2026-08-17T09:05:56Z https://nostr.now BleepingComputer https://nostr.now/npub1j7dz37jrwqhehe8ydzpk5kcjpnzzv53h7s54lj62nv5w9fcar34suv7hg2 https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/309/085/032/209/441/original/cc346ba7792daeee.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/309/085/032/209/441/original/cc346ba7792daeee.png https://nostr.now/nevent1qqsfs0cp8f4w8uj9zvk9q22r83qy9y4svhgtlqvrdpqfurr7a0x3ejqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk68yz22 Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-oob-updates-to-distrust-emudhra-certificates/">https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-oob-updates-to-distrust-emudhra-certificates/</a> 2026-10-27T18:20:44Z https://nostr.now/nevent1qqsvp0ze7ku705pw0m3458gg8v5g4ufp34mt5gl5684rarc0ukcl3xczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxklu2ujw Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project&#39;s infrastructure.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/">https://www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/</a> 2026-10-27T16:16:03Z https://nostr.now/nevent1qqs2zx44s4408e2e2v0mks2rp0wcgnn27zkx54cay5xjjurmgv2xdhqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk5nyf3w The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/tailscale-warns-of-serious-ssh-flaws-allowing-root-privilege-escalation/">https://www.bleepingcomputer.com/news/security/tailscale-warns-of-serious-ssh-flaws-allowing-root-privilege-escalation/</a> 2026-10-27T14:10:12Z https://nostr.now/nevent1qqsr2z2t9gclc06vlqrurdxz8g3hy509azprcrs6rzhd8x8uqg2wumczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkwjf76t ​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in &#34;extremely sophisticated&#34; targeted attacks on iOS devices.<br/><br/><a href="https://www.bleepingcomputer.com/news/apple/apple-backports-coregraphics-zero-day-patches-to-older-iphones/">https://www.bleepingcomputer.com/news/apple/apple-backports-coregraphics-zero-day-patches-to-older-iphones/</a> 2026-10-27T10:39:20Z https://nostr.now/nevent1qqsvqe3wcraq5wcjf9fejrvu60ekj338r29yrf88rht5m8r0tqhawvczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk4ckm9z French energy giant ENGIE, one of the world&#39;s largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/energy-giant-engie-discloses-data-breach-affecting-customers/">https://www.bleepingcomputer.com/news/security/energy-giant-engie-discloses-data-breach-affecting-customers/</a> 2026-10-27T09:27:14Z https://nostr.now/nevent1qqs06ql006ek5fxgsq5p8xxj3nqjp9xclk3cpv076shw2mp533828yqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkj9mjjy The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/">https://www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/</a> 2026-10-27T08:21:20Z https://nostr.now/nevent1qqs8um055hfyghnyt4nft0p7qkg5lnarzmw0snqd4v2w3v5pl3m8ddqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkw35qg8 The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/university-of-copenhagen-data-breach-exposes-data-of-525-000-people/">https://www.bleepingcomputer.com/news/security/university-of-copenhagen-data-breach-exposes-data-of-525-000-people/</a> 2026-10-26T22:20:54Z https://nostr.now/nevent1qqsr2mfgnm7fxgq9cjjtfx22w86tat4k7yceewcc033qvkvusqjllvczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkdx3z0e South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/former-pentester-used-artex-ai-to-steal-82-million-data-records/">https://www.bleepingcomputer.com/news/security/former-pentester-used-artex-ai-to-steal-82-million-data-records/</a> 2026-10-26T21:08:44Z https://nostr.now/nevent1qqszxdzjf0a92gfs8nqnjc6khfd4jl498rfat3znwy5x9xq0fkzhpeqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkeuhtn7 OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger models.<br/><br/><a href="https://www.bleepingcomputer.com/news/artificial-intelligence/openai-launches-gpt-61-terra-with-3x-faster-ai-agents-50-percent-lower-pricing/">https://www.bleepingcomputer.com/news/artificial-intelligence/openai-launches-gpt-61-terra-with-3x-faster-ai-agents-50-percent-lower-pricing/</a> 2026-10-26T20:47:08Z https://nostr.now/nevent1qqsf4v5s7dwjwje34k2rjh7krl6ypkxtunusd8wauv6wwrh4m982r8qzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkp23q4u DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/dreamhost-forces-email-ftp-sftp-password-resets-in-ongoing-incident/">https://www.bleepingcomputer.com/news/security/dreamhost-forces-email-ftp-sftp-password-resets-in-ongoing-incident/</a> 2026-10-26T19:26:37Z https://nostr.now/nevent1qqstvg04ul33qxgeldhrunnwzx79yg0szs9v4a28sqcgzz9yr576c5czyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkv7dle8 A critical flaw dubbed &#39;HTTP2Shell&#39; in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/">https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/</a> 2026-10-26T16:28:17Z https://nostr.now/nevent1qqstpacf4szqtrk2x6tx7jxt0hw82rmwq4mrsrxse8w096qx35gf4eszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkdera5j Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-net-patches-for-critical-brotli-flaw/">https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-net-patches-for-critical-brotli-flaw/</a> 2026-10-26T15:38:50Z https://nostr.now/nevent1qqs89nhnmplpafa7mzgga2vwljl27hp6p4yca2z0nsateq6w8e6upvgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkrar59a A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole nearly $37 million from 174 victims in the United States.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/chinese-man-extradited-for-role-in-36-million-cryptocurrency-scam/">https://www.bleepingcomputer.com/news/security/chinese-man-extradited-for-role-in-36-million-cryptocurrency-scam/</a> 2026-10-26T13:57:01Z https://nostr.now/nevent1qqs04qwkyhjw0zf6vmu7cgw6rd89ptwja65ezynm5r036ysu7c6mpqczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkzjhe7l Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more.<br/><br/><a href="https://www.bleepingcomputer.com/news/linux/kali-linux-20263-released-with-7-new-tools-desktop-updates/">https://www.bleepingcomputer.com/news/linux/kali-linux-20263-released-with-7-new-tools-desktop-updates/</a> 2026-10-26T10:27:13Z https://nostr.now/nevent1qqsdh0jja8yyxd7hhv6rxvw4nz0726k2urwhkn08mk7scscyljgn0ngzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkzhnkr4 Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/php2shell-security-flaws-now-sucessfully-exploited-in-the-wild/">https://www.bleepingcomputer.com/news/security/php2shell-security-flaws-now-sucessfully-exploited-in-the-wild/</a> 2026-10-26T09:20:16Z https://nostr.now/nevent1qqswlq5dqd3338sp3h5xnl9twe8zxn9jvwvk6zqq6ldd60eguws69kqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkeezvka Researchers found a malicious AGENTS markdown instruction file in a customer&#39;s Downloads folder that tricked an AI coding agent into installing a rogue npm package.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/">https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/</a> 2026-10-25T15:49:54Z https://nostr.now/nevent1qqstjpk68fn78jhjyw3y8m3q72ucxshfx37zvr98dm8qc9nkltxq4zszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxklkknjq A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/">https://www.bleepingcomputer.com/news/security/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/</a> 2026-10-24T14:18:13Z https://nostr.now/nevent1qqs90xfr9zzrxv0sk88wnj28hvnusnwtmjla2jxdz0a59t8u2flj0wszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkve40fw Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/abandoned-popcorn-time-app-exposed-millions-of-device-to-rce-attacks/">https://www.bleepingcomputer.com/news/security/abandoned-popcorn-time-app-exposed-millions-of-device-to-rce-attacks/</a> 2026-10-23T20:55:21Z https://nostr.now/nevent1qqsqru3y62uhu0wfsdjt9tg0efndh6vr5ys3ukn94vs2m4jtetpyd0qzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkwdvj4a Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/">https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/</a> 2026-10-23T18:54:59Z https://nostr.now/nevent1qqs8gaf7tyglh0zw6l9z6jtezt5whgcn7nr3ptu78z3nh45eqnewzkgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk0gx8m9 Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2016-reaches-end-of-support-in-january/">https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2016-reaches-end-of-support-in-january/</a> 2026-10-23T17:05:21Z https://nostr.now/nevent1qqsy5uwxufclq2lrs9x3m2uk5gfhqpe9fxux9ehcr2hpdn6qc9czx5czyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxknlxrlq American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/quest-diagnostics-confirms-data-breach-exposed-patient-records/">https://www.bleepingcomputer.com/news/security/quest-diagnostics-confirms-data-breach-exposed-patient-records/</a> 2026-10-23T16:40:25Z https://nostr.now/nevent1qqszxr86dafd44vxz2hm4rv6p7y2yz3ma2v5mrlkfu46m575nl2arcqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkpr4w46 The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability/">https://www.bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability/</a> 2026-10-23T15:38:21Z https://nostr.now/nevent1qqsp4zq9zjc32ld0hr7wrhufeuct5ejssgllanpf7s6enfrmwjmzgsczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxklj52pv Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/">https://www.bleepingcomputer.com/news/security/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/</a> 2026-10-23T12:48:21Z https://nostr.now/nevent1qqs292cxc4jmjw9sq84hgw2ptkdjc6t2y8tuwclqdqeaaasl6l02laqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkyyur4x Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/railway-warns-devs-to-rotate-secrets-after-potential-breach/">https://www.bleepingcomputer.com/news/security/railway-warns-devs-to-rotate-secrets-after-potential-breach/</a> 2026-10-22T21:25:45Z https://nostr.now/nevent1qqsyjq37qcj5xl6r6ls3q6366qhak6aa2s8yekzu2q40szslpgam87szyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkqwy2nh Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/capcom-confirms-data-breach-affecting-117-million-accounts/">https://www.bleepingcomputer.com/news/security/capcom-confirms-data-breach-affecting-117-million-accounts/</a> 2026-10-22T20:23:02Z