A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL...
ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.
Russia's Federal Air Transport Agency announced restrictions at three of Moscow's four major airports, while the Transportation Ministry said the region's aviation operations were under "special...
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of...
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to...
New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk about the security stories...
Google security advisory (AV26-1060)
"This deal won't lower costs for the American people, who are already paying forTrump's failed war of choice in Iran. It will hand Putin millions of dollars to continue slaughtering Ukrainian...
OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an...
A court in Kharkiv has ordered that Russian citizen Leonid Ryzhikov be held in pretrial detention. He stands accused of killing six Ukrainians: five service…
About 35 people, including Russian citizens, have begun a hunger strike at the El Valle immigration detention facility in the U.S. state of Texas. The…
Image: Ft Jefferson, Dry Tortugas, FL credit KeyWestTravelGuide.com What’s new: An opinion piece about overall resilience and the “Fortress America” initiative. Why it’s important: National...
The Suez Canal Authority has introduced mandatory technical inspections and testing for ships that are 25 years old or older, according to a report by industry…
The balancing act of Bulgaria's Moscow-friendly leader stands on shaky ground.Since taking office in May, Bulgarian Prime Minister Rumen Radev has taken a harsh line on Ukraine while adopting...
BMC Helix security advisory (AV26-1059)
Key developments on Oct. 16:Drone attack sparks fire at industrial facility in Russia's Surgut district, governor saysPope Leo urges Putin to allow humanitarian aid, evacuations from...
Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendment–protected activities.
Four sources familiar with the discussion said that Elon Musk approached U.S. President Donald Trump with the idea of slowing down Ukraine's Starlink service on the battlefield.
The pope called for a local ceasefire to allow humanitarian aid deliveries and the safe evacuation of civilians from the front-line city, where around 2,000 residents remain trapped amid severe...
Learn how SentinelOne's Static AI blocked APT29's CaptiveCrunch campaign on the endpoint, stopping local DNS poisoning and captive portal network lures.
Progress security advisory (AV26-1058)
Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential abuse and phishing The post Top 5 Initial Access Threat Vectors Observed by...
Authorities arrest cyber exec for extortion, cellular implant in Ledger wallets leaks seed phrases, and hackers heat French supermarket fridges to 50°C.
Legacy protocol is going to be axed, and enforcement by default will highlight how migration is going
This is a key milestone as F-22s will be the Air Force's first aerial 'quarterbacks' for Collaborative Combat Aircraft drones. The post F-22 Pilot Controls FQ-44 Fighter Drone From The Cockpit For...
Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised Ivanti and Citrix customers. The post...
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast,...
Where is that drip sound coming from? The post Bunker Talk: Let’s Talk About All The Things We Did And Didn’t Cover This Week appeared first on TWZ.
Conflicts far away are informing major changes to how the Army trains, equips and operates in the vast Pacific. The post What The Army’s Pacific Commanders Are Learning From Ukraine And Iran...
AL26-025 - Critical vulnerability impacting BeyondTrust Remote Support – CVE-2026-102764
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on...
New whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and controls. The post Managing open-weight model risk in...
Amid the surging adoption of AI agents, Proofpoint’s “market-changing” deal to acquire Varonis is aimed squarely at helping partners and customers to protect the data those agents can access,...
Agriculture Minister Taras Vysotskyi raised the issue during a meeting with Turkish Ambassador to Ukraine Fatma Ceren Yazgan earlier this week.
A lunchtime drone attack on the head office of Ukraine's National Academy of Sciences in Kyiv's downtown on Sept. 28, 2026, might have come as a shock to scientists based outside the...
Legal eagles still plodding along with some operations, but paper and e-notices delayed until further notice
"This step shows our commitment to supporting Ukraine's path to EU membership," the EU's Enlargement Commissioner Marta Kos said.
Why is Putin pushing Trump to stop Ukraine’s strikes on Russian oil refineries? Historian and journalist Anne Applebaum argues that these attacks are putting real pressure on Moscow — and that...
A vision of Army units launching long-range one-way attack drones at enemy warships and ballistic missiles in the Pacific and Europe is taking shape. The post The Army’s Plan For Employing LUCAS...
Kate Robertson warns that Bill C-22 poses risks to Canada's national security in this piece for The Globe and Mail. The post The Lawful Access Act’s threats to Canada’s national security appeared...
"It would be simply wrong to split us apart on our way into the EU — I hope not. Morally wrong," President Volodymyr Zelensky told EU leaders.
De Wever said that Ukraine urgently needed the fighter jets, as they were one of the few weapons capable to strike Russian jet-powered drones.
