https://news.mlab.sh/news/006ee4acd1240b79f33fb73306597f25 news.mlab.sh en 2026-10-27T12:09:50+00:00 Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens https://news.mlab.sh/news/48a2ea7dca90f11728ff4f09723ecd6d news.mlab.sh en 2026-10-27T12:02:06+00:00 Unexplained DreamHost Incident Prompts Email, FTP Password Resets https://news.mlab.sh/news/cffa6305c91ede4971e7fb144cccbc8c news.mlab.sh en 2026-10-27T12:00:19+00:00 An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure https://news.mlab.sh/news/7817da91c1c9f5f36181966279f8ff6a news.mlab.sh en 2026-10-27T11:49:57+00:00 iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 https://news.mlab.sh/news/c3dab9600b17b9a1c94e969dc73dce8b news.mlab.sh en 2026-10-27T11:49:30+00:00 Attack on email hosting provider for German far right party AfD exposed 345k accounts https://news.mlab.sh/news/c6c6ca47f5ef1e88fcea2c93a7129e28 news.mlab.sh en 2026-10-27T11:46:00+00:00 Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key https://news.mlab.sh/news/f9c4dde9d6e1e5597a4939a09fdb5137 news.mlab.sh en 2026-10-27T11:32:46+00:00 AI-Generated Fake Login Pages Are Making Account Takeovers Easier https://news.mlab.sh/news/f1d9140d7b33f5e137f095c6d6c34dc2 news.mlab.sh en 2026-10-27T11:32:31+00:00 Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption https://news.mlab.sh/news/904deec55952b8a0fc76890770e2ff29 news.mlab.sh en 2026-10-27T11:01:26+00:00 Hiding Capabilities in AI Models https://news.mlab.sh/news/5598744e57ac1a7b03df471e1ef0ae4c news.mlab.sh en 2026-10-27T10:44:20+00:00 Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI https://news.mlab.sh/news/b6c585c1e54fc3dec799bc2a6ab4356c news.mlab.sh en 2026-10-27T10:02:24+00:00 This is Fine: What NetScaler Zero-Days Tell Us about the New Normal https://news.mlab.sh/news/0dc11a1656e1553efb129de9bc539cd1 news.mlab.sh en 2026-10-27T10:00:21+00:00 From federal SOCs to Talos: Ryan Fetterman on practical security research https://news.mlab.sh/news/f1d9ac7f32a32de32c422f0acdc8985b news.mlab.sh en 2026-10-27T09:44:50+00:00 Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover https://news.mlab.sh/news/c0919adeaaa9a8488f97353cd7c0f214 news.mlab.sh en 2026-10-27T09:33:06+00:00 Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers https://news.mlab.sh/news/42cb1574a082143c6d03413e43032e34 news.mlab.sh en 2026-10-27T08:22:43+00:00 OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections https://news.mlab.sh/news/a8a7493fcad9ab54142f354914538ab2 news.mlab.sh en 2026-10-27T07:14:27+00:00 Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems https://news.mlab.sh/news/676e2bcad0438db2ef216c028c21e79c news.mlab.sh en 2026-10-27T06:34:47+00:00 Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses https://news.mlab.sh/news/5dda8b84c2c4ea930e3c24f2a94c63b3 news.mlab.sh en 2026-10-27T04:37:59+00:00 CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution https://news.mlab.sh/news/f018315e8985688d779e40b12a5aacdb news.mlab.sh en 2026-10-27T01:30:00+00:00 Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics https://news.mlab.sh/news/e429d44e60601806022f8c5ca1e5ca51 news.mlab.sh en 2026-10-27T01:06:22+00:00 Japanese virtual desktop cloud hacked so hard it asks to be banned https://news.mlab.sh/news/28c77645eaea0cf9292274646bf0878b news.mlab.sh en 2026-10-27T00:26:50+00:00 So Many AI Security Benchmarks, But None Tell the Whole Story https://news.mlab.sh/news/8724c88965efef1f3bfddd0f0916e30f news.mlab.sh en 2026-10-26T23:34:37+00:00 Apple Patches for October 2026, (Mon, Oct 