GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

Ravie LakshmananOct 27, 2026Vulnerability / Mobile Security Apple on Monday backported fixes for a high-severity security flaw that was exploited...

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Swati KhandelwalOct 27, 2026Vulnerability / Mobile Security Microsoft has fixed a flaw in its Authenticator app for Android that let...

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

Swati KhandelwalOct 27, 2026Cryptocurrency / Data Breach An attacker who gained access to Keystone's website obtained the key that its...

AI-Generated Fake Login Pages Are Making Account Takeovers Easier

The Hacker NewsOct 27, 2026Identity Security / Artificial Intelligence Fake login pages are nothing new, but generative AI is making...

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three...

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

Swati KhandelwalOct 27, 2026Malware / Cybercrime A criminal using the Amadey malware can no longer access or steal data from...

OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections

Swati KhandelwalOct 27, 2026Artificial Intelligence / Data Security OpenAI's compaction feature, which shrinks a long conversation to save space, could...

Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance...

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution