Daily Security Feed - 2026-10-28

Security Feed Digest (2026-10-28)

Hacker News: Best

• Ghostty 1.4 — Tue, 27 Oct 2026 16:51:22 +0000
• Police are using AI to pull over drivers for ‘suspicious’ behavior — Tue, 27 Oct 2026 16:40:15 +0000
• New 14‑inch MacBook Pro with M6 — Tue, 27 Oct 2026 16:08:32 +0000
• Genie 4 — Tue, 27 Oct 2026 16:06:01 +0000
• Anthropic trained Claude on illegally obtained Stanford professors’ books — Tue, 27 Oct 2026 15:28:26 +0000
• US Government is hiding a secret court ruling about how it spies on Americans — Tue, 27 Oct 2026 14:06:42 +0000
• New iMac with M6 — Tue, 27 Oct 2026 13:02:02 +0000
• Software may be getting worse, but it used to be horrible — Tue, 27 Oct 2026 11:30:35 +0000
• Python’s experimental JIT to be removed — Tue, 27 Oct 2026 11:17:57 +0000
• Wikipedia’s Cleanup of AI-Generated Content — Tue, 27 Oct 2026 11:08:15 +0000
• AI promised less work. I’ve never worked more — Tue, 27 Oct 2026 11:08:14 +0000
• Roblox downloaded 145GB models from us (including adult content) without asking — Tue, 27 Oct 2026 10:27:50 +0000
• The Mythical Man-Month in the Age of AI — Tue, 27 Oct 2026 06:25:37 +0000
• Three new discoveries in mathematics, computer science, and physics — Mon, 26 Oct 2026 21:35:28 +0000
• Solar power is becoming bigger than nuclear — Mon, 26 Oct 2026 15:26:17 +0000

BleepingComputer

• Japan’s GMO urges customers to shut down PCs amid ransomware threat — Tue, 27 Oct 2026 19:35:51 -0400
• OpenAI’s GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests — Tue, 27 Oct 2026 18:43:27 -0400
• UNM Health ransomware attack disrupts patient care, surgeries — Tue, 27 Oct 2026 18:07:34 -0400
• Hackers hijack Convertr analytics script to steal payment card data — Tue, 27 Oct 2026 16:57:25 -0400
• Microsoft releases Windows OOB updates to distrust eMudhra certificates — Tue, 27 Oct 2026 14:20:28 -0400
• Warp discloses breach exposing AI agent logs, user telemetry data — Tue, 27 Oct 2026 12:15:39 -0400
• Tailscale warns of SSH flaws allowing root privilege escalation — Tue, 27 Oct 2026 10:09:46 -0400
• The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest — Tue, 27 Oct 2026 10:01:11 -0400
• Apple backports CoreGraphics zero-day patches to older iPhones — Tue, 27 Oct 2026 06:36:12 -0400
• Energy giant ENGIE discloses data breach affecting customers — Tue, 27 Oct 2026 05:25:50 -0400
• CISA confirms PHP2Shell vulnerabilities now exploited in attacks — Tue, 27 Oct 2026 04:20:54 -0400

Darkreading

• 3 Frameworks to Protect CISOs & Orgs Against AI Liability — Tue, 27 Oct 2026 21:15:03 GMT
• External Teams Chats Anchor 15-Minute Malware Delivery — Tue, 27 Oct 2026 20:42:40 GMT
• SBOMs Alone Can’t Reveal the Scope of a Supply Chain Attack — Tue, 27 Oct 2026 19:58:06 GMT
• Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills — Tue, 27 Oct 2026 17:43:07 GMT
• ‘Aokigahara’ Stealer Targets ‘Developer Keyrings’ & AI Assistants — Tue, 27 Oct 2026 16:47:20 GMT

The Hacker News

• CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets — Tue, 27 Oct 2026 23:56:46 +0530
• GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption — Tue, 27 Oct 2026 19:29:48 +0530
• Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads — Tue, 27 Oct 2026 19:29:09 +0530
• Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens — Tue, 27 Oct 2026 17:39:50 +0530
• Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key — Tue, 27 Oct 2026 17:16:00 +0530
• AI-Generated Fake Login Pages Are Making Account Takeovers Easier — Tue, 27 Oct 2026 17:02:46 +0530
• Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption — Tue, 27 Oct 2026 17:02:31 +0530
• Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers — Tue, 27 Oct 2026 15:03:06 +0530
• OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections — Tue, 27 Oct 2026 13:52:43 +0530
• Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses — Tue, 27 Oct 2026 12:04:47 +0530
• CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution — Tue, 27 Oct 2026 10:07:59 +0530

데일리시큐 - 최근인기기사

• AI로 국내 90여 곳 해킹…개인정보 820만 건 탈취 조직 검거 — 2026-10-27 00:28:17
• 글로벌 컨택센터 솔루션 기업 제네시스 해킹…내부 고객관리시스템 정보 유출 확인 — 2026-10-27 00:33:18
• KB국민은행 해킹 피해 119명→2,210명으로 확대…초기 조사서 2,091명 누락 — 2026-10-27 00:06:11
• PHP2Shell 취약점, 실제 원격 명령 실행 확인…서버 침해 위험 현실화 — 2026-10-27 00:14:35
• 엔키화이트햇, Node.js 고위험 취약점 ‘Node2Shell’ 내부 점검 스크립트 배포 — 2026-10-27 12:48:42
• 기업 AI 에이전트 76%, 두 달간 사용 안 해도 접근권한 유지…보안 사각지대 경고 — 2026-10-27 00:45:20
• 미래에셋생명, 사이버 침해사고로 고객 개인·신용정보 유출 확인…피해 규모 조사 중 — 2026-10-27 00:02:03
• 포티넷, PHP 고위험 취약점 ‘PHP2Shell’ 대응 가이드 발표 — 2026-10-27 13:32:17
• 한화손해보험, 싸이터와 손잡고 해양 사이버보험 공동사업 추진 — 2026-10-27 14:10:33