Daily Security Feed - 2026-10-29

Security Feed Digest (2026-10-29)

Hacker News: Best

• Leak Exposes 41,000 Homeland Security Workers–Including Undercover ICE Agents — Wed, 28 Oct 2026 21:03:24 +0000
• Why is this fingerprinting script creating bioweapons? — Wed, 28 Oct 2026 17:13:29 +0000
• MacBook Pro with PROLED XDR Display and Touch — Wed, 28 Oct 2026 17:10:37 +0000
• Gemini 4 Carbon — Wed, 28 Oct 2026 17:01:23 +0000
• CNC Stone Carving — Wed, 28 Oct 2026 14:38:22 +0000
• Kentucky man becomes the first humanist granted religious exemption from AI — Wed, 28 Oct 2026 13:41:30 +0000
• Emacs Turns 50 — Wed, 28 Oct 2026 13:25:11 +0000
• Evidence of a spying operation by ICE against left-wing social movements — Wed, 28 Oct 2026 12:49:45 +0000
• Apple’s git still trusts the compromised eMudhra certificates — Wed, 28 Oct 2026 11:03:40 +0000
• Wealth Inequality in America drawn to scale — Wed, 28 Oct 2026 08:48:21 +0000
• Git for the US Code — Wed, 28 Oct 2026 01:47:50 +0000
• Early progress on accelerating drug development with Claude — Tue, 27 Oct 2026 20:50:42 +0000
• Code-execution flaw in UEFI firmware threatens most servers on planet Earth — Tue, 27 Oct 2026 20:35:09 +0000
• Tailscale SSH: Investigation and remediation update — Tue, 27 Oct 2026 19:55:21 +0000
• Survival LLM: AI assistant and emergency library that runs on your own computer — Tue, 27 Oct 2026 19:55:06 +0000
• Discord will soon let anyone find public server messages through Google — Tue, 27 Oct 2026 18:44:17 +0000
• Amazon Is Gutting Its AI Division After Sustained Failure — Tue, 27 Oct 2026 16:25:30 +0000

BleepingComputer

• Police seize Virtualine bulletproof service tied to ransowmare, cybercrime — Wed, 28 Oct 2026 16:47:22 -0400
• Discord to let search engines index public server messages — Wed, 28 Oct 2026 14:44:16 -0400
• Sony ISP subsidiary data breach exposes 2.5 million customer records — Wed, 28 Oct 2026 12:45:47 -0400
• Volt Typhoon hides zero-day attacks using ‘Silent Train’ framework — Wed, 28 Oct 2026 12:00:00 -0400
• Microsoft urges Entra ID admins to migrate users to passkeys — Wed, 28 Oct 2026 10:48:32 -0400
• InfraTrust report warns of exploited flaws in critical network infrastructure — Wed, 28 Oct 2026 10:00:00 -0400
• Even after PHP2Shell, blast radius matters more than a CVSS score — Wed, 28 Oct 2026 09:50:59 -0400
• Hackers now scanning systems for recently-patched Oracle flaw — Wed, 28 Oct 2026 08:19:57 -0400
• CISA warns of hackers now exploiting critical Node2Shell flaw — Wed, 28 Oct 2026 06:46:23 -0400
• Nefilim and Hive ransomware affiliate gets 70 months in prison — Wed, 28 Oct 2026 05:43:15 -0400

Darkreading

• GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub — Wed, 28 Oct 2026 19:39:00 GMT
• Attacker Relentlessly Scans for Credentials by Impersonating AI Bots — Wed, 28 Oct 2026 14:37:52 GMT
• Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature — Wed, 28 Oct 2026 06:00:00 GMT

The Hacker News

• Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns — Wed, 28 Oct 2026 23:38:33 +0530
• Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. — Wed, 28 Oct 2026 22:38:09 +0530
• Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win — Wed, 28 Oct 2026 21:53:34 +0530
• PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network — Wed, 28 Oct 2026 21:32:45 +0530
• Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch — Wed, 28 Oct 2026 18:18:03 +0530
• Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers — Wed, 28 Oct 2026 17:20:00 +0530
• Wazuh and AI for Enhanced SOC Workflows — Wed, 28 Oct 2026 17:00:00 +0530
• Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass — Wed, 28 Oct 2026 16:45:51 +0530
• American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed — Wed, 28 Oct 2026 16:00:00 +0530
• Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits — Wed, 28 Oct 2026 13:45:07 +0530
• FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering — Wed, 28 Oct 2026 13:07:50 +0530
• Japan’s GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach — Wed, 28 Oct 2026 12:43:21 +0530
• Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers — Wed, 28 Oct 2026 11:50:37 +0530
• ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws — Wed, 28 Oct 2026 11:34:58 +0530
• Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges — Wed, 28 Oct 2026 11:12:26 +0530

데일리시큐 - 최근인기기사

• [단독] 슈피겐코리아, 해외 고객관리 시스템 해킹…고객 최대 182명·임직원 264명 정보 조회 — 2026-10-28 16:22:10
• 오픈소스 AI 실행도구 ‘llama.cpp’서 고위험 취약점 발견돼…악성 AI 모델 파일로 시스템 공격 가능 — 2026-10-28 14:25:14
• [긴급] 미국 CISA, ‘PHP2Shell’ 취약점 2건 실제 악용 공식 확인…29일까지 긴급 조치 명령 — 2026-10-28 13:31:51
• 빗썸 사내 그룹웨어 해킹…임직원 개인정보 유출, 회원정보도 조사 — 2026-10-28 11:08:35
• [금융사 해킹 분석] 은행·증권·보험·가상자산까지, 사고 원인 살펴보니 — 2026-10-28 17:54:22
• 호텔스토리 해킹으로 고객 예약정보·카드정보 유출…숙소 계정 탈취 정황 — 2026-10-28 19:46:54
• AI 해커, 3시간 49분 만에 산업제어 소프트웨어 치명적 취약점 4개 발견 — 2026-10-28 18:15:02
• AI 활용 신종 랜섬웨어 조직 ‘n0n’, 14개국 23개 조직 공격 정황…몸값 요구액 4천억원 육박 — 2026-10-28 20:11:22
• 워드프레스 회원관리 플러그인에 치명적 취약점 발견, 웹사이트 전체 장악 위험 — 2026-10-28 14:41:36
• 일본 GMO인터넷, 고객 서버 해킹에 100만 달러 현상금…해커는 80억 엔 요구 — 2026-10-28 20:05:53