Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 01:28 IST · 13 sources · Get these by email

Identity & access Passkeys Are Better Than Passwords. But They Are Not Enough.As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it. The post Passkeys Are Better Than Passwords. But They Are Not Enough. appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Threats, ransomware & breaches Bulletproof Host Virtualine Loses Its Domain to FBI SeizureIt allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments. The post Bulletproof Host Virtualine Loses Its Domain to FBI Seizure appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Threats, ransomware & breaches CISA says max severity GitLab flaw now exploited in the wildAttackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...] BleepingComputer · Global · 30 Oct 2026
Policy, regulation & law enforcement British spy agency cannot account for thousands of data storage devices, watchdog saysThe Investigatory Powers Commissioner’s Office (IPCO) in its annual report for 2025, published Thursday, said it was “very concerned” and “disappointed with the time it has taken GCHQ to investigate” the issue. The Record · Global · 30 Oct 2026
Hardware & firmware Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilisA Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis since March 2026 to… The Hacker News · Global · 30 Oct 2026
Applications & supply chain Fresh WordPress Vulnerability in Attackers’ CrosshairsThreat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution. The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Policy, regulation & law enforcement Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them MovingThe alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications available need proof that the change won’t break anything. Their concerns are practical. An IPS protection could block legitimate traffic. A… The Hacker News · Global · 30 Oct 2026
Network & security devices Microsoft finally fixes VPN issues caused by September updatesMicrosoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. [...] BleepingComputer · Global · 30 Oct 2026
Vulnerabilities & exploits Drupal Commerce Core Vulnerability Exploited Against Online StoresDrupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability Exploited Against Online Stores appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Policy, regulation & law enforcement Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in PrisonAhmad Umar Agha, a Syrian Electronic Army hacker known online as "Th3Pr0," has been sentenced by a U.S. federal court to 42 months in prison for his role in a hacking conspiracy that targeted Western news outlets. The conspiracy was organized and led by members of former Syrian President Bashar… The Hacker News · Global · 30 Oct 2026
Threats, ransomware & breaches Drupal warns of critical Commerce Core flaw exploited in attacksDrupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...] BleepingComputer · Global · 30 Oct 2026
Applications & supply chain $2 Million+ Drained From Polymarket Traders in New Supply Chain AttackMalicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds. The post $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Threats, ransomware & breaches Max-Severity GitLab Vulnerability Exploited Against Alpine LinuxTracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Operating systems & software Binance links $6.3 billion crypto theft to compromised DevOps laptopBinance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's compromised laptop. [...] BleepingComputer · Global · 30 Oct 2026
Threats, ransomware & breaches Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorCybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems. The malicious update, version 2.1.313, was… The Hacker News · Global · 30 Oct 2026
Threats, ransomware & breaches As Russia's Cyberwar Evolves, Belarus Steps ForwardThe "FrostyNeighbor" advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives. Dark Reading · Global · 30 Oct 2026
Threats, ransomware & breaches Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawDrupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13.… The Hacker News · Global · 30 Oct 2026
Network & security devices CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-97229 (CVSS score: 10.0) -… The Hacker News · Global · 30 Oct 2026
Threats, ransomware & breaches Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion FrozenCryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on-chain so far. Tether and Circle said they have frozen… The Hacker News · Global · 30 Oct 2026
Network & security devices Anthropic-Themed Phishing Emails Bypass Top Security ToolsObvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products. Dark Reading · Global · 29 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.