WHATS Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
SecurityWeek ·
WHATS
THE HAX?
Top story
Also in coverage
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown
Security Affairs ·
Google opens its cloud to rival OpenAI, promises business data won’t train models
Help Net Security ·
State Bank of India Suffers a Customer PII Data Leak
darkreading ·
Article feed
60 sources ↓Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
Hacker Conversations: Corey Thuen and the Evil Bit
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown
Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
Signal Vulnerability Could Keep Calls Alive After Users Hang Up
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports
Google opens its cloud to rival OpenAI, promises business data won’t train models
Drone program compliance: What a CTO says most agencies get wrong
AI is taking cybersecurity jobs at junior and experienced levels alike
New infosec products of the week: October 23, 2026
State Bank of India Suffers a Customer PII Data Leak
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
What We Missed: Feds Lasso Texas Laptop Farms
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
php situation 24h later
The race to the first exploit // php2shell
Self-efficacy in the age of AI
FTC Data Shows Investment Scams Fuel Fivefold Surge in Seniors’ Fraud Losses
What Fraud Data Says About Where Payment Security Is Headed
Booking.com Probe Exposes Travel Fraud Beyond Checkout
PHP2Shell exposes the weakness in coordinated vulnerability disclosure
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
Security teams urged to center defense on the flaw profile attackers target most
Vulnerabilities in PHP Affecting Cisco Products: October 2026
Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
Railway warns devs to rotate secrets after potential breach
Capcom confirms data breach affecting 11.7 million accounts
LiteLLM release pipeline hacked to distribute info-stealer malware
Toronto crime tips org freezes operations after details of data breach come to light
Indian tech company eMudhra announces withdrawal from certificate business after security incident
Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Hackers got a four-day head start on epic PHP2Shell vulnerability
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
A stranger disassembled my mouse’s official app, fixed my checksum, and by accident gave me the idea for USB cable support
Hello everyone,It's Aditya from India. I am working on a project where I use machine code to make my own ultra photorealistic graphics game engine while using math.So if anyone is interested to talk about this, I would like to discuss with you
I reverse engineered Black & White with Astra and added LLM + voice support on top of the game's original AI. The environment is exposed to the LLM's context and the creature can select tools to inspect and interact with the world or answer questions about it.
Nextcloud compromised via the built-in Collabora app (richdocumentscode): how I found out and what I found
KeyStealth: A $10,000 PhaaS Kit caught in the wild
Tanpering with AI models via writing to GPU memory a la poisoned python
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
Patch or Pass #1: Plex Media Server exploit chain now in CISA KEV, PAN-OS GlobalProtect (CVE-2026-0257) used by Qilin and Inc ransomware, plus 2 EOL boxes with no patch
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
We attacked our own agent guard with a base64 exfiltration. Here's what happened.
Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
eMudhra kills its certificate business after researchers cracked its private keys in under a second
Encryption isn’t enough to protect data wherever it goes
CVE-2026-94300: Concurrent GSS-TSIG messages corrupt memory
Markdown Is the New Executable: Attackers Are Dropping Agent Instructions Into Your Downloads Folder From the Web
Operation IXIM: Preventing a botnet of millions of Popcorn Time users
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
The Economics of AI
AI Changes Security Research
AI Security Engineering with Ashish Rajan!
PHP Issues Patches for Two Critical Flaws, Security Leaders Discuss
11M Impacted by Capcom Breach, Some Facing Unauthorized Changes
US Defense Department Faces Class Action Lawsuit for Data Breach
News alert: Gcore extends free web protection to government agencies after widespread PHP exploits
Industrial Defender Unifies Endpoint Intelligence and Network Monitoring for CIP-015, Adds Risk Signal
News alert: Bright Security launches AI-powered tool to uncover hidden software vulnerabilities
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
EU Regulators to Investigate Booking.com Over Scam Risks
Iranian Hacking Group Found Hosting C2 Infrastructure in the US
Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants
New Serious PHP Vulnerabilities Released and Patched
Workshop on Economics and Information Security (WEIS) Archive
Possible new Cellebrite iPhone Radio Zero-Day
Kiloview E3 NDI Encoder
Siemens Industrial Edge App Publisher
Siemens Software Center
How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia
Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
Operation FlashHole: Lazarus breaks security, defies control
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
AI Guardrails Aren’t Stopping Criminal Hackers
ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)
Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)
ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)
Behind Japan’s Warnings of a Cyber Crisis
PHP2Shell Exploitation: Two Critical PHP Flaws Explained
TAG-217 Targets South Korean Financial Services with ARTEX
Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
Irish police force has its Twitter hacked in cryptocurrency scam
WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators
PHP2Shell: Why websites are going offline for emergency security updates
Fake Amazon Music x YouTube deal lures creators into a Google login trap
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Agents are your newest insiders. Security must move at their speed.
Managing open-weight model risk in enterprise deployments
🍍📟 Don't dox yourself: Censor Mode - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
🍍📟 "App Store" Anyone?: Pager Portal - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Hackers Turned GitHub Against Its Own Users | Threat Wire
I went through the confirmed AI coding agent security incidents since July 2025. The agent was rarely the way in. The things installed next to it were.
Over a decade in PHP's codebase. AI made it exploitable in a week.
Is it possible to intercept/read an Email?
AI-assisted php2shell exploit chain hits PHP runtime, forces coordinated defense across 70% of web
Critical PHP2Shell Vulnerabilities (CVSS 9.2): CVE-2026-109618 & CVE-2026-109619 — Patch & Hunt Immediately
Graysentinel
The Biggest Opportunity in Gaming & Betting Is Knowing When to Say Yes
US Shoppers Are Ready to Give AI More of Their Holiday To-Do List
The Agentic Commerce Conversations Merchants Are Having Now
Widespread PHP Flaw May Cause Many Site Outages Today
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.K. Sanctions Cryptomus for RU Money Laundering
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Black Hat Stories | Island.io
Black Hat Europe 2026 | Hear From Our Sponsors
Black Hat Stories | First Time Exhibitor
Critical Vulnerabilities in PHP Require Immediate Patching
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Why people don’t report scams, and it’s not embarrassment
6 alternatives to Blackpoint for your shortlist
Cybercrime Detective Explains Cybersecurity Jargon in 60-Second Videos for Cybersecurity Awareness Month
ZDI-CAN-36560: Apple
What Does a GRC Cybersecurity Professional Do?
CTF Walkthrough: The Cuckoo's Log
Purple Team Incident Adventure | TCM Community Live | Cybersecurity
0day Hacks NetworkChuck (OSINT)
Flushing the toilet kills our network!
You can monitor EVERYTHING in your homelab with this
Learn More About AI With Me at GTC
What Is Machine Data?
2 Hacking Tools You Need to See
Is the ad a scam? How to tell before you click
Inbox flooded with sign-up messages? Email bombing explained
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
HackerOne Limited Me to 3 Reports After 12 Years
Google just paid a $90,000 bounty for this vulnerability
I Built a Hackbot for Less Than $250
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
HackTheBox - Eloquia
HackTheBox - DevHub
HackTheBox - Reactor
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’
Thoma Bravo's Proofpoint to buy Varonis Systems in $6.3 billion all-cash deal
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
Introducing the new Copilot with Home, Code and Autopilot
Building the system for AI at work
Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 984 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.