- SECURELIST Filter generation in practice: from algorithms to LLMs
- SECURELIST Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
- SECURELIST Millions of security cameras at risk: DoS vulnerability in Intelbras devices
- SECURELIST An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
- SECURELIST Deploying AI agents securely: how Kaspersky products mitigate AI threats
- SECURELIST How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia
- ESET This month in security with Tony Anscombe October 2026 edition
- ESET Amatera: How the prolific infostealer works and spreads
- ESET Lessons from Cybersecurity Black Week
- ESET ESET APT Activity Report Q2 2026 Q3 2026
- ESET PHP2Shell: What to know about two critical PHP flaws
- ESET MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
- ESET Is the ad a scam? How to tell before you click
- ESET Inbox flooded with sign-up messages? Email bombing explained
- ESET Medicare scam calls, texts and ads: What to watch for this Open Enrollment
- ESET What to do when a data breach notice doesn't say much
- CPR Cohere s Qwen Story: Looks More Like Model Jaggedness
- CPR Tricks from the Past deployed via signed ChatGPT and Claude binaries
- CPR 26th October Threat Intelligence Report
- CPR Infostealer riding the AI Train
- CPR The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations
- CPR 19th October Threat Intelligence Report
- CPR When LLM Gateways Go Wrong: Findings from LiteLLM
- CPR 12th October Threat Intelligence Report
- CPR 5th October Threat Intelligence Report
- CPR 28th September Threat Intelligence Report
- PROMPTINJ Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)
- PROMPTINJ From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669)
- PROMPTINJ Breaking Claude Code Opus 5 Auto Mode
- PROMPTINJ Recovering Encrypted LLM Reasoning Traces
- PROMPTINJ LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection
- PROMPTINJ Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)
- PROMPTINJ Autonomous AI Intrusions Are Here: Lessons from the Hugging Face Compromise
- PROMPTINJ From Indirect Prompt Injection to DNS Exfiltration in macOS Terminal
- PROMPTINJ Computer-Use and TOCTOU: What You Click Is Not What You Get!
- PROMPTINJ Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)
- KREBS Widespread PHP Flaw May Cause Many Site Outages Today
- KREBS Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
- KREBS U.K. Sanctions Cryptomus for RU Money Laundering
- KREBS Microsoft Patches More Than 1,400 Security Flaws
- KREBS FBI Arrests Executive at Ransomware Negotiation Firm
- KREBS ShinyHunters Extorted Boeing Spin-off Prior to Arrests
- KREBS Dutch Police Arrest Reformed Hacker in Shiny Hunters Investigation
- KREBS U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
- KREBS Data Broker Radaris Loses Domains in Privacy Fight
- KREBS Microsoft Plugs Nearly 1,000 Security Holes
- SCHNEIER Friday Squid Blogging: Bigfin Squid Off California Coast
- SCHNEIER Bloatware in Aftermarket Auto Parts
- SCHNEIER Studying Fraudulent North Korean IT Workers
- SCHNEIER Hiding Capabilities in AI Models
- SCHNEIER Bias in Qwen3-Coder Model
- SCHNEIER Friday Squid Blogging: Increasing Squid Populations
- SCHNEIER Compromised TLS Certificates
- SCHNEIER New Serious PHP Vulnerabilities Released and Patched
- SCHNEIER Workshop on Economics and Information Security (WEIS) Archive
- SCHNEIER Possible new Cellebrite iPhone Radio Zero-Day
- RECORD DOJ raises privacy concerns over potential sale of Character.AI chats
- RECORD Fashion retailer Resolve says hackers stole payment card information
- RECORD Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
- RECORD Syrian Electronic Army hacker gets prison time for attacks on Western targets
- RECORD British spy agency cannot account for thousands of data storage devices, watchdog says
- SECWEEK Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
- SECWEEK In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
- SECWEEK Passkeys Are Better Than Passwords. But They Are Not Enough.
