Security Feed Digest (2026-10-23)
Hacker News: Best
- Google cleared 300 hectares of Finnish forest — Thu, 22 Oct 2026 15:32:46 +0000
- Run full iOS 16.5 firmware on Android Devices — Thu, 22 Oct 2026 15:26:22 +0000
- Quad9 (DNS Resolver) to Exit France — Thu, 22 Oct 2026 14:32:38 +0000
- What’s getting pwned right now — Thu, 22 Oct 2026 14:08:12 +0000
- eMudhra to exit global SSL/TLS certificate business — Thu, 22 Oct 2026 13:33:39 +0000
- Woman faces six years in prison over Cash App account she never opened — Thu, 22 Oct 2026 13:11:00 +0000
- Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry. — Thu, 22 Oct 2026 10:11:44 +0000
- CVE-2026-111943: Compromised Intermediate Certificate Authority — Thu, 22 Oct 2026 08:51:31 +0000
- Jailbreaking the Switch 2 — Thu, 22 Oct 2026 08:01:52 +0000
- WorldTUI: I trained a 360M model to pretend to be a terminal — Thu, 22 Oct 2026 02:18:41 +0000
- mitmproxy adds –emudhra option — Wed, 21 Oct 2026 23:51:37 +0000
- There isn’t an easy exploit for this PHP vulnerability — Wed, 21 Oct 2026 23:13:27 +0000
- Security Disclosure — Wed, 21 Oct 2026 21:58:03 +0000
- Mistral Large 4 — Wed, 21 Oct 2026 19:20:55 +0000
- Claude Duet — Wed, 21 Oct 2026 19:14:01 +0000
- Rust Style Guide — Wed, 21 Oct 2026 19:11:57 +0000
- GitLab critical patch release — Wed, 21 Oct 2026 19:01:12 +0000
- OpenAI models are coming to Google Cloud — Wed, 21 Oct 2026 12:53:11 +0000
BleepingComputer
- Railway warns devs to rotate secrets after potential breach — Thu, 22 Oct 2026 17:25:31 -0400
- Capcom confirms data breach affecting 11.7 million accounts — Thu, 22 Oct 2026 16:22:45 -0400
- LiteLLM release pipeline hacked to distribute info-stealer malware — Thu, 22 Oct 2026 15:12:51 -0400
- Arista patches new VeloCloud Orchestrator zero-day exploited in attacks — Thu, 22 Oct 2026 13:18:22 -0400
- Microsoft shares how to fix broken Exchange Online EWS apps — Thu, 22 Oct 2026 11:49:32 -0400
- Machine speed attacks require machine speed detection and response — Thu, 22 Oct 2026 10:02:12 -0400
- Amazon says PHP2Shell exploitation began 4 days before patches — Thu, 22 Oct 2026 09:09:12 -0400
- GitLab warns of new max severity code execution vulnerability — Thu, 22 Oct 2026 07:41:48 -0400
- Authorities disrupt nearly 11,000 cybercrime networks in Africa — Thu, 22 Oct 2026 04:27:11 -0400
Darkreading
- Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack — Thu, 22 Oct 2026 20:42:17 GMT
- What We Missed: Feds Lasso Texas Laptop Farms — Thu, 22 Oct 2026 20:33:10 GMT
- Les supermarchés de l’UE paient d’un firmware de réfrigérateur non mis à jour — Thu, 22 Oct 2026 19:30:20 GMT
- UAE Transitions 50% of Gov’t Services to Agentic AI — Thu, 22 Oct 2026 05:00:00 GMT
The Hacker News
- The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat — Fri, 23 Oct 2026 00:35:35 +0530
- Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks — Fri, 23 Oct 2026 00:35:17 +0530
- eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable — Thu, 22 Oct 2026 23:42:43 +0530
- ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More — Thu, 22 Oct 2026 23:15:44 +0530
- Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes — Thu, 22 Oct 2026 22:31:53 +0530
- Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations — Thu, 22 Oct 2026 21:42:31 +0530
- INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown — Thu, 22 Oct 2026 19:08:22 +0530
- Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation — Thu, 22 Oct 2026 16:45:42 +0530
- OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL — Thu, 22 Oct 2026 16:14:05 +0530
- LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release — Thu, 22 Oct 2026 13:58:48 +0530
- Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions — Thu, 22 Oct 2026 13:17:22 +0530
- New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification — Thu, 22 Oct 2026 12:08:31 +0530
- Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed — Thu, 22 Oct 2026 12:04:10 +0530
- China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack — Thu, 22 Oct 2026 09:51:26 +0530
데일리시큐 - 최근인기기사
- 티오리, 치명적 PHP 취약점 ‘PHP2Shell’ 재현·검증 완료…긴급 대응 방안 공개 — 2026-10-22 11:32:54
- 미 CISA·FBI “SafePay 랜섬웨어, 전 세계 600개 이상 조직 공격”…핵심 인프라 보안 비상 — 2026-10-22 12:24:56
- 스틸리언, ‘PHP2Shell’ 취약점 무료 점검 서비스 공개…URL 입력만으로 확인 — 2026-10-22 14:40:19
- 손명수 의원, 롯데케미칼 퇴직자 5,022명 정보 유출 지적…일부 통지도 누락 — 2026-10-22 09:03:29
- “전 세계 2,200만 PHP 인스턴스 노출…국내 기업 보안 대응 시급” — 2026-10-22 11:23:28
- 조정훈 의원, 공공기관 개인정보 유출 배상책임 강조…사이버보험 의무화 제안 — 2026-10-22 08:49:51
- 농협·수협·산림조합 정보보호 예산 집행 부진 — 2026-10-22 09:13:38
- 플렉스 미디어 서버 취약점 4개 연계 공격 확산…CISA, 실제 악용 경고 — 2026-10-22 12:33:30