WHATS Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders
SecurityWeek ·
WHATS
THE HAX?
Top story
Also in coverage
AI reverse engineering let researchers add a new feature to Slack
Help Net Security ·
Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
The Record from Recorded Future News ·
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails
infosecurity-magazine.com ·
Article feed
60 sources ↓Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders
WhiteMatter Raises $20 Million in Series A Funding
SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities
Over a Dozen Organizations Hit in Qubole Supply Chain Attack
AI reverse engineering let researchers add a new feature to Slack
Dreeze raises $33 million to automate recovery of entire cloud applications
CISA tweaks cyber incident form to spot attacks that might be linked
IRISSCON 2026 puts preparedness for cyberattacks and hybrid threats in focus
Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
Russian hackers compromised government email servers to steal NATO, EU correspondence
Data breach at hearing aid giant Amplifon impacts thousands
France blames Iran for fridge cyberattacks, says some caused fires
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
Default Admin Password Let Researchers Unlock and Start Cars
Payload Podcast 013 - Catchup
ClickFix Cache Trick
Taking your PHP Website Offline
AI Makes Reverse Engineering Mainstream Software & Malware Far Easier
CISA Announces Enhanced Reporting Form for Cyber Incidents
Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion
Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)
ISC Stormcast For Tuesday, November 10th, 2026 https://isc.sans.edu/podcastdetail/10172, (Tue, Nov 10th)
Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)
Microsoft’s AI bug hunter finds Rust flaw that went undetected for nearly 11 years
Qubole supply chain attack exposed AWS, Entra ID, and Okta credentials
Anthropic sharpens AI coding and security capabilities with Mythos 5.2
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
Beyond the Alert: The Case for Rich Network Data
Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
SAP patches ICM2SHELL and PROXYGATE maximum severity flaws
Hackers now exploit critical Barracuda ESG flaws to gain root access
Turla hackers use new Cereal malware to spy on govt Exchange servers
New OpenSSH Vulnerability
AI Security
Friday Squid Blogging: New Jurassic Squid Predecessors
Electron, we have a problem
IP snowshoeing under US .gov email via a whitelisted AmazonSES typo in SPF
Certificate authority list: every CA's incident record since 2017
Spyware attacks trend toward hitting just about anyone
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Trump picks Palantir’s LoSapio to head CISA
SHARED INTEL Q&A: AI tools slip open-source snippets past SBOMs, hiding bugs and license risks
News alert: Insignary offers free scanner to help companies detect PHP2Shell, Node2Shell
Fireside Chat: Kevin Surace says AI can eliminate drudgery — and bring joy back to security teams
Google fixes the eighth actively exploited Chrome zero-day of 2026
Iris Ohyama data breach may expose personal information of 7.7 million people
France Blames Iran for the Supermarket Fridge Attacks
How Banks Can Spot Scams That Pass Authentication
Fraud Costs Financial Institutions More Than Money
Payment Processors Compete on Checkout With Passkeys
Operation Snowball: Inside an Autonomous AI Intrusion Campaign
CISA added OpenSSH SSHole and three other flaws to KEV (due 12 Nov). What's your musl/Alpine SSH inventory looking like?
velociraptor/artifacts: Installs and runs Sysinternals Autoruns for Linux to enumerate autostart and persistence mechanisms.
IT threat evolution in Q3 2026. Non-mobile statistics
IT threat evolution in Q3 2026. Mobile statistics
Virtualization security: attack layers and misconfiguration impact
Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information
A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure
DHS Has Used This Controversial Investigative Tool 185,000 Times Since Trump Took Office
What the Midterm Results Could Mean for US Cybersecurity Policy
53% of Organizations Lack Definition For 'Normal' AI Agent Behavior
Fridge Cyberattacks Now Targeting Blood Banks, U.S. Military Bases
GhostFrame: A new ESXi Implant Linked to Settra Ransomware
October 2026 CVE Landscape
The Shift: Rethinking the Human in the Loop
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Cisco Meraki Security Hardening Release: October 2026
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
FORGE Lab uses agentic tools to identify memory safety issues in Rust
ARTEX abuse expands as cybercriminals target financial sector
Threat actors use agentic AI tooling to find and abuse exposed secrets
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Claude Code is accidentally exposing secrets all over GitHub
British soldier ignored order to pull his SIM card, then got blackmailed
I Almost Missed This Kubernetes Vulnerability
Meta paid a $300,000 bounty for this
OpenAI paid $5000 for this account takeover vulnerability that could also leak your private chats
13.3 million people’s medical data exposed; companies pay $300,000
A week in security (November 2 – November 8)
Big Tech sues over California plan to limit kids’ scrolling
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
Post-Quantum Questions to Ask Your Vendors
Making a Nothingx app desktop client using my android app.
/r/ReverseEngineering's Weekly Questions Thread
Playing with the STM32MP2
Universal BLE→USB dongle for ZMK
Vulnerabilities in global legislation
The Adversary v0.8.0-alpha for Cardputer/ADV is out!
Troubleshooting .json file in Microsoft Defender Workbook
Urgent HELP my telegram got hacked
Getting tired of the nepotism in the industry - U.S
He Invented the USB Rubber Ducky to Fix Printers!
Why This Robot Runs Its AI on Board
The Fake Interview in Binance’s $6.3B Hack
Got a MBR Bootkit
Live fake Cloudflare site for researchers
RE
HackTheBox - Garfield
HackTheBox - MakeSense
HackTheBox - Checkpoint
DEF CON 34 - Main - How Dealer Installed AntiTheft System Exposes 1M+ Cars - A Schulman, J Yu, Y Wei
DEF CON 34 - Main - Bird Hunting Season The Final Flight - Jon Gaines
DEF CON 34 - BugBounty - How Cache Poisoning Led to Critical Acct Takeover in TikTok's Web - G Chong
you need to use Herdr RIGHT NOW!!
this WiFi GPU is wild.....
local AI's biggest problem... they solved it?
CVE-2026-83844 Windows Paint Remote Code Execution Vulnerability
Chromium CVE-2026-118309: Incorrect reference resolution
Chromium CVE-2026-118314: Incorrect reference resolution
How an Image Causes a Heap Buffer Overflow // libheif
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
MDR vs SOC: How to choose the right option for your organisation
The best due diligence on a vendor is who they’ve worked with
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
ZDI-CAN-33751: AzeoTech
Introducing Theme Studio Pro
A 12-Year-Old Security Flaw Was Just the Beginning | Threat Wire
🍍📟 [PAYLOAD] 🔴 Hak5 Live: WiFi Pineapple Pager with Darren Kitchen
Want to Rent an Internet Address at the White House?
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Widespread PHP Flaw May Cause Many Site Outages Today
Smashing Security podcast #491: How AI agents are spooking the banks
Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents
BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
Fromage-Gate: Old-School Hacking Tactics vs. French Supermarkets
Understanding the Blast Radius of a Cryptographic Change
Eliminating the Blind Spots Between Humans, Machines, and AI
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
Gorbag: Orcs at the border harvesting intelligence from Ukraine
Are CTF Platforms Useful? (Ask a CISO)
DEF CON CTF Walkthrough: OSINT Edition
Real Folks of Cyber | Thomas Rogers | DITL
AI Agent Order Data: Agentic Commerce on Forter’s Network
How to Stop Holiday Return Abuse and Reseller Fraud
Holiday Shopping Gets an Agentic AI Twist
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 989 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.