The Harness Is the Hard Part of Agentic Pentesting

Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections...

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone,...

U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases

Swati KhandelwalOct 21, 2026Artificial Intelligence / National Security U.S. federal civilian agencies must remove DeepSeek products from their information technology...

State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web

State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available...

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

Ravie LakshmananOct 21, 2026Vulnerability / Malware The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to...

Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion

A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report...

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

Swati KhandelwalOct 21, 2026Vulnerability / Web Security PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21,...

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

October 20, 2026

The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An...

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

October 20, 2026