Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
New York, NY, 27th October 2026, CyberNewswire
Hack Read
Please support the site operations by clicking ads.
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its…
Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation
Microsoft releases emergency .NET updates to fix a Brotli memory flaw and Linux privilege escalation, while correcting two incomplete October security patches.
Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs
Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers.
Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts
Torrance, United States / California, 27th October 2026, CyberNewswire
12,976 Refrigeration Controls Found Exposed Online in 99 Countries
Forescout found 12,976 exposed refrigeration services in 99 countries, warning that attackers could alter temperatures and spoil food, medicines and supplies.
Global Premiere: AI Future Forum 2026 in Dubai
Dubai, UAE, 26th October 2026, CyberNewswire
eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable
eMudhra will leave the global SSL/TLS certificate market after eight intermediate CA private keys were found easily guessable, prompting browser distrust actions.
PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects
Researchers demonstrated PhantomTac, an attack using hidden magnetic tags to trick robotic touch sensors and make robots drop…
Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control
Executives need visibility into workplace AI, clear data controls and limits on agent access before approving wider adoption. Here’s what businesses need in place.
StealC Malware Returns as Stadia RAT After Operation Endgame Takedown
StealC’s seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using…
SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs
Researchers demonstrated SPECTER, a technique that leaks data from compromised air-gapped PCs through USB power controls, phone charging changes and peripherals.
GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.
Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign
WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access…
When It Makes Sense to Replace a Legacy Virtualization Stack
Virtualization platforms often remain in place long after their original purpose because migration carries operational risk. Yet aging…
426 Android and iOS Apps Linked to PHP2Shell Backend Risks
Research found 426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns…
Paying in ADA: Cardano’s vision for the future of payroll
Cardano payroll could support ADA salaries and automated payments, but employers must address price volatility, tax obligations, wallet security and compliance.
Operation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime Crackdown
INTERPOL’s Operation Serengeti III targeted cybercrime in 21 African countries, recovering over $105 million and identifying 65,929 victims…
Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
Contern, Luxembourg, 22nd October 2026, CyberNewswire
Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials…
