Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 01:28 IST · 13 sources · Get these by email

Threats, ransomware & breaches Critical Linux kernel flaw allows remote root attacks on MPTCP serversSecurity researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...] BleepingComputer · Global · 30 Oct 2026
Policy, regulation & law enforcement Friday Squid Blogging: Bigfin Squid Off California CoastNeat video: The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.… Schneier on Security · Global · 30 Oct 2026
AI security DOJ raises privacy concerns over potential sale of Character.AI chatsThe DOJ’s Executive Office for U.S. Trustees said a consumer privacy ombudsman is needed to advise the court on how to regulate what data from Character.AI can be sold and under what terms. The Record · Global · 30 Oct 2026
AI security Devs Hit by Trojanized Claude Code Extension for CursorTwo serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs). Dark Reading · Global · 30 Oct 2026
Policy, regulation & law enforcement Behind the Scenes of How Operation Blackout Went DownA recent law enforcement operation to dismantle harmful scam centers was a big success. A threat intelligence expert walks us through what happened and why he wants more of the same. Dark Reading · Global · 30 Oct 2026
Threats, ransomware & breaches Fashion retailer Resolve says hackers stole payment card informationThe company, billing itself as “the next-generation fashion retailer for Millennial and Generation Z consumers,” said a recent hack exposed customer payment card numbers. The Record · Global · 30 Oct 2026
AI security Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideChinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed by CrowdStrike to a China-based "targeted intrusion… The Hacker News · Global · 30 Oct 2026
Identity & access From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion pathsTeams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos. The post From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 30 Oct 2026
Hardware & firmware Trezor warns of suspected crypto-theft implant in hardware walletHardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia. [...] BleepingComputer · Global · 30 Oct 2026
Threats, ransomware & breaches Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breachThe state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19. The Record · Global · 30 Oct 2026
Vulnerabilities & exploits L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiaraI ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese. Dark Reading · Global · 30 Oct 2026
Industry & products Bloatware in Aftermarket Auto PartsThis story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about. Among the pre-installed bloatware—or spyware, if… Schneier on Security · Global · 30 Oct 2026
Threats, ransomware & breaches TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemTeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host. A malicious or compromised host can… The Hacker News · Global · 30 Oct 2026
Network & security devices PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressOver 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
AI security In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data LeakNoteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware. The post In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Threats, ransomware & breaches Malicious Claude Code extension on Cursor planted SSH backdoorsA malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...] BleepingComputer · Global · 30 Oct 2026
Policy, regulation & law enforcement Syrian Electronic Army hacker gets prison time for attacks on Western targetsAhmad Umar Agha, known online as “Th3Pr0,” was sentenced Thursday in federal court in Virginia to 42 months behind bars for his role in a conspiracy that was organized by former Syrian President Bashar al-Assad's closest advisers. The Record · Global · 30 Oct 2026
Threats, ransomware & breaches Undead Software Projects Continue to Raise Security RisksA security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers. Dark Reading · Global · 30 Oct 2026
Applications & supply chain WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursThreat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 through 7.1.3. It… The Hacker News · Global · 30 Oct 2026
Threats, ransomware & breaches SS7 and Diameter Attacks: How Signaling Flaws Expose Your PhoneFlaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how these attacks exploit trust between networks and how its security-focused mobile… BleepingComputer · Global · 30 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.