Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and...

Pegasus Spyware Infection Confirmed on Serbian University Rector’s iPhone Days Before Election

The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement,...

WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators

WhatsApp's help pages carried hidden instructions for its support chatbot that told it not to recommend a data protection authority...

What Security Teams Can Do To Tame Wild Code

A sales manager builds an AI-assisted workflow to route leads. It connects to customer records, summarizes inbound requests, and posts...

Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns

Swati KhandelwalOct 20, 2026Encryption / Software Security Go 1.27.3 and Go 1.26.10, released on October 20, make Go's certificate verifier...

Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader

The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks...

ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident

Ravie LakshmananOct 20, 2026Cloud Security / Incident Response ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access...

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool...

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan