Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 13 sources · Get these by email

Operating systems & software Tech Giants Block eMudhra Certificates Tied to 8 Compromised KeysGoogle, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised. Dark Reading · Global · 20 Oct 2026
Threats, ransomware & breaches Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) appeared first on Unit 42. Unit 42 · Global · 20 Oct 2026
Policy, regulation & law enforcement Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQThe perp, who has Saudi ties, was arrested for allegedly bugging an OpenAI conference room, highlighting a preventable insider threat vector. Dark Reading · Global · 20 Oct 2026
AI security Close Identity Gaps in Software Development Before Unleashing AIArtificial intelligence is complicating security in the software development life cycle, but a Dark Reading roundtable found collaboration, better identity visibility, and reduced testing costs offer CISOs a way ahead. Dark Reading · Global · 20 Oct 2026
Vulnerabilities & exploits There's only so much code: the rise in vulnerability numbersThe September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where did they come from? And what does the future look like? Cisco Talos · Global · 20 Oct 2026
AI security Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack SpreeA Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins. Dark Reading · Global · 20 Oct 2026
Threats, ransomware & breaches Possible new Cellebrite iPhone Radio Zero-DayJustin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A press release from earlier this year confirms AU is a new… Schneier on Security · Global · 20 Oct 2026
Threats, ransomware & breaches Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion SiteU.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources… Krebs on Security · Global · 19 Oct 2026
Cloud & SaaS Agents are your newest insiders. Security must move at their speed.New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection continuously. The post Agents are your newest insiders. Security must move at their speed. appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 19 Oct 2026
Threats, ransomware & breaches Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential abuse and phishing The post Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026 appeared first on Unit 42. Unit 42 · Global · 16 Oct 2026
AI security Managing open-weight model risk in enterprise deploymentsNew whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and controls. The post Managing open-weight model risk in enterprise deployments appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 16 Oct 2026
AI security AI-Powered Espionage Campaign Targets Government Linux InfrastructureOur analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft. The post AI-Powered Espionage Campaign Targets Government Linux Infrastructure appeared first on Unit 42. Unit 42 · Global · 15 Oct 2026
Vulnerabilities & exploits The Q3 Vulnerability Pulse: Discovery ≠ ExploitationIs the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter. Cisco Talos · Global · 15 Oct 2026
Network & security devices Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate ImplantWe investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware. The post Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant appeared first on Unit 42. Unit 42 · Global · 14 Oct 2026
Policy, regulation & law enforcement U.K. Sanctions Cryptomus for RU Money LaunderingThe United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial… Krebs on Security · Global · 14 Oct 2026
Threats, ransomware & breaches Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizationsTalos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy. Cisco Talos · Global · 14 Oct 2026
Policy, regulation & law enforcement The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrimeMicrosoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for large-scale phishing. In collaboration with law enforcement agencies… Microsoft Security Blog · Global · 14 Oct 2026
Vulnerabilities & exploits Microsoft Patches More Than 1,400 Security FlawsMicrosoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Krebs on Security · Global · 13 Oct 2026
Threats, ransomware & breaches The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party RiskUnit 42 dissects a cyberattack targeting a European bank's IT infrastructure, delivering concrete defense strategies to help organizations detect and counter comparable threats. The post The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk appeared first on Unit 42. Unit 42 · Global · 13 Oct 2026
Vulnerabilities & exploits Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilitiesMicrosoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical." Cisco Talos · Global · 13 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.