"Without a determined European Union capable of making strong decisions Putin would have gone much further by now," Zelensky said, before calling on the bloc to double down on its support.
Activists claimed that the law could have exposed volunteers helping migrants at the Belarus border to up to three years in prison.
OpenAI has disclosed two incidents in which internal AI models, asked only to look up public figures, instead broke into the live systems hosting that data. The reports, published on October 15,...
After 55 years with the Tutor, the aerobatic team faces an extended hiatus before transitioning to the PC-21 turboprop in the early 2030s. The post Canada’s Snowbirds Say Farewell To The CT-114...
On Oct. 16, 63 lawmakers registered a draft resolution calling on the government to reverse its changes, consult with businesses, and reconsider a proposed "coordination center" overseeing the...
Texas’s critical infrastructure underpins both the state’s economy and U.S. national security. Critical infrastructure isn’t confined to just the electric grid and transportation networks, but...
U.S. Army is pursuing a family of modular and scalable laser directed energy weapons that can be fitted to any vehicle in its inventory. The service sees this as key to expanding the operational...
Ukrainian activist and volunteer Serhii Sternenko claimed the facility was the Surgut Condensate Stabilization Plant, which processes gas condensate and produces petroleum products.
On Oct. 15, Sweden extradited to the U.S. Russian national Alexander Suvorov, who is accused of setting up supplies of American microelectronic components to…
A court in Khimki in the Moscow Region sentenced five people to terms ranging from 7.5 years suspended to nine years in prison in a case involving the theft of…
Mozilla security advisory (AV26-1057)
The U.S. has begun the process of selecting managers to oversee a new program enlisting private companies in operations against foreign cybercriminals, according to a former official and two other...
Finance leaders of the G7 grouping agreed to hold tabletop exercises to guard against AI cyberattacks, Japanese Finance Minister Satsuki Katayama said, as policymakers increasingly seek to...
Days after a cyberattack targeting French supermarket refrigerators, thousands of controllers across the globe are visible online and at risk of compromise. Hundreds of grocery stores in France...
"I am standing up for Ukraine's interests solely and the people of Ukraine. We were attacked, we were occupied, our people were killed," Zelensky said when asked to comment on Trump's latest...
Dear readers, The arrest of an OpenAI engineer accused of secretly recording conversations inside the company has brought renewed attention to a national security challenge that extends well...
Creating a convincing video impersonation has gone from requiring specialized expertise and substantial computing power to something an ordinary computer user can set up in under an hour,...
Over the past year, Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators, developers, and an illicit marketplace selling tools and...
Bulgaria on Wednesday said Russia was likely behind drone attacks that struck four ships in the Black Sea in the past week, sinking two, but there was no way of proving Moscow’s culpability....
Proofpoint CEO Sumit Dhawan joins 'Squawk on the Street' to discuss the $6.3 billion acquisition of AI cybersecurity firm Varonis, AI safety issues, and more.
Eight states sued OpenAI on Wednesday, alleging the artificial intelligence company has been misleading users about the safety of ChatGPT. Wednesday’s lawsuits — which were filed by state...
The Trump administration’s retreat from programs that track foreign influence operations has weakened various cross-sector relationships used to identify and confront those campaigns as midterm...
Every Cybersecurity Awareness Month campaign rests on four habits: Strong passwords, Multifactor authentication, Spotting phishing, and keeping software updated. All four assume a person is the...
An array of U.S. Space Force electromagnetic-warfare systems is playing a key role in protecting American troops and degrading enemy satellites around the world. The Wall Street Journal was...
Palo Alto Networks security advisory (AV26-1056)
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. [...]
[Control Systems] Moxa security advisory (AV26-1055)
"It will all come down to the banking system, individual people, and the chemical industry," President Volodymyr Zelensky said.
For as long as nuclear-armed, intercontinental ballistic missiles and submarine-launched ballistic missiles have existed, strategists and engineers have pursued a seductive idea: a shield...
BeyondTrust security advisory (AV26-1054)
Almost two dozen Democrats on the House Transportation and Infrastructure Committee are calling for a congressional watchdog to audit the Federal Aviation Administration’s creation and use of new...
Identity alone doesn't guarantee a bot will behave responsibly. We are introducing a system to continuously evaluate whether Verified bots honor site preferences, like robots.txt and HTTP 429s,...
Go inside the hunt with Sarah Reddish, a SOC analyst on Huntress’ global SOC working in Triage & Analysis. See how she makes a difference every day.
The Kyiv Independent, Ukraine’s main English-language publication, is looking for a Donations Manager.
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a...
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October...
Europe's far-right parties grow increasingly divided on something that once united them — sympathies for Vladimir Putin's Russia.As nationalists and right-wing populists across Western Europe move...
Branded Content: Reconfigurable, platform-agnostic, palletized solutions are taking priority for Army's mobile counter-unmanned aerial systems mission. The post Leonardo DRS Explains How Army...
The E-130J will be taking over the Take Charge And Move Out mission from the jet-powered E-6B Mercury. The post First C-130J For Navy’s New E-130J Phoenix II Ballistic Submarine Communications...
Ukraine's Air Force said Russia attacked Ukraine overnight with 149 Shahed-type drones, 108 of them jet-powered.
UK school admits data protection bungle as children's data at risk
"We see the Ukrainian parliament's adoption of the minority education law and the immediate start of its implementation as a first step towards rebuilding mutual trust," Magyar said on X after the meeting.
'Striking such systems reduces the enemy's ability to monitor airspace and detect aerial assets in time. The estimated cost of the radar station is about US $100 million,' the General Staff said.
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models...
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack...
The Cyber Security Agency of Singapore (CSA) issued quantum-safe migration guidance recommending that organizations exposed to quantum-related cybersecurity... The post Singapore prioritizes...
Not-for-profit organization MITRE has released details of version 20 of its ATT&CK framework, expanding its coverage of critical... The post MITRE ATT&CK v20 expands critical infrastructure threat...
Following reports of cyberattacks on French supermarket refrigeration systems that disrupted hundreds of stores overnight from Oct. 11... The post French supermarket cyberattack exposes risks of...
Ampyx Cyber highlighted gaps in generator registration, cyber risk categorization and artificial intelligence (AI) access controls in the... The post Ampyx Cyber examines FERC 2026 CIP audit...
Microsoft and Health-ISAC are working to dismantle three components of a cybercrime marketplace, YAM Store, CoGUI and Iron... The post Microsoft, Health-ISAC dismantle phishing infrastructure...
Kyiv's centralised heating systems will be turned on, starting with social institutions such as schools, hospitals, and kindergartens. The decision was sparked by "extreme conditions" created by...
"We have to classify so that we know how we can shape the support and solidarity with Ukraine in the future," Austria's Chancellor Christian Stocker said.
Global software company IGEL announced that Randy Resnick, a recognized Zero Trust leader and architect, has joined IGEL... The post Randy Resnick joins IGEL to advance Zero Trust and cyber...
SANS Institute launched dedicated training tracks, designed for practitioners across enterprises, including CII sectors to strengthen the capabilities... The post SANS Institute launches IT and OT...
Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can...
The two countries have been seeking reconciliation over difficult historical issues.
School staff seemed to be trying to get ransomware – for a second time
The incidents underscore the growing security risks posed to Moldova and the region by Russia's war against neighboring Ukraine.
If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious
"I don't like that there are 100 billion euros ($112 billion) from the European budget for Ukraine, that this money should be borrowed," said Czech Prime Minister Andrej Babis.
Zelensky said Poland had provided ammunition used by Ukraine's anti-aircraft guns to down incoming Russian drones and cruise missiles, but also hinted at other support which would have to remain...
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. [...]
"We supported Trump's energy ceasefire but we see Russia did not respect it, and so we have to increase the pressure," von der Leyen told journalists, before announcing that the EU is working on a...
WP2Shell is a critical WordPress Core exploit chain disclosed in July 2026 that can enables pre-authentication remote code execution (RCE) on vulnerable WordPress installations. The chain is...
A Bristol primary school was hit by a second cyber attack as criminals managed to export records in a “worrying” data breach. This follows a cyber attack last month that affected 88 schools,...
The number includes 1,790 casualties that Russian forces suffered over the past day.
He believed his online date was trapped under Russian occupation. She may never have existed.
Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update. [...]
Starlink, implemented speed restrictions on Oct. 14 without warning, limiting speed to 100 miles per hour (160 kilometers per hour). The unexpected restriction disrupted active military...
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. [...]
Ukraine's supply of Patriot interceptor missiles has reached a critical low, multiple media outlets reported on Oct. 15 citing Ukrainian officials, as Russia intensifies attacks on energy...
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]
In other news: Al Jazeera employees targeted with Candiru spyware; US disrupts 40 DPRK laptop farms; OpenAI employee arrested for planting spy device.
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live...
U.S. President Donald Trump criticized President Volodymyr Zelensky in an interview with Newsmax published on Oct. 15, describing the Ukrainian president as "not a good guy for (the U.S.) to deal with."
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets...
According to monitoring channels ExileNova+ and SuperNova+, Russian technology giant Yandex's data center in Vladimir Oblast, around 500 kilometers (310 miles) from the Ukrainian border, was...