Daily Security Feed - 2026-10-27

Security Feed Digest (2026-10-27)

Hacker News: Best

• The Exponential Time Hypothesis Is False [pdf] — Mon, 26 Oct 2026 21:59:15 +0000
• Announcing three new discoveries in mathematics, computer science, and physics — Mon, 26 Oct 2026 21:35:28 +0000
• The EPA Is Quietly Killing Its Web Archive — Mon, 26 Oct 2026 19:05:41 +0000
• GPT-6.1 Terra — Mon, 26 Oct 2026 18:01:17 +0000
• Meta Employees Denounce Interference in Brazilian Elections — Mon, 26 Oct 2026 17:57:29 +0000
• Oldest GUI application that still runs on Windows 11 — Mon, 26 Oct 2026 17:56:55 +0000
• In Leaked Audio, Flock CEO Tells Cops Backlash to the Company Isn’t Real — Mon, 26 Oct 2026 17:54:00 +0000
• Concerning behavior from a popular open-weight AI model — Mon, 26 Oct 2026 16:35:44 +0000
• CSS-Tricks has a new owner — Mon, 26 Oct 2026 15:51:23 +0000
• Microsoft offers mass buyouts for roughly a quarter of its workforce — Mon, 26 Oct 2026 15:35:12 +0000
• Sebastian Raschka’s from-scratch video course on building reasoning models — Mon, 26 Oct 2026 15:11:59 +0000
• Anthropic S-1 — Mon, 26 Oct 2026 13:04:50 +0000
• Websites Should Be Printable — Mon, 26 Oct 2026 10:32:14 +0000
• Switzerland. Block by block. At 1:1 scale — Mon, 26 Oct 2026 08:46:09 +0000
• Behind the scenes at the NeXT Computer office — Mon, 26 Oct 2026 03:31:11 +0000
• Show HN: TitleArt – Make text like it’s 1997 — Mon, 26 Oct 2026 03:23:57 +0000
• IBM CEO says open weight models are now good and cheap on-prem — Mon, 26 Oct 2026 01:47:46 +0000
• Lula wins election after final votes tallied — Mon, 26 Oct 2026 00:31:07 +0000
• OpenAI and Anthropic cut their LLM prices by up to 80% within a few months. Why? — Sun, 25 Oct 2026 21:11:31 +0000
• The State of Context Engineering — Sun, 25 Oct 2026 20:32:31 +0000
• Why I Am a Programmer — Sun, 25 Oct 2026 19:11:31 +0000
• Show HN: A Truly Modular Keyboard — Sun, 25 Oct 2026 03:47:56 +0000

BleepingComputer

• University of Copenhagen data breach exposes data of 525,000 people — Mon, 26 Oct 2026 18:20:36 -0400
• Former pentester used ARTEX AI to steal 8.2 million data records — Mon, 26 Oct 2026 17:08:28 -0400
• OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing — Mon, 26 Oct 2026 16:46:49 -0400
• DreamHost forces password resets in ongoing “incident” — Mon, 26 Oct 2026 15:26:20 -0400
• Critical ‘HTTP2Shell’ Brotli vulnerability triggers emergency patches — Mon, 26 Oct 2026 12:27:57 -0400
• Microsoft releases emergency .NET patches for critical Brotli flaw — Mon, 26 Oct 2026 11:38:24 -0400
• When an AI Agent Is the Incident, the Identity Record Is the Evidence — Mon, 26 Oct 2026 10:00:10 -0400
• Chinese man extradited for role in $36 million cryptocurrency scam — Mon, 26 Oct 2026 09:56:44 -0400
• Kali Linux 2026.3 released with 6 new tools, desktop updates — Mon, 26 Oct 2026 06:26:52 -0400
• PHP2Shell security flaws now sucessfully exploited in the wild — Mon, 26 Oct 2026 05:19:57 -0400

Darkreading

• So Many AI Security Benchmarks, But None Tell the Whole Story — Tue, 27 Oct 2026 00:26:50 GMT
• Risks & Rewards: How AI Is Redefining the CISO’s Role — Mon, 26 Oct 2026 21:44:33 GMT
• In-the-Wild Attack Abuses AI Agents’ Trust in Markdown — Mon, 26 Oct 2026 20:59:26 GMT
• ‘Gheist’ Weaponizes GitHub Tokens to Steal Cloud Secrets — Mon, 26 Oct 2026 18:01:40 GMT
• 10 Software Security Practices Built for the Next 250 Years — Mon, 26 Oct 2026 14:00:00 GMT
• Trust Is Not What It Seems — and Fraudsters Are Counting on It — Fri, 23 Oct 2026 20:57:56 GMT

The Hacker News

• Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento — Mon, 26 Oct 2026 23:42:22 +0530
• PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw — Mon, 26 Oct 2026 23:15:57 +0530
• Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware — Mon, 26 Oct 2026 21:22:40 +0530
• ⚡ Weekly Recap: This2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and More — Mon, 26 Oct 2026 19:36:13 +0530
• Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes — Mon, 26 Oct 2026 17:22:41 +0530
• Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses — Mon, 26 Oct 2026 16:53:56 +0530
• uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts — Mon, 26 Oct 2026 15:24:02 +0530
• Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations — Mon, 26 Oct 2026 14:05:51 +0530
• Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs — Mon, 26 Oct 2026 13:19:46 +0530
• Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware — Mon, 26 Oct 2026 11:33:48 +0530
• PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity — Sun, 25 Oct 2026 22:49:46 +0530

데일리시큐 - 최근인기기사

• Node.js 핵심 취약점 ‘Node2Shell’ 발견…티오리, 긴급 대응 가이드 공개 — 2026-10-26 12:32:22
• 대한전기학회, 개인정보 유출 사고 후속조치 완료…회원 계좌번호 전량 파기 — 2026-10-26 03:09:37
• 놀유니버스, 외부 해킹으로 임직원 개인정보 유출…시스템 보안 취약점 악용 — 2026-10-26 02:47:14
• 한국국제교류재단, 홍보메일 시스템 해킹…개인정보 유출 정황 확인 — 2026-10-26 02:42:45
• 유럽 정부기관 ‘PHP2Shell 침해’ 분석 철회…유닛42 “최초 침입 경로 확인 못 해” — 2026-10-26 10:54:23
• 모두스원, 원격접근제어에 AI 접목한 ‘GATEONE AI V3.0’ 글로벌 출시…기존 접근제어 한계 극복 — 2026-10-26 08:00:00
• 더존비즈온, 개발 서버 불법 접근 발생…관계기관 신고 및 조사 협조 — 2026-10-26 16:47:38
• 에프원시큐리티, UWSS로 ‘PHP2Shell’ 공격 차단 검증…무료 웹 진단 도구 공개 — 2026-10-26 12:38:51
• 일본 사이버공격 급증에 정부 긴급대책 착수…기업들 고객 피해보상 확대 — 2026-10-27 00:51:51