- SECWEEK Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
- SECWEEK Fresh WordPress Vulnerability in Attackers Crosshairs
- SECWEEK Drupal Commerce Core Vulnerability Exploited Against Online Stores
- SECWEEK $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
- SECWEEK Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
- SECWEEK TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians Machines
- DARKREAD Devs Hit by Trojanized Claude Code Extension for Cursor
- DARKREAD Behind the Scenes of How Operation Blackout Went Down
- DARKREAD L Italia e afflitta da vulnerabilita informatiche, senza una causa chiara
- DARKREAD Undead Software Projects Continue to Raise Security Risks
- DARKREAD As Russia's Cyberwar Evolves, Belarus Steps Forward
- DARKREAD Anthropic-Themed Phishing Emails Bypass Top Security Tools
- DARKREAD Rethinking Cybersecurity Awareness in the AI Era
- DARKREAD Why CTF Competitions May Be More Important Than Ever
- DARKREAD Claude Model Builds Exploits Across Major Browsers & OSes
- DARKREAD Threat Modeling With 4 Simple Questions on a White Board
- TALOS Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
- TALOS A quiet week in infosec <.<
- TALOS IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
- UNIT42 Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
- UNIT42 Unwrapping Retail Peak Season Cyber Threats
- UNIT42 EMudhra Intermediate CA Certificates Compromised
- UNIT42 The Current Landscape of OAuth Attacks
- UNIT42 Next Exploit Opportunities : How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercri...
- UNIT42 Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
- UNIT42 Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
- UNIT42 AI-Powered Espionage Campaign Targets Government Linux Infrastructure
- UNIT42 Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
- UNIT42 The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
- KEV CVE-2015-3306: ProFTPD Improper Access Control Vulnerability
- KEV CVE-2015-5477: ISC BIND Data Processing Errors Vulnerability
- KEV CVE-2016-3081: Apache Struts Command Injection Vulnerability
- KEV CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability
- KEV CVE-2023-22894: Strapi Cleartext Storage of Sensitive Information Vulnerability
- KEV CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability
- KEV CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability
- KEV CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- KEV CVE-2026-41709: Broadcom VMWare ESX Insufficient Logging Vulnerability
- KEV CVE-2026-96652: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- CVE CVE-2026-100155: The The Ninja Forms Contact Form Builder with Calculators, Quizzes, Signatures & AI Form B...
- CVE CVE-2026-101326: The The Ninja Forms Contact Form Builder with Calculators, Quizzes, Signatures & AI Form B...
- CVE CVE-2026-109234: The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th...
- CVE CVE-2026-109997: The Ninja Forms Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Build...
- CVE CVE-2026-110042: The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict ac...
- CVE CVE-2026-110808: The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restri...
- CVE CVE-2026-116520: The PPWP Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Sc...
- CVE CVE-2026-116563: The Photo Gallery, Sliders, Proofing and Themes NextGEN Gallery plugin for WordPress is vu...
- CVE CVE-2026-118043: The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-sup...
- CVE CVE-2026-118184: The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visito...
- GHSA HIGH Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
- GHSA HIGH Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
- GHSA HIGH pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search
- GHSA HIGH pypdf has possible large memory usage when parsing page tree
- GHSA HIGH pypdf has possible infinite loop when cloning dictionaries
- GHSA HIGH joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
- GHSA HIGH @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
- GHSA MEDIUM minimatch has potential denial of service via globparts amplification
- GHSA MEDIUM Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
- GHSA HIGH Authlib RFC 7592 examples omit registration-access-token client binding
- CISA CISA Adds Two Known Exploited Vulnerabilities to Catalog
- CISA Hitachi Energy CoreTec Product
- CISA Hitachi Energy TRO600 series products
- CISA Siemens Mendix SAML Module
- CISA CISA Adds Two Known Exploited Vulnerabilities to Catalog
- CISA CISA Adds Two Known Exploited Vulnerabilities to Catalog
- CISA CISA Adds Two Known Exploited Vulnerabilities to Catalog
- CISA EPICS Base
- CISA Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hy...
- SANS Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
- SANS YARA-X 1.22.1 Release, (Sat, Oct 31st)
- SANS YARA-X 1.22.0 Release, (Sun, Oct 25th)
- SANS ISC Stormcast For Friday, October 30th, 2026 https://isc.sans.edu/podcastdetail/10158, (Fri, Oct 30th)
- SANS Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)
- SANS ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)
- SANS Yet Another ClickFix Campaign, (Wed, Oct 28th)
- SANS ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)
- SANS ISC Stormcast For Tuesday, October 27th, 2026 https://isc.sans.edu/podcastdetail/10152, (Tue, Oct 27th)
- SANS Apple Patches for October 2026, (Mon, Oct 26th)
- THN Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
- THN Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
- THN A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
- THN Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
- THN Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
- THN TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
- THN WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
- THN Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
- THN Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
- THN Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
- SECURELIST Filter generation in practice: from algorithms to LLMs
- SECURELIST Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
- SECURELIST Millions of security cameras at risk: DoS vulnerability in Intelbras devices
- SECURELIST An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
- SECURELIST Deploying AI agents securely: how Kaspersky products mitigate AI threats
- SECURELIST How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia
- ESET This month in security with Tony Anscombe October 2026 edition
- ESET Amatera: How the prolific infostealer works and spreads
- ESET Lessons from Cybersecurity Black Week
- ESET ESET APT Activity Report Q2 2026 Q3 2026
- ESET PHP2Shell: What to know about two critical PHP flaws
- ESET MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
- ESET Is the ad a scam? How to tell before you click
- ESET Inbox flooded with sign-up messages? Email bombing explained
- ESET Medicare scam calls, texts and ads: What to watch for this Open Enrollment
- ESET What to do when a data breach notice doesn't say much
- CPR Cohere s Qwen Story: Looks More Like Model Jaggedness
- CPR Tricks from the Past deployed via signed ChatGPT and Claude binaries
- CPR 26th October Threat Intelligence Report
- CPR Infostealer riding the AI Train
- CPR The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations
- CPR 19th October Threat Intelligence Report
- CPR When LLM Gateways Go Wrong: Findings from LiteLLM
- CPR 12th October Threat Intelligence Report
- CPR 5th October Threat Intelligence Report
- CPR 28th September Threat Intelligence Report
- PROMPTINJ Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)
- PROMPTINJ From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669)
- PROMPTINJ Breaking Claude Code Opus 5 Auto Mode
- PROMPTINJ Recovering Encrypted LLM Reasoning Traces
- PROMPTINJ LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection
- PROMPTINJ Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)
- PROMPTINJ Autonomous AI Intrusions Are Here: Lessons from the Hugging Face Compromise
- PROMPTINJ From Indirect Prompt Injection to DNS Exfiltration in macOS Terminal
- PROMPTINJ Computer-Use and TOCTOU: What You Click Is Not What You Get!
- PROMPTINJ Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)
- KREBS Widespread PHP Flaw May Cause Many Site Outages Today
- KREBS Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
- KREBS U.K. Sanctions Cryptomus for RU Money Laundering
- KREBS Microsoft Patches More Than 1,400 Security Flaws
- KREBS FBI Arrests Executive at Ransomware Negotiation Firm
- KREBS ShinyHunters Extorted Boeing Spin-off Prior to Arrests
- KREBS Dutch Police Arrest Reformed Hacker in Shiny Hunters Investigation
- KREBS U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
- KREBS Data Broker Radaris Loses Domains in Privacy Fight
- KREBS Microsoft Plugs Nearly 1,000 Security Holes
- SCHNEIER Friday Squid Blogging: Bigfin Squid Off California Coast
- SCHNEIER Bloatware in Aftermarket Auto Parts
- SCHNEIER Studying Fraudulent North Korean IT Workers
- SCHNEIER Hiding Capabilities in AI Models
- SCHNEIER Bias in Qwen3-Coder Model
- SCHNEIER Friday Squid Blogging: Increasing Squid Populations
- SCHNEIER Compromised TLS Certificates
- SCHNEIER New Serious PHP Vulnerabilities Released and Patched
- SCHNEIER Workshop on Economics and Information Security (WEIS) Archive
- SCHNEIER Possible new Cellebrite iPhone Radio Zero-Day
- RECORD DOJ raises privacy concerns over potential sale of Character.AI chats
- RECORD Fashion retailer Resolve says hackers stole payment card information
- RECORD Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
- RECORD Syrian Electronic Army hacker gets prison time for attacks on Western targets
- RECORD British spy agency cannot account for thousands of data storage devices, watchdog says
- SECWEEK Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
- SECWEEK In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
- SECWEEK Passkeys Are Better Than Passwords. But They Are Not Enough.
- SECWEEK Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
- SECWEEK Fresh WordPress Vulnerability in Attackers Crosshairs
- SECWEEK Drupal Commerce Core Vulnerability Exploited Against Online Stores
- SECWEEK $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
- SECWEEK Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
- SECWEEK TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians Machines
- DARKREAD Devs Hit by Trojanized Claude Code Extension for Cursor
- DARKREAD Behind the Scenes of How Operation Blackout Went Down
- DARKREAD L Italia e afflitta da vulnerabilita informatiche, senza una causa chiara
- DARKREAD Undead Software Projects Continue to Raise Security Risks
- DARKREAD As Russia's Cyberwar Evolves, Belarus Steps Forward
- DARKREAD Anthropic-Themed Phishing Emails Bypass Top Security Tools
- DARKREAD Rethinking Cybersecurity Awareness in the AI Era
- DARKREAD Why CTF Competitions May Be More Important Than Ever
- DARKREAD Claude Model Builds Exploits Across Major Browsers & OSes
- DARKREAD Threat Modeling With 4 Simple Questions on a White Board
- TALOS Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
- TALOS A quiet week in infosec <.<
- TALOS IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
- UNIT42 Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
- UNIT42 Unwrapping Retail Peak Season Cyber Threats
- UNIT42 EMudhra Intermediate CA Certificates Compromised
- UNIT42 The Current Landscape of OAuth Attacks
- UNIT42 Next Exploit Opportunities : How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercri...
