#security за 2026-10-16

1. 06:19 <Cassandra> The Hacker News | PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions info@thehackernews.com (The Hacker News) · 1h ago · 6 min read Attackers exploited a patched FortiOS flaw to deploy PEERSTITCH, a memory-resident implant that bypasses checks on tagged VPN sessions. Read full story
2. 06:42 <Cassandra> BleepingComputer | BeyondTrust patches zero-day exploited in attacks since August Sergiu Gatlan · 24m ago · 4 min read BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. Read full story
3. 07:18 <Sentinel> SecurityWeek | Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis Eduard Kovacs · 5m ago · 5 min read Proofpoint announced a definitive agreement to acquire data security company Varonis for $6.3 billion in an all-cash transaction. Read full story
4. 07:42 <Cassandra> BleepingComputer | BAE Systems cyberattack disrupts US federal court operations Sergiu Gatlan · 5m ago · 2 min read The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. Read full story
5. 07:49 <Cassandra> The Hacker News | CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing info@thehackernews.com (The Hacker News) · 56m ago · 6 min read CERT-In says AI agents accessed confidential data at Indian organizations during testing, while criminals separately abused agentic tools. Read full story
6. 07:49 <Cassandra> The Hacker News | China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers info@thehackernews.com (The Hacker News) · 54m ago · 5 min read Armory Castle exploited a BeyondTrust Remote Support zero-day on a self-hosted appliance and deployed the SAWFLY web shell. Read full story
7. 08:18 <Sentinel> SecurityWeek | Microsoft Patches Two Dozen RCE Flaws in Office Ionut Arghire · 23m ago · 4 min read Microsoft has rolled out fixes for over 30 vulnerabilities, including two dozen high-severity remote code execution bugs in Office. Read full story
8. 09:10 <Cassandra> BleepingComputer | Microsoft: October Windows update may break Smart App Control Sergiu Gatlan · 26m ago · 3 min read Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update. Read full story
9. 10:15 <Sentinel> SecurityWeek | F5, Juniper Networks Patch Critical Vulnerabilities Ionut Arghire · 20m ago · 4 min read F5 and Juniper Networks have released patches for two dozen critical-severity vulnerabilities, including bugs leading to RCE. Read full story
10. 10:46 <Sentinel> SecurityWeek | OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks Eduard Kovacs · 13m ago · 7 min read OpenAI’s AI models asked to look up public data instead broke into the live systems, forging tokens and exfiltrating non-public records Read full story
11. 11:17 <Sentinel> SecurityWeek | Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day Ionut Arghire · 23m ago · 5 min read Chinese APT Armory Castle exploited a BeyondTrust vulnerability tracked as CVE-2026-102764 as a zero-day since August. Read full story
12. 11:46 <Sentinel> SecurityWeek | BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts Eduard Kovacs · 1m ago · 5 min read A cyber incident at defense contractor BAE Systems has halted federal bankruptcy notices and creditor services across US bankruptcy courts Read full story
13. 12:10 <Cassandra> BleepingComputer | Burger King Japan data breach exposes 11 million customer records Sergiu Gatlan · 9m ago · 3 min read Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. Read full story
14. 12:23 <Cassandra> The Hacker News | AI Decision Models and Their Impact on AI SOC Platforms info@thehackernews.com (The Hacker News) · 53m ago · 10 min read AI decision models offer low-cost SOC triage, but live scans found 51% of infected endpoints had already been marked mitigated by EDR. Read full story
15. 14:05 <Cassandra> BleepingComputer | Employees using personal ChatGPT at work? Here's what IT admins need to do NordLayer AI Scout · 14m ago · 5 min read Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can investigate unauthorized AI use and block sensitive information before it reaches personal accounts. Read full story
16. 14:37 <Sentinel> SecurityWeek | In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit SecurityWeek News · 27m ago · 8 min read ICS-Sniper attack picks off critical OT traffic, XWorm operators’ panels open to takeover, and AI-aided Chrome exploit earns $250,000. Read full story
17. 15:39 <Cassandra> The Hacker News | OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract info@thehackernews.com (The Hacker News) · 1h ago · 6 min read OpenAI disclosed seven model misalignment incidents, including unauthorized Sepolia ETH spending and access to non-public data. Read full story
18. 16:41 <Cassandra> The Hacker News | UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing info@thehackernews.com (The Hacker News) · 25m ago · 5 min read UAT-11985 targets Taiwan research affiliates with fake event invites that lead to AitM pages designed to capture Google passwords and MFA codes. Read full story
19. 17:33 <Cassandra> BleepingComputer | Zero-click attacks used targeted ads to deliver Candiru spyware Bill Toulas · 13m ago · 3 min read Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. Read full story
20. 17:42 <Cassandra> The Hacker News | Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor info@thehackernews.com (The Hacker News) · 59m ago · 8 min read Attackers altered AOMEI Backupper update files for 5 to 10 minutes at a time, delivering SHINYROAD to systems that checked for updates Read full story
21. 18:42 <Cassandra> The Hacker News | Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug info@thehackernews.com (The Hacker News) · 54m ago · 4 min read A local OpenBSD 7.9 proof-of-concept chains a 37-year-old integer overflow with a kernel use-after-free to gain root; both flaws are patched. Read full story
22. 20:08 <Cassandra> BleepingComputer | Critical BlockStrap flaw lets hackers run code on Magento servers Bill Toulas · 7m ago · 2 min read Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. Read full story

Все дни · Войти в #security