ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

Swati KhandelwalOct 22, 2026Vulnerability / Linux Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly...

Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations

Ravie LakshmananOct 22, 2026Data Privacy / Regulatory Social media giant Meta was ordered to pay 25 billion in penalties by...

INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown

Ravie LakshmananOct 22, 2026Cybercrime / Law Enforcement INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909...

The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

The Hacker NewsOct 22, 2026Enterprise Security / Artificial Intelligence Right now, there is probably an AI agent running on a...

Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation,...

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

Swati KhandelwalOct 22, 2026Vulnerability / Artificial Intelligence A flaw in the OpenCode AI coding agent allowed a malicious or hijacked...

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python...

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Swati KhandelwalOct 22, 2026Vulnerability / Web Security Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x...

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification