A daily, automatically-compiled digest of the cyber security stories that broke in the last 24 hours, drawn from 9 trusted feeds. Each entry is a short excerpt — follow the link to read the full article at its original publisher. Compiled 5 October 2026 · 16 items.
Actively exploited, critical, or high-severity flaws — patch or mitigate first.
CVSS 7.7 HIGH · Vendor: pexip Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulti…
Read at source →Lower-severity or unconfirmed-exploitation vulnerabilities.
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]
Read at source →Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is…
Read at source →Malware, campaigns and adversary tradecraft.
Milestone This is a security-oriented release with several security patches and bug fixes in the continuation of 1.30.0 . Note that our rolling-release channel ( edge ) is recommended for faster security patches. Bug fixes highlights 🐛: So…
Read at source →OpenAI is preparing to add invisible watermarks to text generated by ChatGPT and Codex in the European Union. [...]
Read at source →Italy's Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8M) over poor data-processing practices that the agency says could have put roughly one million patients at risk of data exposure and de-anonymization. [...]
Read at source →I'm delighted to introduce Alex, my fellow swigger who I've collaborated with in the past with tools like DOM Invader. He showed me that it's possible to exfiltrate larger tokens than demonstrated in
Read at source →AI-powered attacks are fast, relentless, and automated. How security teams can keep up is top of mind, according to the latest Dark Reading reader poll.
Read at source →Ransomware, data breaches and supply-chain events.
A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were easy to overlook. There are actively ex…
Read at source →The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.
Read at source →Denmark's Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals. [...]
Read at source →Detection engineering, tooling and defensive analysis.
For an experiment, I created a script [1] that parses and send the TTY logs collected from actors or bots activity that run various commands after they successfully login the DShield sensor. Those TTY logs are sent daily at the end of each…
Read at source →This article explains how Elastic SIEM uses a monthly automated telemetry pipeline to score prebuilt detection rules across noise, performance, threat, and profile dimensions, helping security teams decide which rules to enable first.
Read at source →Industry, executive and AI-security perspective.
An emerging threat group known as TA419 established seemingly legitimate professional relationships with AI policy experts working for US think tanks, universities, and legal organizations.
Read at source →This one is from 1809, written by Napoleon’s nephew.
Read at source →