IoT & Hardware

Help Net Security

An AI SOC that starts with somebody else’s alert is already too late. Stellar Cyber collects and normalizes telemetry, detects suspicious activity, correlates evidence, builds cases, investigates incidents, triages findings, and drives response from the same security architecture. That gives people and AI access to the…

ICS / OT & Critical Infrastructure

Waterfall Security

PHP2Shell shows frontier AI turning long-known, hard-to-exploit vulnerabilities into real attacks. Andrew Ginter on what AI can and cannot do for attackers, and why OT defenders must engineer attack paths away.

IoT & Hardware

The Hacker News · 23 Oct

Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks aim to exploit CVE-2026-109618 and CVE-20…

ICS / OT & Critical Infrastructure

Industrial Cyber · 22 Oct

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), the U.S. Secret Service (USSS), and international partners warned that SafePay, one of the most active ransomware groups this year, has compromised roughly 600 organizations across multiple critical infrastructu…

ICS / OT & Critical Infrastructure

Industrial Cyber · 22 Oct

Black Kite, provider of third-party cyber risk management solutions, announced the release of Quantum Readiness, a new set of controls within the SSL/TLS Strength category of the Black Kite Cyber Rating that evaluates quantum agility across an organization’s third-party vendor ecosystem. Quantum Readiness surfaces whic…

Malware & Tooling

GBHackers

Malware campaigns that combine phishing, obfuscated VBScript, PowerShell, and legitimate Windows applications to conceal infections targeting users in Brazil and Portugal. The investigation covers Overlord RAT, Lampion, and an unidentified payload delivered through a malicious newdev.dll. Rather than exploiting Windows…

Vulnerabilities & Exploits

GBHackers

Microsoft released emergency out-of-band security updates addressing four vulnerabilities across .NET, including a Brotli buffer overflow and incomplete fixes from an earlier October release. The updates apply to .NET 8, .NET 9, .NET 10, and .NET 11 Release Candidate 3. Microsoft recommends updating as soon as possible…

Vulnerabilities & Exploits

GBHackers

A high-severity vulnerability in Microsoft Authenticator for Android could let a malicious app, without any Android permissions, impersonate trusted Microsoft apps and steal authentication tokens for a victim’s signed-in work account. This vulnerability is tracked as CVE-2026-80097 and affects Microsoft Authenticator v…