https://nostr.now/nevent1qqsdtaupxkdj0g7mgz57qvtrrvs3y7ry6wdp959nuv0t4vr63fa0h5szyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkmvcguq Hackers compromised the LiteLLM project&#39;s PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/">https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/</a> 2026-10-22T19:13:09Z https://nostr.now/nevent1qqsyy5gmttwg9v2znflmv09edtsfn5zmq0k64v5w040uf0h6r4mj8uszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk0qhvul Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/">https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/</a> 2026-10-22T17:18:38Z https://nostr.now/nevent1qqs062evr2t5rglhtzq6ads7qrq0ee6hcv6kqgj8kyw3jfa8y99ymuczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk9txgrr Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-how-to-fix-broken-exchange-online-ews-apps/">https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-how-to-fix-broken-exchange-online-ews-apps/</a> 2026-10-22T15:49:48Z https://nostr.now/nevent1qqsfkhzc8tngjlhk2v9nzujq6qggpf94ukrlzm985px2d4dhrhqlyyszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxks4lurj Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/amazon-says-php2shell-exploitation-began-4-days-before-patches/">https://www.bleepingcomputer.com/news/security/amazon-says-php2shell-exploitation-began-4-days-before-patches/</a> 2026-10-22T13:09:30Z https://nostr.now/nevent1qqs8dw7wd22gzwjznafg6uds3taj45rtudkvsp2ndpvv70gwkrxsw3czyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkec82ds GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/gitlab-warns-of-new-max-severity-code-execution-vulnerability/">https://www.bleepingcomputer.com/news/security/gitlab-warns-of-new-max-severity-code-execution-vulnerability/</a> 2026-10-22T11:42:06Z https://nostr.now/nevent1qqstmg7ra9hq696y387vj2rdgszlfzd6kepze8szjtw6n8cl5c5vd3gzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkyr9m96 Nearly 11,000 cybercrime networks disrupted and over 1,400 arrests in Operation Serengeti III targeting business email compromise, ransomware, and online scams in Africa.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/authorities-disrupt-nearly-11-000-cybercrime-networks-in-africa/">https://www.bleepingcomputer.com/news/security/authorities-disrupt-nearly-11-000-cybercrime-networks-in-africa/</a> 2026-10-22T08:27:28Z https://nostr.now/nevent1qqsvu8aw3988984jvj49vzazxn5prem3rrf4ygryq2n5js6z2ut3ckczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkdtsm2u Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks.<br/><br/><a href="https://www.bleepingcomputer.com/news/google/google-chrome-adds-gemini-powered-scam-detection-warns-users-of-clickfix-attacks/">https://www.bleepingcomputer.com/news/google/google-chrome-adds-gemini-powered-scam-detection-warns-users-of-clickfix-attacks/</a> 2026-10-21T22:16:44Z https://nostr.now/nevent1qqspn4r4uamskasxygq5jmjfgc8m3cy44x9jrwau4lzfr3q3ewz2vnqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxke3guaa Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers&#39; servers.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/japans-onamae-desktop-cloud-hacked-up-to-27-000-servers-affected/">https://www.bleepingcomputer.com/news/security/japans-onamae-desktop-cloud-hacked-up-to-27-000-servers-affected/</a> 2026-10-21T21:43:41Z https://nostr.now/nevent1qqsrapdl2em3vzrxthpkvvu5ykfht2fmvc0ww9ytem9ph78p5xagxegzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkfuw3hy North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/lazarus-hackers-use-post-quantum-cryptography-for-malware-delivery/">https://www.bleepingcomputer.com/news/security/lazarus-hackers-use-post-quantum-cryptography-for-malware-delivery/</a> 2026-10-21T20:32:04Z https://nostr.now/nevent1qqsfq6749qzxmy2emqxglmzqt3q48v0t67kwhat6sn2g6rmpaefv5vczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk5ttuch The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/">https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/</a> 2026-10-21T18:34:58Z https://nostr.now/nevent1qqs8d6ajmmzuu2s8nz5h38z3jaq8zc685qeuzue67una5ece08w2ymgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxktawtp2 OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/openai-agents-disabled-safety-monitoring-one-lied-about-it/">https://www.bleepingcomputer.com/news/security/openai-agents-disabled-safety-monitoring-one-lied-about-it/</a> 2026-10-21T16:27:08Z https://nostr.now/nevent1qqsrta57ytprr9lntft74k3uelcm82e68lluuqpwa54twx4ufjpm6vqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkasnn4f The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/">https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/</a> 2026-10-21T14:07:21Z https://nostr.now/nevent1qqs0ncw0lendsvxtckce0t9dctgqggyxezvpurvyl7pcm62qh2fm04gzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkjvx57l Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-powertoys-adds-cursorhide-button-lock-mouse-tools/">https://www.bleepingcomputer.com/news/microsoft/microsoft-powertoys-adds-cursorhide-button-lock-mouse-tools/</a> 2026-10-21T12:20:50Z https://nostr.now/nevent1qqsvce5qxs3hywnmaypeqkjd3cpu8lkn6436pzf3z8sm8nxn65jt5zgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk4ut7h6 Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-didnt-actually-fix-vpn-issues-caused-by-windows-updates/">https://www.bleepingcomputer.com/news/microsoft/microsoft-didnt-actually-fix-vpn-issues-caused-by-windows-updates/</a> 2026-10-21T10:15:08Z https://nostr.now/nevent1qqspljqp4ehauhyqfd95xxvj4l2avf4g8sm80ektnk8skew45u4xerqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk20qg22 The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/cisa-and-fbi-safepay-ransomware-has-hit-over-600-critical-infrastructure-organizations/">https://www.bleepingcomputer.com/news/security/cisa-and-fbi-safepay-ransomware-has-hit-over-600-critical-infrastructure-organizations/</a> 2026-10-21T08:36:40Z https://nostr.now/nevent1qqsgytn69lmtesgq390vvzl2k5lufzquvzt8lykt3helwrgf05qyh6szyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkjs5a27 A threat actor breached TeamUpdraft&#39;s website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/">https://www.bleepingcomputer.com/news/security/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/</a> 2026-10-21T01:02:11Z https://nostr.now/nevent1qqsxhr24yv3acra08f75703umhsn3kukp79tgl2tz399cc9hqz9sx7czyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkvwwwxe Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates/">https://www.bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates/</a> 2026-10-21T00:46:58Z https://nostr.now/nevent1qqstdwgmd60hse89wsw4hqg492448utz2mv0fvxu6kv2r3wvrn4hvmszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk6etafa Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/zeabur-shutting-down-after-second-security-breach-in-two-months/">https://www.bleepingcomputer.com/news/security/zeabur-shutting-down-after-second-security-breach-in-two-months/</a> 2026-10-20T19:33:19Z https://nostr.now/nevent1qqsy9xsht5z8yx5zsjnz9jftg6zjh0l43qlcpqekf7mlqn4hywthz2czyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkz68vz9 OpenAI confirmed that its newer models are much better at writing and migrating software in older programming languages.<br/><br/><a href="https://www.bleepingcomputer.com/news/artificial-intelligence/openai-says-gpt-61-sol-is-dramatically-better-at-migrating-legacy-code/">https://www.bleepingcomputer.com/news/artificial-intelligence/openai-says-gpt-61-sol-is-dramatically-better-at-migrating-legacy-code/</a> 2026-10-20T18:11:18Z https://nostr.now/nevent1qqstyatatjut39fseqvnyrycl588snfj3ddjylt3mmq3q8h09zqcm4szyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkevskla The U.S. Department of Homeland Security (DHS) is ordering federal civilian agencies to stop using DeepSeek products and remove them from government systems.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/dhs-bans-deepseek-products-across-us-federal-civilian-agencies/">https://www.bleepingcomputer.com/news/security/dhs-bans-deepseek-products-across-us-federal-civilian-agencies/</a> 2026-10-20T14:19:22Z https://nostr.now/nevent1qqsgpw0v5dezfzag4e5ma7034e6yqrck87eklxs7p9upaqucq3a94nszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk5azmz7 A Nigerian national was sentenced to eight years in prison for his involvement in a series of spearphishing attacks targeting US tax preparation businesses since 2019.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/hacker-gets-8-years-for-stealing-33-million-from-taxpayers/">https://www.bleepingcomputer.com/news/security/hacker-gets-8-years-for-stealing-33-million-from-taxpayers/</a> 2026-10-20T13:19:26Z https://nostr.now/nevent1qqsqcfw8753zkzn38wj2c44qwnscsqvmltkw3pggrkm5gvutjlc54pgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkkz8f06 Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October 2026 security update.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/windows-server-2025-gets-support-for-quick-machine-recovery/">https://www.bleepingcomputer.com/news/microsoft/windows-server-2025-gets-support-for-quick-machine-recovery/</a> 2026-10-20T12:18:03Z https://nostr.now/nevent1qqs8ug8aa30fh9364s9hvkjf7vppjeynh5rv4e42zlmnxrr4h63gymczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkndur8z French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/ovhcloud-cli-releases-backdoored-on-github-to-steal-developer-secrets/">https://www.bleepingcomputer.com/news/security/ovhcloud-cli-releases-backdoored-on-github-to-steal-developer-secrets/</a> 2026-10-20T11:33:13Z https://nostr.now/nevent1qqstnaeddtgy74f35kmxug2nuy9akrag096hdve9clr7hz4dt68y2fqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkcsl6en Ahold Delhaize, one of the world&#39;s largest food retail chains, confirmed that last week&#39;s cyberattack disrupted services at stores across Europe and the United States.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/ahold-delhaize-cyberattack-affects-services-across-us-and-europe/">https://www.bleepingcomputer.com/news/security/ahold-delhaize-cyberattack-affects-services-across-us-and-europe/</a> 2026-10-20T11:18:52Z https://nostr.now/nevent1qqs29lacuu2h76jzz78s6m5zdd68zf5n4l0yv4f36r0cnjcy8uf6wpczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkcl2zgs Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/revolut-outage-disrupts-online-banking-operations-worldwide/">https://www.bleepingcomputer.com/news/security/revolut-outage-disrupts-online-banking-operations-worldwide/</a> 2026-10-20T09:47:01Z https://nostr.now/nevent1qqs8508eys222jvryp09vnc7c248gmgr2j6xsgu4lu6kt5laxv3dpmqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkjj5w9p Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/nikkei-discloses-third-data-breach-in-a-month-18m-records-exposed/">https://www.bleepingcomputer.com/news/security/nikkei-discloses-third-data-breach-in-a-month-18m-records-exposed/</a> 2026-10-19T21:50:02Z https://nostr.now/nevent1qqswn3entnmqygun4frt2af6qq6ene0nx9v7z2nydxsh42wpe09kq6qzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk03n2lu Some downloads of the Rank Math PRO WordPress plugin from the vendor&#39;s official website carried malware that planted hidden backdoors in a supply-chain attack last week.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/wordpress-seo-plugin-rank-math-compromised-to-backdoor-websites/">https://www.bleepingcomputer.com/news/security/wordpress-seo-plugin-rank-math-compromised-to-backdoor-websites/</a> 2026-10-19T21:25:08Z https://nostr.now/nevent1qqsd33gnnmxtlc8874cphmk0anjvds9ej0jgcwtzn4dw9m68cqx8fdszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkazksh4 Hackers reportedly compromised AOMEI&#39;s servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a<br/><br/><a href="https://www.bleepingcomputer.com/news/security/hackers-hijack-aomei-update-servers-to-secretly-spread-malware/">https://www.bleepingcomputer.com/news/security/hackers-hijack-aomei-update-servers-to-secretly-spread-malware/</a> 2026-10-19T19:41:15Z https://nostr.now/nevent1qqs02ljvf3d35py4uq05hj2cjlc956q4xcwd2h9n0fatykxnykzlacgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkeucglz Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/bullhorn-takes-staffing-platform-offline-to-contain-cyberattack/">https://www.bleepingcomputer.com/news/security/bullhorn-takes-staffing-platform-offline-to-contain-cyberattack/</a> 2026-10-19T18:51:28Z https://nostr.now/nevent1qqsg4c5680gwrh3kcwz3sc7ses0nehg4hn8zqt0m5e0ntmk6w04782gzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkq66rjx The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/">https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/</a> 2026-10-19T17:27:38Z https://nostr.now/nevent1qqst76c0rm80f8xx5rzzxnq3xl4kwrfteapfgvj8jxdek599mh2yc7czyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkw20lxu Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010).<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-game-app-crashes-caused-by-windows-kb5124010-preview-update/">https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-game-app-crashes-caused-by-windows-kb5124010-preview-update/</a> 2026-10-19T14:55:39Z https://nostr.now/nevent1qqspyyv7ezgy4he06689awx0j8h0fhclkl0uxan8uxvhsgrmu7vxpuszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkyuwczk F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/f5-releases-out-of-band-patches-for-critical-nginx-vulnerabilities/">https://www.bleepingcomputer.com/news/security/f5-releases-out-of-band-patches-for-critical-nginx-vulnerabilities/</a> 2026-10-19T13:51:12Z https://nostr.now/nevent1qqsglkxh2d8x07jg55aycwwgmu3pnkwllrcjrvk6acty4c4lkawhyzczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkrccwzz Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-bug-that-hid-copilot-buttons-in-classic-outlook/">https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-bug-that-hid-copilot-buttons-in-classic-outlook/</a> 2026-10-19T12:45:00Z https://nostr.now/nevent1qqsx35kupmzvgt5yhgugmcwh6ytza7vtfrzjv7dmy8l9emk25zyxksczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkuuexup Microsoft has confirmed that this month&#39;s Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-october-windows-server-updates-cause-exchange-issues/">https://www.bleepingcomputer.com/news/microsoft/microsoft-october-windows-server-updates-cause-exchange-issues/</a> 2026-10-19T08:58:58Z https://nostr.now/nevent1qqspm5rqhvk9rpjwxn2d8ew0twnl3q4mhkjw36ay7q7yxa8069d0h4gzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkl90uy5 Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/">https://www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/</a> 2026-10-18T14:24:12Z https://nostr.now/nevent1qqs2qerh00kfgsjddhntnp6mcxv2srp68tqz2yqaz9gh6lmn9m4gwsgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkg9jed8 ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/">https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/</a> 2026-10-17T15:19:05Z https://nostr.now/nevent1qqs9m0v4qkc2sx9pmcq25c9cmy2demdqwrfcyyqq0aek04wg364f9qszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkrm90r8 Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/">https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/</a> 2026-10-17T14:33:14Z https://nostr.now/nevent1qqsd0ngzzdphwk4up2l6nlkwa6t7s52lvymlamc2zpurwlwkcjw0fkgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkaf5lp6 Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/">https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/</a> 2026-10-16T20:01:15Z https://nostr.now/nevent1qqsreyesd3n3dndam8c5dd36fdfuevr30hpf2ehxx3775c7eqkd2uqszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxknhrnqv Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim&#39;s device.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware/">https://www.bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware/</a> 2026-10-16T17:20:19Z https://nostr.now/nevent1qqs97dpjzdx6sxu0czd8l904xfgsglncynzly6t58zmd7j5hdf6j3wszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk5xgl48 Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/">https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/</a> 2026-10-16T12:01:47Z https://nostr.now/nevent1qqsr0ftayf8wq8ek33ttpdl676982hc0tc5kntpf3lteer4nzggt6wczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkudx0zw Microsoft says some users may have trouble turning on Smart App Control after installing this month&#39;s KB5127648 Windows 11 security update.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/kb5127648-windows-security-update-may-break-smart-app-control/">https://www.bleepingcomputer.com/news/microsoft/kb5127648-windows-security-update-may-break-smart-app-control/</a> 2026-10-16T08:53:22Z https://nostr.now/nevent1qqs8enth8v97egxac60cftcydgp69zq9g5duu4fqddm49jqka4kedyszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkg4l22z The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/bae-systems-cyberattack-disrupts-us-federal-court-operations/">https://www.bleepingcomputer.com/news/security/bae-systems-cyberattack-disrupts-us-federal-court-operations/</a> 2026-10-16T07:37:51Z https://nostr.now/nevent1qqsxn7l595kyh5dw6nfllnsdm5y4rpclm64c9eky9wruml8z5p63rwgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkysmchx BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/beyondtrust-patches-zero-day-exploited-in-attacks-since-august/">https://www.bleepingcomputer.com/news/security/beyondtrust-patches-zero-day-exploited-in-attacks-since-august/</a> 2026-10-16T06:18:22Z https://nostr.now/nevent1qqs9svfpttls8dr7cxx5uurk5jfhj7c5jhlsgs09zwrketherywpu7czyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkazsa47 Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/">https://www.bleepingcomputer.com/news/security/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/</a> 2026-10-15T20:25:21Z https://nostr.now/nevent1qqsf2pqew20wej38l7gehugdeqngfnsswpazgkp90e28z6uq99wcuxqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkk5wsfn Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/android-gets-ai-defenses-against-messaging-scams-fake-calls/">https://www.bleepingcomputer.com/news/security/android-gets-ai-defenses-against-messaging-scams-fake-calls/</a> 2026-10-15T19:48:57Z https://nostr.now/nevent1qqs980q3th54gu9rkev97j80604a7qsu0xpdtyadwxg87xteh03ye4qzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxky5tlyd A proxyjacking campaign has impacted devices in 34 countries, monetizing victims&#39; internet connections through a commercial residential proxy network.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/">https://www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/</a> 2026-10-15T18:21:20Z https://nostr.now/nevent1qqsdyph0km84w0lcwrdyt3uhxpu7uhquavhuh8uuqg4j55rnjtly6uqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkn6ysyl A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges/">https://www.bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges/</a> 2026-10-15T17:12:55Z https://nostr.now/nevent1qqsx7vs4ke0wym2tt7snd6gl9fuhewntm4xurkknmlffw326cyn2ddqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkfeyr6v Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2022-reached-end-of-mainstream-support/">https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2022-reached-end-of-mainstream-support/</a> 2026-10-15T13:21:12Z https://nostr.now/nevent1qqsqtp5h7ve52406nsg34xckpx077lvlkq8y2ghfmgc38wsjjyh50eczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkesfjmj Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/police-arrests-95-suspects-in-child-sexual-abuse-material-crackdown/">https://www.bleepingcomputer.com/news/security/police-arrests-95-suspects-in-child-sexual-abuse-material-crackdown/</a> 2026-10-15T11:55:53Z https://nostr.now/nevent1qqs8pvuaf8fh9dffeeytlsw8q23hkquj7pegrwe6jq3n095j7ueesnczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkj83969 Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-bug-causing-windows-black-screens-explorer-crashes/">https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-bug-causing-windows-black-screens-explorer-crashes/</a> 2026-10-15T09:12:34Z https://nostr.now/nevent1qqs9gwamcnyxkak0ncs0grs0h2wkhpenvpwgwdhcjp48g69h79qa5gczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkln78wt The Legal Aid Agency (LAA), an executive agency of the UK&#39;s Ministry of Justice that manages the country&#39;s Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/uk-legal-aid-agency-hackers-stole-records-dating-back-to-1978/">https://www.bleepingcomputer.com/news/security/uk-legal-aid-agency-hackers-stole-records-dating-back-to-1978/</a> 2026-10-15T08:07:08Z https://nostr.now/nevent1qqsr4ukrrz222rw9y9ww090ks0cchezve0vfuv5tfx7l4drjrtplalszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkehnt64 Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/">https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/</a> 2026-10-14T22:57:05Z https://nostr.now/nevent1qqsqv9e9ty68e3k30uk05qhmszgj2gg4vwn4vdl0ntcj4edvzqhatkqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk0y9tqm The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group&#39;s operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/">https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/</a> 2026-10-14T19:42:03Z https://nostr.now/nevent1qqsy0ahuyyzmzhgkpz99c9uvdz9y2gzffssnhtq3dztjendx9zwxtfszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkyev3ge Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/ledger-asks-sellers-across-asia-to-halt-sales-after-supply-chain-attack/">https://www.bleepingcomputer.com/news/security/ledger-asks-sellers-across-asia-to-halt-sales-after-supply-chain-attack/</a> 2026-10-14T17:47:07Z https://nostr.now/nevent1qqsgde79na8xmldrhcq67nsj9zagt6klmy0vf3l5twn7q6eyvf0y92gzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkh4v5ql Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/">https://www.bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/</a> 2026-10-14T17:29:30Z https://nostr.now/nevent1qqs9dep7spv2awlzyzcgsycchmat2apg53qkk490ekgrgyy3w2ll8jgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkrtdmp7 Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 security updates.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-vpn-issues-caused-by-september-windows-updates/">https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-vpn-issues-caused-by-september-windows-updates/</a> 2026-10-14T14:27:18Z https://nostr.now/nevent1qqsy26f3wg6y96hx7k5l3wx0lm55t0vt3447sf8zkv833ulppc0qedszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxktg6zr9 A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 150 countries has been disrupted by law enforcement agencies and partners worldwide.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/global-takedown-hits-network-behind-1-billion-phishing-messages/">https://www.bleepingcomputer.com/news/security/global-takedown-hits-network-behind-1-billion-phishing-messages/</a> 2026-10-14T13:13:27Z https://nostr.now/nevent1qqs96gwshkhm3xqxjz5e90626n5f6c2fktlzvq4cd5d2ucjx20esu4szyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk6hul8y The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/">https://www.bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/</a> 2026-10-14T12:59:15Z https://nostr.now/nevent1qqsrc0fnc0cn6d6ge0hrdqqklattrvjyap04sjz7j54erj3vwrdf8tczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkxdnpux A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/hirudo-android-malware-replaces-banking-apps-to-evade-security-checks/">https://www.bleepingcomputer.com/news/security/hirudo-android-malware-replaces-banking-apps-to-evade-security-checks/</a> 2026-10-14T11:42:57Z https://nostr.now/nevent1qqs22s7fl2f4zgpf0wv3tawwsavjjgwyy0cf33a00huuvptzkahhq0szyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxknyafln Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the &#34;Administrator protection&#34; security feature is enabled.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/microsoft-recent-windows-updates-may-trigger-remote-desktop-failures/">https://www.bleepingcomputer.com/news/security/microsoft-recent-windows-updates-may-trigger-remote-desktop-failures/</a> 2026-10-14T10:49:28Z https://nostr.now/nevent1qqsdx578wq3qcty55v5x0uykjpamvlxxpz7fg8ahru6w96lt657ad7szyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxke892zs A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company&#39;s San Francisco offices to secretly record sensitive conversations.<br/><br/><a href="https://www.bleepingcomputer.com/news/artificial-intelligence/openai-engineer-arrested-for-allegedly-planting-spy-device-in-office/">https://www.bleepingcomputer.com/news/artificial-intelligence/openai-engineer-arrested-for-allegedly-planting-spy-device-in-office/</a> 2026-10-13T22:33:20Z https://nostr.now/nevent1qqswq7zx036aw2uwywwzjatwqtrluqa7un4hv0e0aeaz7rxgm90666czyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk0v24vu A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/ghostscript-flaw-lets-hackers-hijack-servers-via-pdf-uploads/">https://www.bleepingcomputer.com/news/security/ghostscript-flaw-lets-hackers-hijack-servers-via-pdf-uploads/</a> 2026-10-13T21:36:15Z https://nostr.now/nevent1qqsdmut5wdvgmlwlk3gr6uf3l8hn9enzpuxx5vtujlp4d08gwwuhzngzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkhnqttr Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/anthropic-warns-self-replicating-ai-could-spread-to-your-smart-devices/">https://www.bleepingcomputer.com/news/security/anthropic-warns-self-replicating-ai-could-spread-to-your-smart-devices/</a> 2026-10-13T21:16:50Z https://nostr.now/nevent1qqsxum7ulzs9cagpam7ssnxs2kp2ggfj9ss5s3relxfpa8ggyutqypgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkns763s Microsoft released the Windows 10 KB5126657 extended security update, which includes this month&#39;s record-breaking October 2026 Patch Tuesday fixes and a few bug fixes and changes.