The confinement structure, located about 130 kilometers (80 miles) north of Kyiv, was severely damaged in February 2025 after being struck by a Russian drone.
Most attempts were pranks, but some could fool unwary AI agents
Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft. The post AI-Powered Espionage Campaign...
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the...
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed...
They tried to sound the alarm in August
The talks apparently failed to yield a breakthrough on the fate of €200 billion ($227 billion) in Russian assets frozen by Euroclear under Belgian jurisdiction.
Damage to energy facilities in the Kyiv region has also reduced water pressure in areas of the capital on the Dnipro River's right bank. Emergency specialists are switching power supplies to water...
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed...
Russia has nearly completed construction of a major new base for launching jet-powered drones according to a report by Reuters. The facility, located near the…
SUSE Linux security advisory (AV26-1053)
In a meeting in London on Oct. 14, President Volodymyr Zelensky and U.K. Prime Minister Andy Burnham agreed on a new shipment of missiles, Bloomberg reported, citing people familiar with the...
Satellite images of the Borisoglebsk military airfield in Russia’s Voronezh Region have appeared online, the apparent result of a missile strike by Ukraine.…
[Control systems] Johnson Controls security advisory (AV26-1052)
[Control systems] Schneider Electric security advisory (AV26-1051)
The Marines have been the primary interested party in the MQ-72C, but the Army already flies the UH-72 Lakota and needs similar capabilities. The post MQ-72C Cargo Helicopter Drone Capabilities...
JetBrains security advisory (AV26-1050)
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind...
Trump announced a new facility aimed at testing autonomous weapons, space, and electronic warfare technology, supersonics and hypersonics. The post New Montana “Super Range” Complex Could Add...
Russia’s Federal Security Service (FSB) says it has detained a Swedish citizen for illegally crossing the Russian border on Thursday. The security service…
F5 security advisory (AV26-1049)
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter.
SonicWall security advisory (AV26-1048)
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One...
The suspect was identified as 36-year-old Leonid Ryzhikov, a Russian citizen from St. Petersburg who served in the 2nd Battalion of Russia's 1009th Motorized Rifle Regiment.
Nearly 48 hours after Ukraine's Starshield terminals started mysteriously malfunctioning, nobody in Washington, nor at SpaceX, has taken responsibility for the apparent decision to hobble...
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An...
Russia has exploited an EU sanctions loophole to unfreeze $3 billion worth of assets held by Belgium's Euroclear, according to a Flemish media report, and Austria's Raiffeisen Bank could be about...
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns...
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS...
North Korea claims to have launched two cruise missiles from its bizarre modified Romeo class missile boat. The post North Korea’s ‘Hunchback’ Missile Submarine Makes First At-Sea Appearance For...
Latvia's decision last week to declare Russian-born journalist and blogger Leonid Ragozin persona non grata has drawn attention to a broader trend: Russians who once presented themselves as...
Ukrainian open-source intelligence (OSINT) group Absolutely Reliable Source reported the construction on Oct. 13, citing satellite imagery. The analysts identified eight launch positions and 32...
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output...
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google's seal of approval
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public...
The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1,...
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
By 2026, the Defense Forces of Ukraine already had at their disposal several types of long-range cruise missiles and so-called missile-drones — ranging from the Long Neptune and Flamingo to the...
CEO said the workers were hired in Q2 and are still helping today
Russia’s medical universities have failed to fill their state-funded residency programs, with nearly 40% of targeted-training places remaining empty. Some universities have also struggled to fill...
Mr. President,I write these words without diplomatic formulas or ceremonial language. I write simply, from one human being to another, and from one president to another — two men who understand...
Drupal security advisory (AV26-1047)
HPE security advisory (AV26-1046)
ReversingLabs expanded the published hashes into a staging server, five stagers, two lure files and the domain-to-server links.
MFT and other trusted systems collect files, access and connections. Patching and inspecting what moves through it are separate defenses.
Google security advisory (AV26-1045)
Platform points to Iran, Russia, and China but provides no public evidence for attribution
n8n security advisory (AV26-1044)
Whether by coincidence or not, soon after 67-year-old Sergei Alpatov stepped down from his post as head of the FSB’s Economic Security Service “for health reasons,” his subordinate, General...
Thoma Bravo-owned cybersecurity company Proofpoint will buy data security firm Varonis Systems in all-cash deal valued at about $6.3 billion, the companies said on Thursday.
A Department of Transportation safety agency contact center was temporarily taken offline after a government contractor was targeted by a cyberattack, according to two people with knowledge of the...
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on...
The Army sees modular laser systems not tied to specific vehicles as key to truly operationalizing and distributing counter-drone laser capabilities. The post Army Wants High-Energy Laser Weapons...
Japanese companies have faced a growing wave of cyberattacks in recent weeks, exposing millions of customers’ records as analysts warn that artificial intelligence is helping hackers exploit...
A 36-year-old Russian serviceman suspected of killing five Ukrainian soldiers and a local fishing enthusiast has been detained in Kharkiv, the Kharkiv Regional…
The Pentagon recently established a new task force that’s charged with rapidly iterating and advancing weaponized drones and small uncrewed ground vehicles across the U.S. military. Col. Michael...
