Today in security.

Everything · 120 items

1. perl-GD-SecurityImage-1.75-22.fc43Fedora security updates (Bodhi) · Oct 11
2. perl-GD-SecurityImage-1.75-23.fc44Fedora security updates (Bodhi) · Oct 11
3. perl-GD-SecurityImage-1.75-24.fc45Fedora security updates (Bodhi) · Oct 11
4. Internal files add to evidence of an ExxonMobil climate deception campaignHacker News · Oct 11
5. Nippon Columbia malware incident exposes 8.6 million karaoke fan recordsBleepingComputer · Oct 11
6. Open-Source Microsoft Office Excel, PowerPoint, and Word ReplicationsHacker News · Oct 11
7. Terence Tao: Math 2.0 [pdf]Hacker News · Oct 11
8. perl-Net-Whois-Raw-2.99.044-1.fc45Fedora security updates (Bodhi) · Oct 11
9. perl-Net-Whois-Raw-2.99.044-1.fc43Fedora security updates (Bodhi) · Oct 11
10. perl-Net-Whois-Raw-2.99.044-1.fc44Fedora security updates (Bodhi) · Oct 11
11. mkvtoolnix-96.0-2.fc43Fedora security updates (Bodhi) · Oct 11
12. libebml-1.4.7-1.fc44 libmatroska-1.7.2-1.fc44 mkvtoolnix-102.0-1.fc44Fedora security updates (Bodhi) · Oct 11
13. The tilde in your PATH may not be your HOMEHacker News · Oct 11
14. Valen's Memory Safety: A New Kind of Borrow CheckingHacker News · Oct 11
15. Show HN: BetterWispr – Free, open-source dictation for MacHacker News · Oct 11
16. Weave (YC W25) is hiring ML, AI, product, & design engineersHacker News · Oct 11
17. perl-Net-IDN-Encode-2.502-1.fc45Fedora security updates (Bodhi) · Oct 11
18. perl-Net-IDN-Encode-2.502-1.fc44Fedora security updates (Bodhi) · Oct 11
19. perl-Net-IDN-Encode-2.502-1.fc43Fedora security updates (Bodhi) · Oct 11
20. I paid people to try and follow my READMEHacker News · Oct 11
21. rclone-1.75.2-2.el9Fedora security updates (Bodhi) · Oct 11
22. Nitter: Update Oct 10th seeking funding and legal helpHacker News · Oct 11
23. IRCv3Hacker News · Oct 11
24. rclone-1.75.2-1.fc45Fedora security updates (Bodhi) · Oct 11
25. xapian-bindings-1.4.32-1.fc46 xapian-core-1.4.32-1.fc46Fedora security updates (Bodhi) · Oct 11
26. 3rd Yandex Cloud Data Center Was HitHacker News · Oct 11
27. LineageOS 24.0Hacker News · Oct 11
28. ImageMagick-7.1.2.33-1.fc44Fedora security updates (Bodhi) · Oct 11
29. ImageMagick-7.1.2.33-1.fc45Fedora security updates (Bodhi) · Oct 11
30. ImageMagick-7.1.2.33-1.fc43Fedora security updates (Bodhi) · Oct 11
31. ImageMagick-7.1.2.33-1.fc46Fedora security updates (Bodhi) · Oct 11
32. P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote CommandsThe Hacker News · Oct 11
33. PSPi 6 – Raspberry Pi in a PSPHacker News · Oct 10
34. Build your own decision modelHacker News · Oct 10
35. libheif-1.23.6-1.fc43Fedora security updates (Bodhi) · Oct 10
36. libheif-1.23.6-1.el10_4Fedora security updates (Bodhi) · Oct 10
37. A city-building game in which the city would prefer you didn'tHacker News · Oct 10
38. Knuth reward checkHacker News · Oct 10
39. Cyber exec arrested in case allegedly tied to ShinyHunters hackersBleepingComputer · Oct 10
40. ARTEX AI, Claude agents used in cyberattacks on South Korean banksBleepingComputer · Oct 10
41. Criminal IP Introduces AITEM as the Next Evolution of Attack Surface ManagementBleepingComputer · Oct 10
42. AI Is Getting Really Good at Messing With CybercriminalsWIRED Security · Oct 10
43. The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn'tThe Hacker News · Oct 10
44. Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in PrisonSecurityWeek · Oct 10
45. Talorys – A self-hosted personal AI agent on Cloudflare's free tierHacker News · Oct 10
46. When Ldaxr Doesn't Work: Exclusive Accesses and Cacheability on AArch64Hacker News · Oct 10
47. Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection FlawsThe Hacker News · Oct 10
48. Why TLP should not replace your internal information classification, (Sat, Oct 10th)SANS Internet Storm Center · Oct 10
49. GhostAction Hackers Compromise 500+ GitHub Accounts to Steal Cloud and AI API CredentialsGBHackers · Oct 10
50. Iranian VPN-over-DNS Activity Generates 40 Billion DNS Observations During Military ConflictGBHackers · Oct 10
51. DarkBlinders Hackers Use Fake Meeting App to Deploy Backdoor and Steal Government DataGBHackers · Oct 10
52. Two AhsayCBS Zero-Day Vulnerabilities Actively Exploited to Take Over Backup ServersGBHackers · Oct 10
53. Hackers Use AI Agents and GodPotato Exploit to Gain Windows SYSTEM PrivilegesGBHackers · Oct 10
54. Rat's Register AllocatorHacker News · Oct 10
55. AWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single PromptGBHackers · Oct 10
56. The Lightbulb ComputerHacker News · Oct 10
57. The RAM shortage is bringing back DDR4Hacker News · Oct 9
58. FBI Arrests Executive at Ransomware Negotiation FirmKrebs on Security · Oct 9
59. DSA-6550-1 ghostscript - security updateDebian Security Advisories (DSA) · Oct 9
60. OpenAI Fires 3 Safety Researchers in Dispute Over AI RisksSecurityWeek · Oct 9
61. Microsoft 365 incident readiness for Microsoft Engage CenterWindows Release Health · Oct 9
62. ASOS Breach Reveals the Risks in Customer-Facing SaaSDark Reading · Oct 9
63. Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacksBleepingComputer · Oct 9
64. Friday Squid Blogging: I Caught a SquidSchneier on Security · Oct 9
65. AI Scramble Drives Cybersecurity M&A BoomDark Reading · Oct 9
66. Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of RepositoriesThe Hacker News · Oct 9
67. Japan confirms arrest of Russian Qilin operative, extradition to GermanyThe Record · Oct 9
68. Rolling the Root KeyHacker News · Oct 9
69. FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal HackThe Hacker News · Oct 9
70. Windows 11, version 26H1 known issues and notificationsWindows Release Health · Oct 9
71. Windows 11, version 23H2 known issues and notificationsWindows Release Health · Oct 9
72. What We Missed: FBI Strikes Back at ShinyHuntersDark Reading · Oct 9
73. Unpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoBleepingComputer · Oct 9
74. FBI arrests another suspected ShinyHunters hacker after agency breachBleepingComputer · Oct 9
75. Security Threats Don't Stop at the Office: Why Executives' Families Need Training, TooDark Reading · Oct 9
76. Hundreds of thousands impacted by data breach at biosensor firm iRhythmThe Record · Oct 9
77. Leader of vast money mule operation that laundered cybercriminal proceeds pleads guiltyThe Record · Oct 9
78. FBI touts another ShinyHunters arrest in response to data breachThe Record · Oct 9
79. Germany arrests alleged core Qilin ransomware member after extraditionBleepingComputer · Oct 9
80. Five months treating bugs like patients and coding agents like a medical teamHacker News · Oct 9
81. Wikimedia Says Rogue AI Agents Abused its PlatformsInfosecurity Magazine · Oct 9
82. Belarusian hacktivists admit to 2023 breach of Russian state healthcare networkThe Record · Oct 9
83. RHSA-2026:79786: Important: kernel security updateRed Hat Security Advisories (RHSA) · Oct 9
84. How to keep AI agents within their permissionsBleepingComputer · Oct 9
85. CVE-2026-62744 Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
86. CVE-2026-68875 Windows NTFS Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
87. CVE-2026-68878 Windows Fast FAT Driver Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
88. CVE-2026-69281 Windows License Manager Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
89. CVE-2026-69337 Windows Registry Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
90. CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
91. CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
92. CVE-2026-69693 Windows Device Association Broker Service Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
93. CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
94. CVE-2026-72979 Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
95. CVE-2026-72982 Windows Netlogon Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
96. CVE-2026-68880 Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
97. CVE-2026-69277 Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
98. CVE-2026-69301 Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
99. CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
100. CVE-2026-69324 Windows Performance Monitor Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
101. CVE-2026-69340 Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
102. CVE-2026-69385 Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
103. CVE-2026-69433 Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
104. CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
105. CVE-2026-69566 Windows NTFS Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
106. CVE-2026-69688 Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
107. CVE-2026-72987 Windows DNS Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
108. CVE-2026-73006 DirectWrite Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
109. CVE-2026-69598 Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
110. TP-Link Sued by Four More U.S. States Over Router Security and China TiesThe Hacker News · Oct 9
111. Social Engineering AI Agents: The New BEC for 2026Dark Reading · Oct 9
112. Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root AccessThe Hacker News · Oct 9
113. Anthropic Launches Free AI Vulnerability Scanner for Open-Source ProjectsThe Hacker News · Oct 9
114. Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft EdgeThe Hacker News · Oct 9
115. Max severity SonicWall SMA1000 flaw now exploited in attacksBleepingComputer · Oct 9
116. React Server Components Vulnerability Lets Attackers Freeze Next.js Servers With a Single RequestGBHackers · Oct 9
117. Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal AgenciesThe Hacker News · Oct 9
118. In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 YearsSecurityWeek · Oct 9
119. Q3 2026 Sets New Record for Ransomware AttacksInfosecurity Magazine · Oct 9
120. USN-8911-1: Linux kernel (OEM) vulnerabilitiesUbuntu Security Notices (USN) · Oct 9