Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 13 sources · Get these by email

Threats, ransomware & breaches EMudhra Intermediate CA Certificates CompromisedEight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide. The post EMudhra Intermediate CA Certificates Compromised appeared first on Unit 42. Unit 42 · Global · 22 Oct 2026
Identity & access The Current Landscape of OAuth AttacksUnit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments. The post The Current Landscape of OAuth Attacks appeared first on Unit 42. Unit 42 · Global · 22 Oct 2026
AI security As AI Risks Grow, Insurers Split on Covering the DamageSome build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge. Dark Reading · Global · 22 Oct 2026
Applications & supply chain New Serious PHP Vulnerabilities Released and PatchedPHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations… Schneier on Security · Global · 22 Oct 2026
AI security UAE Transitions 50% of Government Services to Agentic AIThe United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint. Dark Reading · Global · 22 Oct 2026
Cloud & SaaS TiDB Breach Exposes Flawed Cloud Security AssumptionsCloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the unseen information comes to light. Dark Reading · Global · 21 Oct 2026
Network & security devices Compromised eMudhra intermediate certificatesCisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra. Cisco Talos · Global · 21 Oct 2026
Cloud & SaaS Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware SecurityThe effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure. Dark Reading · Global · 21 Oct 2026
Cloud & SaaS Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It HappensResearch finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization. Dark Reading · Global · 21 Oct 2026
Applications & supply chain 'PHP2Shell' Bugs Signal Red Alert for Security IndustrySecurity teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts. Dark Reading · Global · 21 Oct 2026
AI security AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromiseStorm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across Microsoft 365 environments. The post AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 21 Oct 2026
Applications & supply chain OVHcloud GitHub Compromise Tied to GlassWorm Threat ActorsA developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users. Dark Reading · Global · 21 Oct 2026
Industry & products Optiv Launches CyberBOT Cybersecurity Awareness Training ProgramHands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities. Dark Reading · Global · 21 Oct 2026
Industry & products Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated. Dark Reading · Global · 21 Oct 2026
Applications & supply chain Widespread PHP Flaw May Cause Many Site Outages TodayExpect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the… Krebs on Security · Global · 21 Oct 2026
Applications & supply chain Two critical RCEs in PHP coreTwo critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset. Cisco Talos · Global · 21 Oct 2026
AI security “Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime ActivitiesAn investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, and database exfiltration. The post “Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities appeared first on… Unit 42 · Global · 21 Oct 2026
Threats, ransomware & breaches Decades-Old Windows Utility Powers Modern ClickFix AttackThe attack uses malicious Google search results related to Amazon and leverages the "finger" utility to launch a CAPTCHA that installs malware, including the Lumma stealer. Dark Reading · Global · 21 Oct 2026
Policy, regulation & law enforcement Workshop on Economics and Information Security (WEIS) ArchiveThere’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay on the economics of information security. Schneier on Security · Global · 21 Oct 2026
Network & security devices Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackersAdversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than 25 legitimate platforms over the past year, exploiting the built-in trust of collaboration, file-sharing, payment and other services to reach their targets. Cisco Talos · Global · 21 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.