- UNIT42 Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
- UNIT42 Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
- UNIT42 AI-Powered Espionage Campaign Targets Government Linux Infrastructure
- UNIT42 Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
- UNIT42 The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
- KEV CVE-2015-3306: ProFTPD Improper Access Control Vulnerability
- KEV CVE-2015-5477: ISC BIND Data Processing Errors Vulnerability
- KEV CVE-2016-3081: Apache Struts Command Injection Vulnerability
- KEV CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability
- KEV CVE-2023-22894: Strapi Cleartext Storage of Sensitive Information Vulnerability
- KEV CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability
- KEV CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability
- KEV CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- KEV CVE-2026-41709: Broadcom VMWare ESX Insufficient Logging Vulnerability
- KEV CVE-2026-96652: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- CVE CVE-2026-100155: The The Ninja Forms Contact Form Builder with Calculators, Quizzes, Signatures & AI Form B...
- CVE CVE-2026-101326: The The Ninja Forms Contact Form Builder with Calculators, Quizzes, Signatures & AI Form B...
- CVE CVE-2026-109234: The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th...
- CVE CVE-2026-109997: The Ninja Forms Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Build...
- CVE CVE-2026-110042: The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict ac...
- CVE CVE-2026-110808: The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restri...
- CVE CVE-2026-116520: The PPWP Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Sc...
- CVE CVE-2026-116563: The Photo Gallery, Sliders, Proofing and Themes NextGEN Gallery plugin for WordPress is vu...
- CVE CVE-2026-118043: The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-sup...
- CVE CVE-2026-118184: The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visito...
- GHSA HIGH Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
- GHSA HIGH Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
- GHSA HIGH pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search
- GHSA HIGH pypdf has possible large memory usage when parsing page tree
- GHSA HIGH pypdf has possible infinite loop when cloning dictionaries
- GHSA HIGH joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
- GHSA HIGH @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
- GHSA MEDIUM minimatch has potential denial of service via globparts amplification
- GHSA MEDIUM Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
- GHSA HIGH Authlib RFC 7592 examples omit registration-access-token client binding
- CISA CISA Adds Two Known Exploited Vulnerabilities to Catalog
- CISA Hitachi Energy CoreTec Product
- CISA Hitachi Energy TRO600 series products
- CISA Siemens Mendix SAML Module
- CISA CISA Adds Two Known Exploited Vulnerabilities to Catalog
- CISA CISA Adds Two Known Exploited Vulnerabilities to Catalog
- CISA CISA Adds Two Known Exploited Vulnerabilities to Catalog
- CISA EPICS Base
- CISA Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hy...
- SANS Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
- SANS YARA-X 1.22.1 Release, (Sat, Oct 31st)
- SANS YARA-X 1.22.0 Release, (Sun, Oct 25th)
- SANS ISC Stormcast For Friday, October 30th, 2026 https://isc.sans.edu/podcastdetail/10158, (Fri, Oct 30th)
- SANS Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)
- SANS ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)
- SANS Yet Another ClickFix Campaign, (Wed, Oct 28th)
- SANS ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)
- SANS ISC Stormcast For Tuesday, October 27th, 2026 https://isc.sans.edu/podcastdetail/10152, (Tue, Oct 27th)
- SANS Apple Patches for October 2026, (Mon, Oct 26th)
- THN Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
- THN Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
- THN A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
- THN Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
- THN Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
- THN TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
- THN WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
- THN Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
- THN Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
- THN Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
- HN Show HN: Sketch Stadium watch your agent play Pictionary
- HN Launch HN: Simantic (YC F26) Firmware Simulation for AI Agents
- HN Data Recovery CEO Indicted for Allegedly Scamming Ransomware Victims
- CF-BLOG 4 real? Tracking exploitation and patching of eMudhra s weak keys
- CF-BLOG Cloudflare services for private origins is now generally available
- CF-BLOG Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants
- CF-BLOG What took the Internet offline in Q3 2026
- CF-BLOG Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
- CF-BLOG Origin Range Requests: Serving large files without range-request tuning
- CF-BLOG Bringing post-quantum cryptography to geographically fenced key management
