Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 13 sources · Get these by email

AI security Shadowy AI Relay Disables OpenAI Codex, Claude Code SandboxesThe enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for sale — but with key security features turned off. Dark Reading · Global · 29 Oct 2026
Threats, ransomware & breaches Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left OpenAn attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October. The flaw, CVE-2026-97229 (CVSS score: 10.0), can let an attacker run code on a GitLab server through a crafted regular… The Hacker News · Global · 29 Oct 2026
Network & security devices Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysHackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for later use, Cisco… The Hacker News · Global · 29 Oct 2026
Vulnerabilities & exploits Cyber Vulnerabilities Besiege Italy, Absent Clear CauseResearchers can't quite explain why cyber threats look so different in Italy compared with everywhere else. Dark Reading · Global · 29 Oct 2026
Threats, ransomware & breaches China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail VisibilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in… The Hacker News · Global · 29 Oct 2026
Network & security devices Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management InterfacesPalo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet," the… The Hacker News · Global · 29 Oct 2026
Network & security devices Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WANTalos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthorized access to affected systems to deploy KeyDrift. Cisco Talos · Global · 28 Oct 2026
Cloud & SaaS GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubThe supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit. Dark Reading · Global · 28 Oct 2026
Threats, ransomware & breaches Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation CampaignsThe China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised… The Hacker News · Global · 28 Oct 2026
AI security Unwrapping Retail Peak Season Cyber ThreatsUnit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust. The post Unwrapping Retail Peak Season Cyber Threats appeared first on Unit 42. Unit 42 · Global · 28 Oct 2026
Identity & access Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and… The Hacker News · Global · 28 Oct 2026
Vulnerabilities & exploits Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own WinA chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full method on October 28, five months after the chain won $175,000 at… The Hacker News · Global · 28 Oct 2026
AI security PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated NetworkCybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25,… The Hacker News · Global · 28 Oct 2026
AI security The CISO’s evolving role: Protecting and defending in the agentic eraAs AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity and data guardrails, and modernizing defense to keep pace with AI-powered threats. Aarti Borkar shares how security leaders can approach both. The post The CISO’s evolving role:… Microsoft Security Blog · Global · 28 Oct 2026
AI security AI Takes Root in Hospital Corridors, Raises Security StakesArtificial intelligence is everywhere in healthcare, from doctors' intake forms to cancer screenings. But in some cases, life-and-death uses are outpacing cybersecurity. Dark Reading · Global · 28 Oct 2026
AI security Attacker Relentlessly Scans for Credentials by Impersonating AI BotsThe threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data. Dark Reading · Global · 28 Oct 2026
Threats, ransomware & breaches Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security PatchThreat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) , a case of improper authentication in the Oracle Application… The Hacker News · Global · 28 Oct 2026
Hardware & firmware Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting ServersA critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network. UEFI firmware is the software that runs first… The Hacker News · Global · 28 Oct 2026
AI security Wazuh and AI for Enhanced SOC WorkflowsArtificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making.… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassAdobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score:… The Hacker News · Global · 28 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.