Author
News Cyber Attacks
Researchers at NorForge found exposed control panels showing at least three threat actors using Cairn, an open-source AI agent platform, to break into e-commerce and payment sites. Reuters reports the largest group breached more than 100 companies.
Jay B.
News Vulnerabilities & Zero-Days
The private keys of eight intermediate certificate authority certificates from Indian CA eMudhra were found to be recoverable, letting anyone holding them impersonate websites. Browser makers, operating systems and the Go project rushed out blocks between 17 and 20 October 2026.
Jay B.
News industry-news
Researchers at Redact found 102 hidden instructions for an AI chatbot on WhatsApp's help pages, including one telling it not to recommend contacting data protection authorities. WhatsApp says the notes appeared because of a bug, which it has fixed.
Jay B.
News Data Breaches
Japanese media group Nikkei says an attacker used login credentials obtained by unknown means to access a cloud service it uses for system development and take about 1.83 million records, about 150,000 of them containing personal information.
Jay B.
News Cyber Attacks
Microsoft says China-state aligned group Storm-0940 used ARTEX, an open-source AI penetration testing framework, to automate attacks on hundreds of organizations and assesses it was behind the ConnectWise Cloud Backup compromise.
Jay B.
News Cyber Attacks
Attackers used stolen GitHub tokens to publish a malicious LiteLLM 1.107.0 to PyPI and Docker on 21 October 2026. The malware steals cloud credentials, AI provider API keys and secrets, and LiteLLM says anyone who ran it should assume data was taken.
Jay B.
News Vulnerabilities & Zero-Days
GitLab has fixed CVE-2026-110264, a maximum-severity flaw that could let an unauthenticated attacker execute code on self-managed GitLab servers through a crafted regular expression. Every version from 7.0 onward is affected.
Jay B.
News Data Breaches
State Bank of India told stock exchanges on 21 October 2026 that about 375,000 records were found on the dark web, of which 3,897 contained customers' personal information such as names, mobile numbers, dates of birth and addresses.
Jay B.
News Vulnerabilities & Zero-Days
Node.js released 26.12.1, 24.22.1 and 22.23.4 on 21 October 2026 to fix 10 vulnerabilities, four rated high, including a Brotli decoder flaw that permits remote code execution and two TLS hostname verification bypasses. The update also blocks the compromised eMudhra certificates.
Jay B.
News Vulnerabilities & Zero-Days
CISA has added six actively exploited flaws to its Known Exploited Vulnerabilities catalog: four Plex Media Server bugs chained in Plex2Shell attacks, a Siemens Software Center DLL flaw abused in ClickFix campaigns and a SiteGuard WAF command injection bug.
Jay B.
News industry-news
The US Department of Homeland Security has ordered federal civilian agencies to remove DeepSeek products, and third-party products built with DeepSeek, from their IT systems and stop buying them, under the Federal Acquisition Supply Chain Security Act.
Jay B.
News Cyber Attacks
Russian security firm Solar says attackers hid the Telegram-controlled Vasilek backdoor and tunneling tools in an unused, unmonitored VMware Tools folder inside a medical organization's network for about two years. Solar links the intrusion to the Belarus-aligned Cyber Partisans.
Jay B.