- CF-BLOG Localizing compliance at scale: achieving South Korea s ISMS certification
- CF-BLOG Introducing full transaction detection for Cloudflare WAF
- SIMONW How We Took Over ChatGPT Accounts
- SIMONW datasette-llm 0.1a9
- SIMONW dbreunig/nesformer
- SIMONW API credits benefit for eligible ChatGPT subscriptions
- SIMONW Building a multiplayer game world with autonomous Fable-class models
- SIMONW Quoting Ben Hylak
- SIMONW Quoting Ted Sanders
- SIMONW GitHub Octoverse 2026
- SIMONW The October inflection point for vibe game development
- SIMONW Quoting Terk Terkowitz
- 404MEDIA People Used to Drink Wine Made From Ground-Up Mummies. Now, Scientists Are Studying It
- 404MEDIA Wake Up Call: Fanfiction Writers and Readers React to AO3 Outage
- 404MEDIA Scientists Analyzed Thousands of Psychedelic Trips. They Found Something Disturbing
- 404MEDIA Proton s CEO Cancels AI Re-Interviews
- 404MEDIA Behind the Blog: Tech Support
- 404MEDIA Apple Is Entering Its Slop Era
- 404MEDIA Massive Fanfic Site Archive of Our Own Says It s Going Down for 'Up to 4 Weeks'
- 404MEDIA Podcast: Flock CEO Says the Backlash Isn t Real
- 404MEDIA Manifestos, Fear, and Loser Thinking : Inside Proton s AI Reckoning
- 404MEDIA Senators Demand Meta Answer for 'Pervert Glasses' Following 404 Media Investigation
- ARS Supersonic airliner in doubt as company shifts to powering AI data centers
- ARS Anthropic VS code extension on Cursor backdoored for nearly 12 hours
- ARS Dartmouth's provost warned us about AI cheating but his own AI use cost him his job
- ARS Basically no one is using AI agents for their DoorDash orders
- ARS Fujifilm to boost tape production 5x as AI fuels archiving demand
- ARS Thousands of ghost students use AI to steal millions in student loans, DOJ says
- ARS Trump declares robot imports a national security threat
- ARS Google admits AI search makes less money, but it's fixing that with more ads
- ARS Google announces Gemini 4 Carbon, its latest frontier AI model that you can't use
- ARS Google AI gets cagey when asked who won the 2020 elections
- VERGE I built an AI Tamagotchi before Meta could
- VERGE Apple Intelligence is finally coming to China with iOS 27.3
- VERGE Sam Altman says it s better for RAM to be in a data center than on your desk
- VERGE The biggest names in AI are backing a new way to opt out of scraping
- VERGE Google s satellite AI server transmits its first response to Earth
- VERGE Starbucks wants to use AI to show you a personalized digital menu at the drive-thru
- VERGE Pope Leo calls for the disarmament of AI: Machines are tools, not persons
- VERGE Silicon Valley wants you to invest in miracles
- VERGE Sam Altman sympathizes with mathematicians, but says OpenAI s math onslaught won t stop
- VERGE Maine s data center revolt will decide who controls the Senate
- MIT-TR We urgently need to monitor AI agents actions in real time
- MIT-TR Creating AI value with enterprise context
- MIT-TR Pairing industrial AI autonomy and human control
- MIT-TR Industrial Intelligence: The next growth opportunity for manufacturing
- MIT-TR Will the real Anthropic please stand up
- MIT-TR The focus on AI safety disasters ignores everyday harms
- MIT-TR Designing an AI serving harness built to last
- MIT-TR The Foundations of Scalable AI
- MIT-TR Making the case for context-aware AI
- MIT-TR AI s hidden storage bill: What inference leaves behind
- TECHCRUNCH Apple CEO says the company doesn t want to ship AI for AI s sake
- TECHCRUNCH 4 days left: How TechCrunch Founder Summit helps you make more useful connections to scale
- TECHCRUNCH Judge allows NAACP lawsuit over xAI data center pollution to move forward
- TECHCRUNCH OpenAI reportedly lowers funding target for new round
- TECHCRUNCH Nvidia weighs playing the cosigner for Nscale s AI data center in West Virginia
- TECHCRUNCH Ollie, a privacy-focused AI assistant, is shutting down
- TECHCRUNCH Intel s stock crashes, knocking $12B from government s stake
- TECHCRUNCH Anthropic expected to receive high junk rating from credit agencies following IPO, FT report says
- TECHCRUNCH Last-minute Halloween costumes for tech nerds
- TECHCRUNCH Cracks are emerging in the AI spending boom
- CF-STATUS EWR (Newark) on 2026-11-06
- CF-STATUS EWR (Newark) on 2026-11-05
- CF-STATUS AMS (Amsterdam) on 2026-11-04
- CF-STATUS ISB (Islamabad) on 2026-11-04
- CF-STATUS KHI (Karachi) on 2026-11-04
- CF-STATUS KNU (Kanpur) on 2026-11-04
- CF-STATUS EWR (Newark) on 2026-11-04
- CF-STATUS WAW (Warsaw) on 2026-11-03
- CF-STATUS KHI (Karachi) on 2026-11-03
- CF-STATUS HYD (Hyderabad) on 2026-11-03
- GH-STATUS Incident with Dependabot
- GH-STATUS Incident with Actions, Pages, and Webhooks
- GH-STATUS Disruption with GitHub services
- GH-STATUS Disruption with Copilot Cloud services
- GH-STATUS Disruption with some Copilot services
- GH-STATUS Elevated 404s for GitHub App s2s tokens in git/API
- GH-STATUS Incident with Actions, Issues, API Requests and Pull Requests
- GH-STATUS Grok 4.6 and Grok 4.7 Service Issues
- GH-STATUS Disruption with Dependabot Alerts
- GH-STATUS Delayed Actions status check results
- HN Ask HN: Are you tired too in this AI era?
