Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 13 sources · Get these by email

AI security Rethinking Cybersecurity Awareness in the AI EraThis installment of the Reporters' Notebook video series discusses some of the trends and topics from Cybersecurity Awareness Month, from using AI for better training to educating next-generation workforces on modern risks and emerging threats. Dark Reading · Global · 29 Oct 2026
AI security Why CTF Competitions May Be More Important Than EverAs artificial intelligence squeezes early-career learning opportunities, capture-the-flag contests could be one way to help pick up the slack. Dark Reading · Global · 29 Oct 2026
Network & security devices ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesSome attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't. There's a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from… The Hacker News · Global · 29 Oct 2026
AI security Claude Model Builds Exploits Across Major Browsers & OSesAn unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says. Dark Reading · Global · 29 Oct 2026
Applications & supply chain Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29) appeared first on Unit 42. Unit 42 · Global · 29 Oct 2026
Applications & supply chain A quiet week in infosec <.<In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all, there are still good people doing good work. Cisco Talos · Global · 29 Oct 2026
AI security Tracking AI adoption in North Korean threat actor tradecraftAs Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified North Korean threat actors expanding their use of AI with varying levels of adoption. This blog breaks down how North Korean threat actors are… Microsoft Security Blog · Global · 29 Oct 2026
Operating systems & software IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor AssessmentIDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The post IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 29 Oct 2026
AI security Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsA flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that its AI model wrote an exploit that uses the flaw… The Hacker News · Global · 29 Oct 2026
Industry & products Threat Modeling With 4 Simple Questions on a White BoardA four-question exercise that CISOs can use to create a threat model that promises results, without a big spend. Dark Reading · Global · 29 Oct 2026
AI security Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersThreat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop… The Hacker News · Global · 29 Oct 2026
Threats, ransomware & breaches IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increasesPhishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries. Cisco Talos · Global · 29 Oct 2026
Vulnerabilities & exploits Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching VulnerabilitiesGoogle on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. "It shows significant gains across coding and agentic tasks as well as across key capabilities critical for cybersecurity defense, landing a firm… The Hacker News · Global · 29 Oct 2026
AI security Webinar: How to Build AI Threat Readiness Into Your Security OperationsSecurity teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models can now help attackers discover vulnerabilities, generate exploit code, and move through weaknesses faster than traditional security… The Hacker News · Global · 29 Oct 2026
Threats, ransomware & breaches Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice CallsA flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of… The Hacker News · Global · 29 Oct 2026
AI security The Rise of the Threat Operator: How AI Will Redefine Security Operations and CareersAI is beginning to take over much of the work that has traditionally defined the security analyst's job. Investigating alerts, collecting evidence, correlating activity across tools, and executing response actions are becoming tasks that AI systems can perform on their own. As these capabilities… The Hacker News · Global · 29 Oct 2026
AI security 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code could have used it. Independent researcher Ben Zimmermann found them by scanning 7.25 million public Gitee repositories… The Hacker News · Global · 29 Oct 2026
Network & security devices Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash FirewallsCisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-76418, is rated 8.6 on the CVSS… The Hacker News · Global · 29 Oct 2026
Policy, regulation & law enforcement GitHub Launches npm Firewall to Block Malicious Packages Before InstallationGitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate,"… The Hacker News · Global · 29 Oct 2026
AI security NIK C2: The new AI-enabled command-and-control frameworkCisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.” Cisco Talos · Global · 29 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.