Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 13 sources · Get these by email

Policy, regulation & law enforcement Workshop on Economics and Information Security (WEIS) ArchiveThere’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay on the economics of information security. Schneier on Security · Global · 21 Oct 2026
Network & security devices Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackersAdversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than 25 legitimate platforms over the past year, exploiting the built-in trust of collaboration, file-sharing, payment and other services to reach their targets. Cisco Talos · Global · 21 Oct 2026
Operating systems & software Tech Giants Block eMudhra Certificates Tied to 8 Compromised KeysGoogle, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised. Dark Reading · Global · 20 Oct 2026
Threats, ransomware & breaches Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) appeared first on Unit 42. Unit 42 · Global · 20 Oct 2026
Policy, regulation & law enforcement Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQThe perp, who has Saudi ties, was arrested for allegedly bugging an OpenAI conference room, highlighting a preventable insider threat vector. Dark Reading · Global · 20 Oct 2026
AI security Close Identity Gaps in Software Development Before Unleashing AIArtificial intelligence is complicating security in the software development life cycle, but a Dark Reading roundtable found collaboration, better identity visibility, and reduced testing costs offer CISOs a way ahead. Dark Reading · Global · 20 Oct 2026
Vulnerabilities & exploits There's only so much code: the rise in vulnerability numbersThe September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where did they come from? And what does the future look like? Cisco Talos · Global · 20 Oct 2026
AI security Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack SpreeA Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins. Dark Reading · Global · 20 Oct 2026
AI security Introducing a new AI chapter in the NCSC research problem bookA revolution is underway at the intersection of AI and cyber security. UK NCSC · United Kingdom · 20 Oct 2026
Threats, ransomware & breaches Possible new Cellebrite iPhone Radio Zero-DayJustin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A press release from earlier this year confirms AU is a new… Schneier on Security · Global · 20 Oct 2026
Threats, ransomware & breaches Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion SiteU.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources… Krebs on Security · Global · 19 Oct 2026
Cloud & SaaS Agents are your newest insiders. Security must move at their speed.New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection continuously. The post Agents are your newest insiders. Security must move at their speed. appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 19 Oct 2026
Threats, ransomware & breaches Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential abuse and phishing The post Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026 appeared first on Unit 42. Unit 42 · Global · 16 Oct 2026
AI security Managing open-weight model risk in enterprise deploymentsNew whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and controls. The post Managing open-weight model risk in enterprise deployments appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 16 Oct 2026
AI security AI-Powered Espionage Campaign Targets Government Linux InfrastructureOur analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft. The post AI-Powered Espionage Campaign Targets Government Linux Infrastructure appeared first on Unit 42. Unit 42 · Global · 15 Oct 2026
Vulnerabilities & exploits The Q3 Vulnerability Pulse: Discovery ≠ ExploitationIs the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter. Cisco Talos · Global · 15 Oct 2026
Policy, regulation & law enforcement Using TLS to protect dataRecommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions. UK NCSC · United Kingdom · 15 Oct 2026
Policy, regulation & law enforcement Post-quantum updates to our TLS guidanceThe NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate. UK NCSC · United Kingdom · 15 Oct 2026
Network & security devices Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate ImplantWe investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware. The post Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant appeared first on Unit 42. Unit 42 · Global · 14 Oct 2026
Policy, regulation & law enforcement U.K. Sanctions Cryptomus for RU Money LaunderingThe United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial… Krebs on Security · Global · 14 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.