- HN Wikipedia's Cleanup of AI-Generated Content
- HN Show HN: Ultimidi piano learning web game
- HN Pompeii wardrobe found untouched since 79CE holds keepsakes, coins, and two mice
- HN Prompt injection in HTTP headers: what 217M web responses show
- HN Show HN: Sketch Stadium watch your agent play Pictionary
- HN Launch HN: Simantic (YC F26) Firmware Simulation for AI Agents
- HN Data Recovery CEO Indicted for Allegedly Scamming Ransomware Victims
- CF-BLOG 4 real? Tracking exploitation and patching of eMudhra s weak keys
- CF-BLOG Cloudflare services for private origins is now generally available
- CF-BLOG Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants
- CF-BLOG What took the Internet offline in Q3 2026
- CF-BLOG Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
- CF-BLOG Origin Range Requests: Serving large files without range-request tuning
- CF-BLOG Bringing post-quantum cryptography to geographically fenced key management
- CF-BLOG Localizing compliance at scale: achieving South Korea s ISMS certification
- CF-BLOG Introducing full transaction detection for Cloudflare WAF
- SIMONW How We Took Over ChatGPT Accounts
- SIMONW datasette-llm 0.1a9
- SIMONW dbreunig/nesformer
- SIMONW API credits benefit for eligible ChatGPT subscriptions
- SIMONW Building a multiplayer game world with autonomous Fable-class models
- SIMONW Quoting Ben Hylak
- SIMONW Quoting Ted Sanders
- SIMONW GitHub Octoverse 2026
- SIMONW The October inflection point for vibe game development
- SIMONW Quoting Terk Terkowitz
- 404MEDIA People Used to Drink Wine Made From Ground-Up Mummies. Now, Scientists Are Studying It
- 404MEDIA Wake Up Call: Fanfiction Writers and Readers React to AO3 Outage
- 404MEDIA Scientists Analyzed Thousands of Psychedelic Trips. They Found Something Disturbing
- 404MEDIA Proton s CEO Cancels AI Re-Interviews
- 404MEDIA Behind the Blog: Tech Support
- 404MEDIA Apple Is Entering Its Slop Era
- 404MEDIA Massive Fanfic Site Archive of Our Own Says It s Going Down for 'Up to 4 Weeks'
- 404MEDIA Podcast: Flock CEO Says the Backlash Isn t Real
- 404MEDIA Manifestos, Fear, and Loser Thinking : Inside Proton s AI Reckoning
- 404MEDIA Senators Demand Meta Answer for 'Pervert Glasses' Following 404 Media Investigation
- ARS Supersonic airliner in doubt as company shifts to powering AI data centers
- ARS Anthropic VS code extension on Cursor backdoored for nearly 12 hours
- ARS Dartmouth's provost warned us about AI cheating but his own AI use cost him his job
- ARS Basically no one is using AI agents for their DoorDash orders
- ARS Fujifilm to boost tape production 5x as AI fuels archiving demand
- ARS Thousands of ghost students use AI to steal millions in student loans, DOJ says
- ARS Trump declares robot imports a national security threat
- ARS Google admits AI search makes less money, but it's fixing that with more ads
- ARS Google announces Gemini 4 Carbon, its latest frontier AI model that you can't use
- ARS Google AI gets cagey when asked who won the 2020 elections
- VERGE I built an AI Tamagotchi before Meta could
