Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 01:28 IST · 13 sources · Get these by email

Threats, ransomware & breaches As Russia's Cyberwar Evolves, Belarus Steps ForwardThe "FrostyNeighbor" advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives. Dark Reading · Global · 30 Oct 2026
Threats, ransomware & breaches Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawDrupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13.… The Hacker News · Global · 30 Oct 2026
Threats, ransomware & breaches Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion FrozenCryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on-chain so far. Tether and Circle said they have frozen… The Hacker News · Global · 30 Oct 2026
Threats, ransomware & breaches IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increasesPhishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries. Cisco Talos · Global · 29 Oct 2026
Threats, ransomware & breaches Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice CallsA flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of… The Hacker News · Global · 29 Oct 2026
Threats, ransomware & breaches Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left OpenAn attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October. The flaw, CVE-2026-97229 (CVSS score: 10.0), can let an attacker run code on a GitLab server through a crafted regular… The Hacker News · Global · 29 Oct 2026
Threats, ransomware & breaches China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail VisibilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in… The Hacker News · Global · 29 Oct 2026
Threats, ransomware & breaches Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation CampaignsThe China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security PatchThreat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) , a case of improper authentication in the Oracle Application… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassAdobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score:… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money LaunderingThe U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response to the service being used to commit and facilitate prolific criminal activity, including "the advertisement of sexually… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersTailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained FlawsThe critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF)… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches External Teams Chats Anchor 15-Minute Malware DeliveryMail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang. Dark Reading · Global · 27 Oct 2026
Threats, ransomware & breaches Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPadsApple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when… The Hacker News · Global · 27 Oct 2026
Threats, ransomware & breaches From federal SOCs to Talos: Ryan Fetterman on practical security researchWhat does it mean to be "blue collar" for the blue team? Ryan Fetterman discusses the realities of detection engineering, and shares his philosophy on building a career in security without burning out. Cisco Talos · Global · 27 Oct 2026
Threats, ransomware & breaches State Bank of India Suffers a Customer PII Data LeakRelatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII. Dark Reading · Global · 23 Oct 2026
Threats, ransomware & breaches EMudhra Intermediate CA Certificates CompromisedEight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide. The post EMudhra Intermediate CA Certificates Compromised appeared first on Unit 42. Unit 42 · Global · 22 Oct 2026
Threats, ransomware & breaches Decades-Old Windows Utility Powers Modern ClickFix AttackThe attack uses malicious Google search results related to Amazon and leverages the "finger" utility to launch a CAPTCHA that installs malware, including the Lumma stealer. Dark Reading · Global · 21 Oct 2026
Threats, ransomware & breaches Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) appeared first on Unit 42. Unit 42 · Global · 20 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.