"These are frozen Russian assets held in Europe, belonging to Russians who are destroying Ukraine and killing people there every day... the idea of releasing these assets is completely out of the...
Written by: Jayson Frost, Bryce Greathouse, Brian Meyer, John Palmisano, Rajesh Rajeshirke, Steve Rasch, John Wolfram Introduction On October 15, BeyondTrust disclosed a vulnerability,...
President Volodymyr Zelensky said that Russia used a total of 850 Shahed-type drones since 09:00 a.m. on Oct. 14.
As electric grids worldwide undergo significant transformation, a new NERC white paper examines three major international blackouts and identifies critical lessons for strengthening the...
At a San Francisco playground, a stranger tried to befriend an OpenAI employee who was there with their child. The stranger also regularly showed up with a child, and, in the process of making...
The operation also destroyed the residenceof the Russian officer corps, in particular of those training the sabotage groups of the 18th Army.
Juniper Networks security advisory (AV26-1043)
Poland recently granted permission for Ukraine to conduct a search for the victims.
Russia’s Supreme Court has designated the Community of Followers of Batal-Hajji Belkhoroev (an unregistered international organization, also known as Batal…
Nearly 50 years of data caught up in breach, with probation service records also among the haul
"All of us in Europe want this war to end. And for that to happen, strong signals are needed — more real pressure on Russia and more defense support for Ukraine," Zelensky wrote on social media...
Combination creates a new cybersecurity powerhouse to deliver a complete security platform that protects against AI-accelerated threats and data risks MIAMI, FL and SUNNYVALE, CA – October 15,
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]
Nine Minds used the Huntress API and public docs to turn Huntress incident reports into AlgaPSA tickets in days. See how they did it and what you can build.
Romanian authorities opened an investigation into the possibility of a drone strike on one of the tankers, after drones violated the country's airspace overnight.
Improper restriction of XML external entity reference vulnerability (CVE-2026-88794) has been found in Sparx Systems Enterprise Architect software.
The Federal Energy Regulatory Commission (FERC) identified gaps in cybersecurity compliance among U.S. electricity sector entities, including delays... The post FERC identifies cybersecurity...
A new post from SOCRadar reported that the n0n extortion group added 38 organizations across the global maritime... The post n0n extortion claims target 38 global maritime and logistics...
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence...
While the humanitarian crisis in the Russian-occupied front-line city of Oleshky recently garnered media attention, all regions of occupied Ukraine face worsening humanitarian issues at the hands...
The term military intelligence seems like an oxymoron in this case
"Every step now to help the Russians increase their financing of the war is a bad sign. We very much stick to Volodymyr Zelensky's view on this," Swedish Prime Minister Ulf Kristersson.
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The...
"The fact that the ECHR has accepted the complaint and opened proceedings indicates that there are reasonable legal grounds for the case, that it has legal merit, and that the court intends to...
The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.
Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35088, CVE-2026-63314 and CVE-2026-63315) found in Slican telephone exchanges.
The Russian drone crashed near a 5-story residential building, damaging the facades of nearby buildings, as well as setting a car on fire.
Der Schweizer Onlinehändler Offerz ist Opfer eines Hackerangriffs geworden. Dabei haben sich Unbekannte Zugang zu sensiblen Daten von rund 115'000 Kunden verschafft. Unbekannte verschafften sich...
"This is an investment in our security, sovereignty and economic development," says the energy minister.
Officials say amendments remain under consideration despite minister's pledge to act
The attack was carried out with the Neptune coastal missile system, Ukraine's naval forces said.
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths...
Newer versions of a little-documented infostealer steal API keys and tokens from ever-growing number of AI coding assistants, including Claude, Codex, Cursor and Gemini.
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.
Researchers say the attacks have serious implications for the online advertising world, and regulators. The post AdFection: How mercenary spyware invades victims’ devices through targeted...
Daniel Tilles Polling suggests the outcome is too close to call.
What Russia is doing is "appalling and... horrific, and it illustrates that Putin is not interested in peace. That's why we must manifest our support for Ukraine in the practical ways that we...
Officers unlawfully uploaded 179 people's details to Auror without required privacy checks or corporate approval
The bill's passage is a condition for unlocking an approximately $700 million IMF tranche and 3.7 billion euros ($4.1 billion) in EU macro-financial assistance.
The Slovak-Ukrainian talks will be held in Lviv on Nov. 5 and focus on expanding border crossings, providing humanitarian assistance to Ukraine, and establishing a school for Ukrainian children in...
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. [...]
SpaceX, the owner of Starlink, implemented speed restrictions on Oct. 14 without warning.
How to ensure security across ECU software update campaigns, prevent update package tampering, and minimize potential damage to connected vehicles
Executive Summary Cyble has continued tracking GhostBat RAT activity targeting Android users in India since its initial identification in October 2025. Recent investigations into malicious...
Never making type errors does not mean never making errors
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material...
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. [...]
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by Prowler.You can hear a podcast discussion of this...
The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole...
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The...
Explore Russia's escalating internet restrictions, VPN bans, and outages, and understand the growing operational and surveillance risks for organizations.
The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that...