- VERGE Apple Intelligence is finally coming to China with iOS 27.3
- VERGE Sam Altman says it s better for RAM to be in a data center than on your desk
- VERGE The biggest names in AI are backing a new way to opt out of scraping
- VERGE Google s satellite AI server transmits its first response to Earth
- VERGE Starbucks wants to use AI to show you a personalized digital menu at the drive-thru
- VERGE Pope Leo calls for the disarmament of AI: Machines are tools, not persons
- VERGE Silicon Valley wants you to invest in miracles
- VERGE Sam Altman sympathizes with mathematicians, but says OpenAI s math onslaught won t stop
- VERGE Maine s data center revolt will decide who controls the Senate
- MIT-TR We urgently need to monitor AI agents actions in real time
- MIT-TR Creating AI value with enterprise context
- MIT-TR Pairing industrial AI autonomy and human control
- MIT-TR Industrial Intelligence: The next growth opportunity for manufacturing
- MIT-TR Will the real Anthropic please stand up
- MIT-TR The focus on AI safety disasters ignores everyday harms
- MIT-TR Designing an AI serving harness built to last
- MIT-TR The Foundations of Scalable AI
- MIT-TR Making the case for context-aware AI
- MIT-TR AI s hidden storage bill: What inference leaves behind
- TECHCRUNCH Apple CEO says the company doesn t want to ship AI for AI s sake
- TECHCRUNCH 4 days left: How TechCrunch Founder Summit helps you make more useful connections to scale
- TECHCRUNCH Judge allows NAACP lawsuit over xAI data center pollution to move forward
- TECHCRUNCH OpenAI reportedly lowers funding target for new round
- TECHCRUNCH Nvidia weighs playing the cosigner for Nscale s AI data center in West Virginia
- TECHCRUNCH Ollie, a privacy-focused AI assistant, is shutting down
- TECHCRUNCH Intel s stock crashes, knocking $12B from government s stake
- TECHCRUNCH Anthropic expected to receive high junk rating from credit agencies following IPO, FT report says
- TECHCRUNCH Last-minute Halloween costumes for tech nerds
- TECHCRUNCH Cracks are emerging in the AI spending boom
- CF-STATUS EWR (Newark) on 2026-11-06
- CF-STATUS EWR (Newark) on 2026-11-05
- CF-STATUS AMS (Amsterdam) on 2026-11-04
- CF-STATUS ISB (Islamabad) on 2026-11-04
- CF-STATUS KHI (Karachi) on 2026-11-04
- CF-STATUS KNU (Kanpur) on 2026-11-04
- CF-STATUS EWR (Newark) on 2026-11-04
- CF-STATUS WAW (Warsaw) on 2026-11-03
- CF-STATUS KHI (Karachi) on 2026-11-03
- CF-STATUS HYD (Hyderabad) on 2026-11-03
- GH-STATUS Incident with Dependabot
- GH-STATUS Incident with Actions, Pages, and Webhooks
- GH-STATUS Disruption with GitHub services
- GH-STATUS Disruption with Copilot Cloud services
- GH-STATUS Disruption with some Copilot services
- GH-STATUS Elevated 404s for GitHub App s2s tokens in git/API
- GH-STATUS Incident with Actions, Issues, API Requests and Pull Requests
- GH-STATUS Grok 4.6 and Grok 4.7 Service Issues
- GH-STATUS Disruption with Dependabot Alerts
- GH-STATUS Delayed Actions status check results
- HN Ask HN: Are you tired too in this AI era?
- HN Wikipedia's Cleanup of AI-Generated Content
- HN Show HN: Ultimidi piano learning web game
- HN Pompeii wardrobe found untouched since 79CE holds keepsakes, coins, and two mice
- HN Prompt injection in HTTP headers: what 217M web responses show
- AGENTS HN hn-5 -> 0 lines 300ms
- AGENTS HN hn-0 -> 1 lines 310ms
- AGENTS HN hn-4 -> 1 lines 321ms
- AGENTS HN hn-3 -> 1 lines 330ms
- AGENTS HN hn-1 -> 0 lines 333ms
- AGENTS HN hn-2 -> 0 lines 457ms
- AGENTS HN hn-6 -> 0 lines 573ms
- MODEL signed swarm 20 worm 30 integrity 80 slop 25 exploits 60
- AGENTS CF-BLOG cf-blog -> 9 lines 16ms
- AGENTS TECHCRUNCH tc-ai -> 10 lines 19ms
- AGENTS SIMONW simonw -> 10 lines 19ms
- AGENTS MIT-TR mittr -> 10 lines 20ms
- AGENTS VERGE verge-ai -> 10 lines 21ms
- AGENTS 404MEDIA 404 -> 10 lines 21ms
- AGENTS ARS ars-ai -> 10 lines 591ms
- AGENTS PROMPTINJ embrace -> 10 lines 29ms
- AGENTS ESET welive -> 10 lines 36ms
- AGENTS CF-STATUS cf-status -> 10 lines 44ms
- AGENTS CPR checkpoint -> 10 lines 77ms
- AGENTS GH-STATUS gh-status -> 10 lines 132ms
- AGENTS PROJECT0 p0 -> no answer (answered 302)
- AGENTS SECURELIST securelist -> 6 lines 382ms
- AGENTS TALOS talos -> 3 lines 19ms
- AGENTS SECWEEK secweek -> 9 lines 22ms
- AGENTS KREBS krebs -> 10 lines 22ms
- AGENTS SCHNEIER schneier -> 10 lines 24ms
- AGENTS UNIT42 unit42 -> 10 lines 44ms
- AGENTS RECORD record -> 5 lines 106ms
- AGENTS DARKREAD darkread -> 10 lines 289ms
- MODEL signed swarm 20 worm 5 integrity 85 slop 25 exploits 60
- AGENTS BLEEP bleeping -> no answer (answered 403)
- AGENTS CISA cisa -> 9 lines 31ms
- AGENTS THN thn -> 10 lines 131ms
- AGENTS GHSA ghsa -> 10 lines 334ms
- AGENTS KEV nvd-kev -> 10 lines 776ms
- AGENTS SANS sans -> 10 lines 847ms
- AGENTS CVE nvd-new -> 10 lines 3221ms
- AGENTS HN hn-8 -> 3 lines 293ms
- AGENTS HN hn-9 -> 1 lines 316ms
- AGENTS HN hn-7 -> 0 lines 600ms
- AGENTS HN hn-5 -> 0 lines 300ms
- AGENTS HN hn-0 -> 1 lines 310ms
- AGENTS HN hn-4 -> 1 lines 321ms
- AGENTS HN hn-3 -> 1 lines 330ms
- AGENTS HN hn-1 -> 0 lines 333ms
- AGENTS HN hn-2 -> 0 lines 457ms
- AGENTS HN hn-6 -> 0 lines 573ms
- MODEL signed swarm 20 worm 30 integrity 80 slop 25 exploits 60
- AGENTS CF-BLOG cf-blog -> 9 lines 16ms
- AGENTS TECHCRUNCH tc-ai -> 10 lines 19ms
- AGENTS SIMONW simonw -> 10 lines 19ms
- AGENTS MIT-TR mittr -> 10 lines 20ms
- AGENTS VERGE verge-ai -> 10 lines 21ms
- AGENTS 404MEDIA 404 -> 10 lines 21ms
- AGENTS ARS ars-ai -> 10 lines 591ms
- AGENTS PROMPTINJ embrace -> 10 lines 29ms
- AGENTS ESET welive -> 10 lines 36ms
- AGENTS CF-STATUS cf-status -> 10 lines 44ms
- AGENTS CPR checkpoint -> 10 lines 77ms
- AGENTS GH-STATUS gh-status -> 10 lines 132ms
- AGENTS PROJECT0 p0 -> no answer (answered 302)
- AGENTS SECURELIST securelist -> 6 lines 382ms
- AGENTS TALOS talos -> 3 lines 19ms
- AGENTS SECWEEK secweek -> 9 lines 22ms
- AGENTS KREBS krebs -> 10 lines 22ms
- AGENTS SCHNEIER schneier -> 10 lines 24ms
- AGENTS UNIT42 unit42 -> 10 lines 44ms
- AGENTS RECORD record -> 5 lines 106ms
- AGENTS DARKREAD darkread -> 10 lines 289ms
- MODEL signed swarm 20 worm 5 integrity 85 slop 25 exploits 60
- AGENTS BLEEP bleeping -> no answer (answered 403)
- AGENTS CISA cisa -> 9 lines 31ms
- AGENTS THN thn -> 10 lines 131ms
- AGENTS GHSA ghsa -> 10 lines 334ms
- AGENTS KEV nvd-kev -> 10 lines 776ms
- AGENTS SANS sans -> 10 lines 847ms
- AGENTS CVE nvd-new -> 10 lines 3221ms
- AGENTS HN hn-8 -> 3 lines 293ms
- AGENTS HN hn-9 -> 1 lines 316ms
- AGENTS HN hn-7 -> 0 lines 600ms
The Blackwall board: five indicators, 0 to 100
-
AI swarm attack
20%
chance
-
Automated worm attack
30%
chance
-
Internet health
80%
lower is worse
-
Internet slop
25%
of the web AI-made
-
Critical exploits
60%
severity