Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3586 articles
Google is rolling out Android scam protections, including Gemini analysis in Messages, warnings for suspicious links and call forwarding, and expanded bank-call verification. Some features are opt-in or rolling out to eligible devices.
Authorities in 17 Latin American and European countries arrested 95 suspects in an INTERPOL-coordinated operation targeting CSAM distribution through messaging groups. Investigators executed 127 search warrants and rescued a five-year-old victim.
Windows Server 2022 reached the end of mainstream support on October 13, 2026. Microsoft says monthly security updates will continue through October 14, 2031, and Azure Edition hotpatching through October 2027.
Citizen Lab says Discover-Tech ads delivered zero-click spyware linked to Candiru, targeting at least 45 Al Jazeera devices. Google and IAB Europe removed Discover-Tech from their vendor registries after the findings.
Microsoft fixed a Windows 11 update issue causing black screens, desktop loading problems, and Explorer crashes, mainly on Azure Virtual Desktop hosts using FSLogix. Updates released October 13, 2026, or later include the fix.
Microsoft and partners announced a court-authorized disruption of CoGUI, Haozi and Iron Man System. Microsoft says operators behind the kits facilitated more than 1 billion phishing emails and SMS messages since January 2026.
Anthropic says small AI models may eventually replicate across vulnerable IoT devices, but its tests did not demonstrate autonomous spread on compromised household devices. Researchers estimate the capability could emerge by the end of 2026.
The U.S. charged 14 people and seized about 187 computers in a disruption of North Korean IT worker fraud alleged to have affected over 70 companies and generated about $3 million.
Booz Allen tested AI agents in an isolated OT lab. Across eight scenarios, the agents met every objective; in tests, they moved from perimeter compromise to an industrial network and operated a robotic arm within minutes.
Siemens issued 17 ICS advisories, while Rockwell, Schneider Electric, CISA and others reported vulnerabilities. A critical ArmorBlock flaw could let an unauthenticated attacker change a device’s web server password.
A seller using the handle “Alduin” claims to offer data on about 151,000 customers across 29 Climb Up gyms in France. The dataset’s authenticity, source, size and availability have not been independently verified.
This security-news roundup covers attacks on French supermarket refrigeration systems, Ivanti VPN zero-days, major vulnerability fixes, a Meta GitHub breach, an FBI infrastructure seizure, and security industry developments.
Harmonic Security raised $50 million in Series B funding to expand its platform for monitoring and controlling employee use of AI tools, bringing its total funding to $76 million.
SecurityWeek’s virtual summit focuses on zero-trust and identity security, with sessions on shadow AI, identity threats, and AI-related security. The event is free to attend.
A Picus Security page summarizes Gartner research on combining threat intelligence, asset context, exploitability modeling and security control validation to prioritize exposures attackers may exploit.
Cyble reports attacks against about 20 known flaws, alongside malware, phishing and brute-force activity. CISA issued 14 ICS advisories covering 54 vulnerabilities, including 13 rated critical.
Arctic Wolf announced Aurora platform features including SwarmView for tracing AI-assisted security decisions, Shadow AI Discovery using network, identity and endpoint data, and expanded integrations and natural-language tools.
Arctic Wolf announced a beta endpoint security product that it says uses a custom-trained language model and causal graph to detect malicious intent and disrupt attack chains before damage occurs.
Microsoft and Health-ISAC seized and redirected domains tied to YAM Store, CoGUI and Iron Man, services Microsoft says helped send over one billion malicious messages and supplied criminals with accounts, phishing kits and infrastructure.
Microsoft’s October 2026 update fixes 1,413 flaws, including three zero-days and more than 70 critical vulnerabilities. Priorities include an actively exploited Windows Shell flaw, Outlook RCEs, and updates for network-facing services.
Qualys says TruRisk Eliminate 2.0 uses TruConfidence and Agent Sara to select and stage remediation, including patchless fixes, then monitor deployments and roll back on anomalies. The company reports deploying 178 million patches in the past year.
Microsoft’s October Patch Tuesday fixes 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day that bypasses Mark of the Web and two other publicly disclosed flaws.
XBOW says researchers used OpenAI’s public GPT-5.6 Sol model to build a Chrome full-chain exploit in six days. Google fixed all three bugs and awarded XBOW $250,000; XBOW says the bugs were not exploited against users.
Sonatype says Nexus Repository Pro+ and Enterprise can screen requested components against its threat intelligence and organizational policies, blocking those identified as malicious, vulnerable, or out of policy before they reach downstream users.