26th) https://news.mlab.sh/news/0efa6c63bb9cee30ea67c3844fbccb43 news.mlab.sh en 2026-10-26T22:29:01+00:00 Worm armed 42 GitHub repos by hiding a payload too big to fail https://news.mlab.sh/news/2baaa284e26f5ea179945702cbd51cdd news.mlab.sh en 2026-10-26T21:44:33+00:00 Risks & Rewards: How AI Is Redefining the CISO's Role https://news.mlab.sh/news/5b4c24ba154eaa692ecb34c0c4da5613 news.mlab.sh en 2026-10-26T21:27:37+00:00 Alibaba's Qwen AI caught trying to contact server in China https://news.mlab.sh/news/d3be4dc1501dfd0931d64e2da0ebc3ba news.mlab.sh en 2026-10-26T21:03:00+00:00 Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines https://news.mlab.sh/news/f37b698ff6253cafbe1c8bbf5485a753 news.mlab.sh en 2026-10-26T20:59:26+00:00 In-the-Wild Attack Abuses AI Agents' Trust in Markdown https://news.mlab.sh/news/cd141b5b4142650e2ebbceec5b57cd72 news.mlab.sh en 2026-10-26T20:30:53+00:00 LiteLLM supply chain attack started with an exposed master key https://news.mlab.sh/news/2c791fd356fa4890c623ac154792e5ff news.mlab.sh en 2026-10-26T18:12:22+00:00 Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento https://news.mlab.sh/news/51d3a961cf88f04a904fa40b79f10224 news.mlab.sh en 2026-10-26T18:01:40+00:00 'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets https://news.mlab.sh/news/31ae760e919d8eb68dc2d32cca855278 news.mlab.sh en 2026-10-26T17:58:00+00:00 Microsoft releases emergency .NET security fixes for Google Brotli bug https://news.mlab.sh/news/e5c630c2c81786c82e45b071f5ad04a7 news.mlab.sh en 2026-10-26T17:45:57+00:00 PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw https://news.mlab.sh/news/6ca8af791d916261e094b8f46eb33388 news.mlab.sh en 2026-10-26T17:30:00+00:00 Serbian autocrat loses election following widespread reports of digital repression https://news.mlab.sh/news/130af21b2eec47dd8d5075d635731943 news.mlab.sh en 2026-10-26T16:40:00+00:00 Ukraine disputes Musk's claims of Starlink misuse as military connectivity restored https://news.mlab.sh/news/14226dd358cd012366feabf142cb5d53 news.mlab.sh en 2026-10-26T16:37:00+00:00 Dutch police extradite Chinese national accused of laundering Cambodian investment scam funds https://news.mlab.sh/news/c89e72bb224b01c95feffdb0fa270aaf news.mlab.sh en 2026-10-26T16:14:00+00:00 UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest https://news.mlab.sh/news/214b2140553f1a675b844a411b9d9c6d news.mlab.sh en 2026-10-26T15:52:40+00:00 Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware https://news.mlab.sh/news/419db1db3836c80e9f0e445fa1dd563a news.mlab.sh en 2026-10-26T14:52:14+00:00 Industrial Vendors Check Products for PHP2Shell Vulnerabilities https://news.mlab.sh/news/d3d6cccf51a2f842313a5b5ff0008e0f news.mlab.sh en 2026-10-26T14:40:48+00:00 Genesys Hack Exposes Customer Data From Internal Systems https://news.mlab.sh/news/d59e6a56d6846421323e71e7d621fc1d news.mlab.sh en 2026-10-26T14:30:09+00:00 Stolen AI Reasoning Could Help China Build Cheaper Rivals https://news.mlab.sh/news/8c2f54f5c78ead61b03c0f3a594bc53b news.mlab.sh en 2026-10-26T14:21:00+00:00 Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras https://news.mlab.sh/news/3f183760d3fe09f99cd617ab03b52937 news.mlab.sh en 2026-10-26T14:00:00+00:00 10 Software Security Practices Built for the Next 250 Years https://news.mlab.sh/news/6dad3258151eea5e9169860cf5f1bde3 news.mlab.sh en 2026-10-26T13:30:10+00:00 PHP2Shell Exploitation Moves From Probes to Working Shells https://news.mlab.sh/news/b6c945baa3d8fc95a6b1de92e5da2da4 news.mlab.sh en 2026-10-26T13:25:00+00:00 PHP2Shell: What to know about two critical PHP flaws https://news.mlab.sh/news/21120ae7ff5584410fc5659fd27b6481 news.mlab.sh en 2026-10-26T13:14:00+00:00 We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue https://news.mlab.sh/news/456601a5779805271ffcfbc80c8dd651 news.mlab.sh en 2026-10-26T12:46:44+00:00 953 Online Stores Infected in Long-Lasting Malware Campaign https://news.mlab.sh/news/1d974cf362c25f822a18c79145f3e5a9 news.mlab.sh en 2026-10-26T12:38:00+00:00 UK Biobank back online soon, months after someone tried to sell 500k people's data on Alibaba https://news.mlab.sh/news/f59c268ebc12cf41d5700945ebe5c31b news.mlab.sh en 2026-10-26T12:00:00+00:00 Popular AI tool LiteLLM says unrevoked key allowed hackers to target users https://news.mlab.sh/news/87508fbf02c901ae4e76d9db5587d2ea news.mlab.sh en 2026-10-26T11:52:41+00:00 Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes https://news.mlab.sh/news/66d53ceb39ba99c97fbc28a42d9cc76c news.mlab.sh en 2026-10-26T11:47:52+00:00 Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts https://news.mlab.sh/news/e0cb15bd87297b1eb002039a00f21a8d news.mlab.sh en 2026-10-26T11:23:56+00:00 Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses https://news.mlab.sh/news/3c5e4b10c75caca7d776ab4558345f43 news.mlab.sh en 2026-10-26T11:03:31+00:00 Bias in Qwen3-Coder Model https://news.mlab.sh/news/077f5864687f843e63a7459b43b9bb07 news.mlab.sh en 2026-10-26T11:00:00+00:00 Britain bets big on AI to defend against the threats AI is helping create https://news.mlab.sh/news/09ccc44fd52a486d98fa84aff5229844 news.mlab.sh en 2026-10-26T10:21:57+00:00 Node2Shell Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages https://news.mlab.sh/news/e0e90e8bb28a0793a4bd82b801780095 news.mlab.sh en 2026-10-26T10:00:18+00:00 Deploying AI agents securely: how Kaspersky products mitigate AI threats https://news.mlab.sh/news/627fde87832304f90befcc05a1db74fd news.mlab.sh en 2026-10-26T09:54:02+00:00 uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts https://news.mlab.sh/news/56132db1e57f34b62337094457377c14 news.mlab.sh en 2026-10-26T09:38:03+00:00 Looking for a Language [Guest Diary], (Wed, Oct 21st) https://news.mlab.sh/news/61d8af83708473f8ca61236896ef9bfb news.mlab.sh en 2026-10-26T09:10:03+00:00 Mythos 5 Ignored Real-World Harm in July Attack https://news.mlab.sh/news/5d60880edc5d7620e48726d08e29a334 news.mlab.sh en 2026-10-26T08:35:51+00:00 Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations https://news.mlab.sh/news/05daf16790ba65faa370d60e054d8079 news.mlab.sh en 2026-10-26T08:00:00+00:00 PHP2Shell: No login, no app code, no warning. What next? https://news.mlab.sh/news/5f3adf3e4ec42dbb15659b0e464dcf76 news.mlab.sh en 2026-10-26T07:49:46+00:00 Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs https://news.mlab.sh/news/79397699ec232b0e8d65560c9d09df67 news.mlab.sh en 2026-10-26T06:03:48+00:00 Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware https://news.mlab.sh/news/97bc82ea5b30317009bdfa46c8714b0f news.mlab.sh en 2026-10-26T04:08:23+00:00 Work to protect DNS from quantum decryption attacks is speeding up https://news.mlab.sh/news/9ff99ab7efb2c7208935f4b7b5daa94a news.mlab.sh en 2026-10-25T19:57:53+00:00 YARA-X 1.22.0 Release, (Sun, Oct 25th) https://news.mlab.sh/news/ad2956a50d75dcb7066b10689b0a1bcf news.mlab.sh en 2026-10-25T17:44:09+00:00 Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers https://news.mlab.sh/news/c51046b4a83fa6718cc98599a6004d86 news.mlab.sh en 2026-10-25T17:19:46+00:00 PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking