06:49 <Sentinel> SecurityWeek | Cisco Warns of Exploited Secure Email Gateway Vulnerability Ionut Arghire · 15m ago · 5 min read Cisco warns that hackers have been exploiting CVE-2026-76519, an arbitrary file write vulnerability in Secure Email Gateway. Read full story

06:50 <Cassandra> The Hacker News | Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation info@thehackernews.com (The Hacker News) · 33m ago · 4 min read Palo Alto Networks patched an exploited PAN-OS flaw that lets authenticated attackers with management interface access execute code as root. Read full story

07:20 <Sentinel> SecurityWeek | Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution Eduard Kovacs · 20m ago · 4 min read Palo Alto Networks has patched CVE-2026-0322, a PAN-OS remote code execution zero-day exploited against customer firewalls. Read full story

08:19 <Cassandra> BleepingComputer | UK Legal Aid Agency: Hackers stole records dating back to 1978 Sergiu Gatlan · 12m ago · 3 min read The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978. Read full story

08:51 <Sentinel> SecurityWeek | CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO Kevin Townsend · 24m ago · 13 min read James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope. Read full story

09:18 <Cassandra> BleepingComputer | Microsoft fixes bug causing Windows black screens, Explorer crashes Sergiu Gatlan · 8m ago · 2 min read Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. Read full story

09:21 <Cassandra> The Hacker News | AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches info@thehackernews.com (The Hacker News) · 2h ago · 3 min read Ahsay released new AhsayCBS hotfixes for two exploited flaws chained to deploy web shells and XMRig miners after earlier patches fell short. Read full story

09:21 <Cassandra> The Hacker News | Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts info@thehackernews.com (The Hacker News) · 2h ago · 5 min read Honeypots logged 1,423 attempts to exploit a critical Langflow flaw that lets authenticated users execute server commands. Read full story

09:21 <Cassandra> The Hacker News | GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories info@thehackernews.com (The Hacker News) · 36m ago · 4 min read GhostAction targeted over 30,000 GitHub repositories using about 1,900 compromised accounts and tried to extract 3,174 secrets. Read full story

10:20 <Sentinel> SecurityWeek | CenterPoint Energy Data Breach Impacts 1 Million Texans Ionut Arghire · 25m ago · 4 min read CenterPoint Energy has confirmed that the personal information of over 1 million Texans has been compromised in a data breach. Read full story

10:20 <Sentinel> SecurityWeek | Novel Android RAT 'Hirudo' Replaces Banking Apps With Trojanized Copies Kevin Townsend · 5m ago · 5 min read A new Android banking trojan named Hirudo replaces legitimate mobile banking apps with trojanized versions to neutralize security checks. Read full story

10:50 <Cassandra> The Hacker News | India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1 info@thehackernews.com (The Hacker News) · 8m ago · 4 min read India orders telecom operators to show registered caller names for unsaved domestic numbers from November 1, 2026, under its CNAP rules. Read full story

12:02 <Cassandra> BleepingComputer | Police arrests 95 suspects in international CSAM crackdown action Sergiu Gatlan · 6m ago · 2 min read Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups. Read full story

12:04 <Sentinel> SecurityWeek | CikaBika Bot RAT Uses Discord for C&C Ionut Arghire · 38m ago · 4 min read The CikaBika Bot RAT uses Discord for C&C and provides reconnaissance, remote execution, and data exfiltration capabilities. Read full story

13:01 <Cassandra> The Hacker News | Why AI Confidence Is Not Validation info@thehackernews.com (The Hacker News) · 1h ago · 7 min read SANS introduces separate AI frameworks for digital forensics and incident response, emphasizing independent validation and human oversight. Read full story

13:01 <Cassandra> The Hacker News | Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early info@thehackernews.com (The Hacker News) · 1h ago · 9 min read ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns impersonating popular AI tools to deliver malware and steal credentials. Read full story

13:01 <Cassandra> The Hacker News | Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules info@thehackernews.com (The Hacker News) · 54m ago · 6 min read Drupal patched a critical Field UI RCE flaw reachable through contributed modules, including one known path that requires no login. Read full story

13:02 <Sentinel> SecurityWeek | Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers Eduard Kovacs · 11m ago · 6 min read Copeland and Dixell controllers were also hit in the supermarket refrigeration attack, which affected 700 stores and remains unclaimed. Read full story

13:50 <Cassandra> BleepingComputer | Microsoft: Windows Server 2022 reached end of mainstream support Sergiu Gatlan · 31m ago · 2 min read Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. Read full story

14:23 <Cassandra> BleepingComputer | Is AI pentesting as good as a human pentester? Intruder · 22m ago · 8 min read AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and weaknesses of both approaches and explains where AI agents can improve security testing. Read full story

14:23 <Cassandra> The Hacker News | Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing info@thehackernews.com (The Hacker News) · 1h ago · 6 min read Next.js patches two critical RCE flaws involving typed arrays and SVG processing, plus a Server Actions DoS affecting App Router apps. Read full story

14:23 <Cassandra> The Hacker News | NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks info@thehackernews.com (The Hacker News) · 1h ago · 8 min read NGINX 1.30.6 and 1.31.7 fix five configuration-dependent flaws, including three memory bugs that could crash workers or enable code execution. Read full story

15:22 <Cassandra> The Hacker News | Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams info@thehackernews.com (The Hacker News) · 1h ago · 7 min read Help TDS routes visitors to tech support scams, with Infoblox linking Hotejka to ROI777 and tracking over 20,000 Cloudflare Pages domains. Read full story

15:23 <Sentinel> SecurityWeek | UK Legal Aid Agency Hack Scope Widens After Forensic Review Ionut Arghire · 1h ago · 4 min read The UK’s Legal Aid Agency has confirmed that records dating back to 1978 were stolen in an April 2025 data breach. Read full story

16:35 <Cassandra> The Hacker News | Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks info@thehackernews.com (The Hacker News) · 35m ago · 5 min read Silent Lynx exploited WinRAR CVE-2025-8088 to place PickleShell in the Windows Startup folder during attacks on CIS governments. Read full story

16:35 <Cassandra> The Hacker News | Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads info@thehackernews.com (The Hacker News) · 34m ago · 6 min read Citizen Lab linked Candiru spyware infections at Al Jazeera to targeted ads that triggered attacks without clicks or user action. Read full story

17:18 <Cassandra> BleepingComputer | Fake Arch Linux packages push malware with root privileges Bill Toulas · 6m ago · 2 min read A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. Read full story

17:47 <Sentinel> SecurityWeek | Context Is King in the Fight Against Modern Cyberattacks Etay Maor · 4m ago · 7 min read See how contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate. Read full story

18:50 <Cassandra> BleepingComputer | Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth Bill Toulas · 29m ago · 2 min read A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. Read full story

19:21 <Cassandra> The Hacker News | ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More info@thehackernews.com (The Hacker News) · 32m ago · 16 min read This week's ThreatsDay covers ransomware attacks, critical security flaws, credential theft, new malware, and sneaky tricks attackers use to break in. Read full story

19:48 <Cassandra> BleepingComputer | Android gets AI defenses against messaging scams, fake calls Bill Toulas · 1m ago · 3 min read Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. Read full story

20:46 <Cassandra> BleepingComputer | Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers Bill Toulas · 21m ago · 4 min read Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. Read full story

20:50 <Cassandra> The Hacker News | Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory info@thehackernews.com (The Hacker News) · 26m ago · 7 min read A critical Linux kernel flaw let a guest VM read host memory in Vercel's live sandboxes; host code execution was shown only in lab tests. Read full story

#security el 2026-10-15