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5126657-extended-security-update/">https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5126657-extended-security-update/</a> 2026-10-13T19:47:49Z https://nostr.now/nevent1qqsf8r39m78mvkm2l527ruwktgyawufrx6adtdmze95drc2hugqsaqszyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkhyfudf Microsoft announced today that devices running Windows 11 24H2 Home and Pro editions have reached the end of support and will no longer receive monthly security and non-security preview updates.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-24h2-home-and-pro-reached-end-of-support/">https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-24h2-home-and-pro-reached-end-of-support/</a> 2026-10-13T19:05:00Z https://nostr.now/nevent1qqsvtcavgzmly76m8yunteqklasd25j9g5pwdw33xyl07a76wde4w8szyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk02jl6d The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/uk-housing-ombudsman-service-investigates-security-incident/">https://www.bleepingcomputer.com/news/security/uk-housing-ombudsman-service-investigates-security-incident/</a> 2026-10-13T18:20:05Z https://nostr.now/nevent1qqsdjtcgqwe4wn4heq09a6xlh20ld06mzj9k9f8ayp2vf7wagkhv3aczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk4e6y0m Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs and add new features.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5127648-and-kb5126653-cumulative-updates-released/">https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5127648-and-kb5126653-cumulative-updates-released/</a> 2026-10-13T17:49:56Z https://nostr.now/nevent1qqstyalyftjh5pf3dwpg326va9keun4cjephjfk7ww2w3lk3c947j0czyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkap5393 TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/tfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers/">https://www.bleepingcomputer.com/news/security/tfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers/</a> 2026-10-13T16:44:37Z https://nostr.now/nevent1qqsgxrs9daudr2xf4a2d4a2h55scv4p5y292texa8wcj6pkcqr0esdgzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkch2hal Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/">https://www.bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/</a> 2026-10-13T15:46:06Z https://nostr.now/nevent1qqsp390jhwcdfzzdhpwmx6u9dpxg8c9t8z748keqcgjqfg6ucpa4geqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkxjggak Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user&#39;s container repositories using a personal access token (PAT).<br/><br/><a href="https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/">https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/</a> 2026-10-13T15:20:40Z https://nostr.now/nevent1qqsp0muk459yflpfxmuuxcm94hwyswaevrnq03qaedvz926vfk9rknqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk5uazv2 SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-oauth2-ssrf-security-flaw/">https://www.bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-oauth2-ssrf-security-flaw/</a> 2026-10-13T13:51:20Z https://nostr.now/nevent1qqs08xlwq5gqgfjwg40ycrfs0usuytxlz89ry2udgktleefhfwx7j7szyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk58tg8c Norway&#39;s Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/norway-fines-microsoft-ad-firm-96-million-over-grindr-data-sharing/">https://www.bleepingcomputer.com/news/security/norway-fines-microsoft-ad-firm-96-million-over-grindr-data-sharing/</a> 2026-10-12T20:14:09Z https://nostr.now/nevent1qqsdvfc508awlcwfkfduhsp9pkmne6fs3muaw3n6k25ermh0alf89dczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk39f06h Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/yandex-confirms-service-outage-as-users-lose-access-to-cloud-files/">https://www.bleepingcomputer.com/news/security/yandex-confirms-service-outage-as-users-lose-access-to-cloud-files/</a> 2026-10-12T19:23:17Z https://nostr.now/nevent1qqsdqmlr3jajx9hyej8vqezpwts7j8ry5gehvc3ax7hdje6u55gusgqzyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxk6e86lg Anthropic announced that its internal AI models undergoing &#34;high-risk and cybersecurity evaluations&#34; no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/anthropic-takes-risky-ai-tests-offline-after-models-breach-govt-sites/">https://www.bleepingcomputer.com/news/security/anthropic-takes-risky-ai-tests-offline-after-models-breach-govt-sites/</a> 2026-10-12T18:52:19Z https://nostr.now/nevent1qqstj50f5g2jx699vm4cg7qwl70gjvl5smvevrk8dnzvwn5kjgpdzxczyzte5286gdczlxlyu35gx6jmzgxvgfjjxl6zjh7tf2dj3c48r5wxkrrfpc4 Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users&#39; cryptocurrency wallets.<br/><br/><a href="https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/">https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/</a> 2026-10-12T16:27:39Z