WHATS Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
SecurityWeek ·
WHATS
THE HAX?
Top story
Also in coverage
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
Help Net Security ·
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
The Hacker News ·
ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd)
SANS Internet Storm Center, InfoCON: green ·
Article feed
60 sources ↓Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
The first ten lines of a command policy for AI coding agents
Byoky: Open-source wallet for AI API keys
Product showcase: Trust Onion uses rotating codewords to verify callers
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
Exposed Opendir Reveals APT DONOT Cyber Espionage Toolkit Targeting Pakistan's Nuclear and Energy Sectors
DomainTools Investigations | MrHex: A New Hack and Leak Campaign Attributing Themselves to Handala
Chainalysis Security Incident Information
Blue Team
Investigating three incidents in our evaluations
/r/netsec's Q4 2026 Information Security Hiring Thread
r/netsec monthly discussion & tool thread
Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide
ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd)
OneNote File Extraction, (Sun, Nov 1st)
Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
YARA-X 1.22.1 Release, (Sat, Oct 31st)
I built an IDM-style download manager in Rust (egui): split downloads, queues, scheduler, browser add-on
HX3302B / "X9S children's camera": reverse engineering, SDK and Doom
ph4ntom-ida-bridge: Localhost REST API & MCP control layer for IDA Pro 9.x (54 tools, AST ctree, Microcode IR, live debugger)
Federal court tosses Trump lawsuit challenging Alaska Senate certification
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Apple notifications alert victims in 99 countries about mercenary spyware infections
FBI links $6.3 billion Binance crypto heist to North Korean hackers
Alpine Linux rebuilds GitLab after attempted RCE attack
OpenAI says it's doubling Pro usage limits and bringing Work features to Chat
🍍📟 Introducing 2.0 for WiFi Pineapple Pager and One More Thing...
🍍📟 [PAYLOAD] 🔴 Hak5 Live: WiFi Pineapple Pager with Darren Kitchen
🔴 [PAYLOAD] Shark Jack Display 🦈
FBI Blames North Korea for $6 Billion Binance Crypto Theft
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121
Email hacking
GREYWARD security-focused Fedora desktop
How could 6.3 Billion worth of coins stolen within 20 minutes without any guard from my programming perspective?
Your Smart Device Is Tracking You More Than You Think
This Is How NVIDIA's AI Mercedes Drives in Real Traffic
What Is Shady AI?
Difference between cyber risk management standard vs. framework
Purple team using AI to expedite both sides
Open-Source Contribution Vibes
HackTheBox - MakeSense
HackTheBox - Checkpoint
HackTheBox - Eloquia
Chromium: CVE-2026-118304 Improper input validation in SVG
Chromium: CVE-2026-118305 Memory corruption in Turbolev
Chromium: CVE-2026-118306 Memory corruption in FileSystem
Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
The $6.3 Billion Binance Hack Was Pulled Off in Just 20 Minutes
Hack a Water Tower! & Two Big Announcements
The ClickFix Deception
AI Meets Minecraft
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
this WiFi GPU is wild.....
local AI's biggest problem... they solved it?
why EVERYONE is copying this
i js do a malwwarre
php2shell exploit toolkits and a PAN-OS repackaging recovered from open directorie
Fling trainer fake website.
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Vulnerabilities in Node.js Affecting Cisco Products: October 2026
Vulnerabilities in PHP Affecting Cisco Products: October 2026
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Hackers steal $6.3 billion from Binance in record crypto heist
Massive leak exposes 41,000 DHS workers and undercover ICE agents
Friday Squid Blogging: Bigfin Squid Off California Coast
Bloatware in Aftermarket Auto Parts
Studying Fraudulent North Korean IT Workers
DOJ raises privacy concerns over potential sale of Character.AI chats
Fashion retailer Resolve says hackers stole payment card information
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
Devs Hit by Trojanized Claude Code Extension for Cursor
Behind the Scenes of How Operation Blackout Went Down
L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara
North Korea May Be Behind the $6.3B Binance Hack
6 Cyber Experts Share Their Greatest Security Scares
42M Records Exposed by Government Technology Platform
DEF CON CTF Walkthrough: OSINT Edition
Real Folks of Cyber | Thomas Rogers | DITL
Is AI Security a Real Career?
New Framework Puts Ransomware Resilience for AI Systems in Focus
Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit
Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History
Fake PDF and search tools hijacked searches for 13.4 million Chrome users
Photo ID, bank checks, face scan? The UK’s age-check options
Binance hit by largest-ever crypto theft, with $6.3 billion stolen
This month in security with Tony Anscombe – October 2026 edition
Amatera: How the prolific infostealer works and spreads
Anthropic AI model finds Linux kernel bug that leads to remote root access
Mistral open-sources AI model despite warning it could aid cyberattacks
Everyday channels are available in an incident, but you may not want them
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Siemens Mendix SAML Module
Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents
BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Filter generation in practice: from algorithms to LLMs
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Millions of security cameras at risk: DoS vulnerability in Intelbras devices
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
FTC Takes Down 19 Fake FTC Sites in Impersonation Scam Crackdown
Raise Cuts Chargebacks 45% and Nearly Ends Manual Fraud Reviews
Fraudsters Leave Patterns, and AWS Wants AI to Follow Them
How to Stop Holiday Return Abuse and Reseller Fraud
Holiday Shopping Gets an Agentic AI Twist
AIアシスタントはすでにあなたのサイトで購入を行っている：Forterのデータが示す実態
The best due diligence on a vendor is who they’ve worked with
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
Data Breach Statistics That Matter in 2026
SHARED INTEL Q&A: 82% of campaign domains expose donors to email fraud before midterms
SHARED INTEL Q&A: PHP2Shell is no Log4Shell — open-source flaw is more warning than wildfire
MY TAKE: OktoberTech reveals a hardening AI foundation — but no one yet governing the agents
ZDI-CAN-35872: LiteLLM
Prediction Markets Emerge as a New Vertical for Traffer Teams
Behind Japan’s Warnings of a Cyber Crisis
PHP2Shell Exploitation: Two Critical PHP Flaws Explained
Cloudflare is offering a $3,000 bounty for any unique PHO2SHELL bypass.
My $250 AI Hackbot Ran 24/7 on a VPS and Missed This
HackerOne Limited Me to 3 Reports After 12 Years
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
The race to the first exploit // php2shell
Widespread PHP Flaw May Cause Many Site Outages Today
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.K. Sanctions Cryptomus for RU Money Laundering
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Black Hat Stories | Island.io
Black Hat Europe 2026 | Hear From Our Sponsors
Black Hat Stories | First Time Exhibitor
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 979 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.