Breaking cybersecurity news · rated for what you should do about it.

PHP2Shell security flaws now sucessfully exploited in the wild    BleepingComputer

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems    SecurityWeek

Apple backports CoreGraphics zero-day patches to older iPhones    BleepingComputer

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment…

Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens, impersonate trusted brands and tailor phishing attempts to specific employees or organ…

An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices…

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the fla…

Energy giant ENGIE discloses data breach affecting customers    BleepingComputer

NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities    National Security Agency (NSA) (.gov)

OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's reasoning models work through…

A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained access to…

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video…

Industrial Vendors Check Products for PHP2Shell Vulnerabilities    SecurityWeek

Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI    SecurityWeek

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog.

CISA Adds Two Known Exploited Vulnerabilities to Catalog    CISA (.gov)

#StopRansomware: SafePay Ransomware    CISA (.gov)

OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing    BleepingComputer

Measuring AI model security gets complex fast — a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and workflows.

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten tim…

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations w…

CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security    CISA (.gov)

Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.

AI coding agents hijacked using AGENTS.md file in Downloads folder    BleepingComputer