen
🍍📟 Introducing 2.0 for WiFi Pineapple Pager and One More Thing...
Why Windows 11 Privacy Is Hard
Copilot Told Researchers How to Hack It
Your Smart Device Is Tracking You More Than You Think
Fridge Cyberattacks Now Targeting Blood Banks, U.S Military Bases
5 Data Security Stories to Know About (October 2026)
Deepfake Desensitization is the New Crisis
Chromium CVE-2026-118309: Incorrect reference resolution
Chromium CVE-2026-118314: Incorrect reference resolution
Chromium CVE-2026-118321: Use after free
The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
ISC Stormcast For Wednesday, November 4th, 2026 https://isc.sans.edu/podcastdetail/10164, (Wed, Nov 4th)
ISC Stormcast For Tuesday, November 3rd, 2026 https://isc.sans.edu/podcastdetail/10162, (Tue, Nov 3rd)
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Subnet Solutions PowerSYSTEM Center
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
Gorbag: Orcs at the border harvesting intelligence from Ukraine
Are CTF Platforms Useful? (Ask a CISO)
DEF CON CTF Walkthrough: OSINT Edition
Real Folks of Cyber | Thomas Rogers | DITL
Fake-download campaign uses trojanized installers to deliver monetization payloads
Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
AIs Hacking the Law
AI Vulnerability Finding
Friday Squid Blogging: Bigfin Squid Off California Coast
[Analysis] "LWTV" - a fake live-TV app that's an Android RAT built in China, stealing UPI/OTP from Indian users (full report + IOCs)
GitHub - rjzak/malware-modeler-rs: Generate training data and ML models for benign vs. malicious files plus related tools.
Adding onto the post "Archived malware I found over the years pt1" BY: "u/Fickle_Plan_208" Effort post!!!!! read description.
AI Agent Order Data: Agentic Commerce on Forter’s Network
How to Stop Holiday Return Abuse and Reseller Fraud
Holiday Shopping Gets an Agentic AI Twist
Email hacking
GREYWARD security-focused Fedora desktop
How could 6.3 Billion worth of coins stolen within 20 minutes without any guard from my programming perspective?
Difference between cyber risk management standard vs. framework
Purple team using AI to expedite both sides
Open-Source Contribution Vibes
HackTheBox - MakeSense
HackTheBox - Checkpoint
HackTheBox - Eloquia
this WiFi GPU is wild.....
local AI's biggest problem... they solved it?
why EVERYONE is copying this
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
The best due diligence on a vendor is who they’ve worked with
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
Data Breach Statistics That Matter in 2026
SHARED INTEL Q&A: 82% of campaign domains expose donors to email fraud before midterms
SHARED INTEL Q&A: PHP2Shell is no Log4Shell — open-source flaw is more warning than wildfire
MY TAKE: OktoberTech reveals a hardening AI foundation — but no one yet governing the agents
ZDI-CAN-36787: Autodesk
Prediction Markets Emerge as a New Vertical for Traffer Teams
Behind Japan’s Warnings of a Cyber Crisis
PHP2Shell Exploitation: Two Critical PHP Flaws Explained
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
The race to the first exploit // php2shell
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 984 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.