Posts of last few hours

$11 million plan for psychological support at Cyber Command gets fresh boost from lawmakers
Lawmakers who oversee military cyber policy as well as the Fort Meade, Maryland, hub for those agencies say an $11 million mental health program should be locked in to defense spending legislation.
https://therecord.media/cyber-command-mental-health-support-program-bipartisan-letters
Пентагон отправляет четыре лазерно-микроволновые системы на реальные базы
Годовой тест покажет, выдержит ли новое оружие обычную военную эксплуатацию.
https://www.securitylab.ru/news/578436.php
Arizona courts say hackers stole info on more than 1.3 million people
The investigation into the incident revealed cybercriminals were able to breach the Fines/Fees and Restitution Enforcement (FARE) Program, a statewide program that helps the court collect outstanding debts tied to traffic and criminal violations.
https://therecord.media/arizona-courts-say-hackers-stole-info-on-over-1-million
Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys (Updated)
Dread dark web forum appears hijacked after a pinned post claimed control of the project and domain keys, while denying plans to leak user data.
https://hackread.com/dread-dark-web-forum-hijacked-domain-keys/
Arista Networks security advisory (AV26-1015)
https://cyber.gc.ca/en/alerts-advisories/arista-networks-security-advisory-av26-1015
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances
SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of 10.0. The issue is a pre-authentication SSRF bug in the WorkPlace portal that could […]
https://securityaffairs.com/200569/security/sonicwall-fixes-max-severity-pre-auth-flaw-in-sma1000-appliances.html
ИИ-чипы перестают быть только рынком Nvidia. Marvell повышает ставки
Один крупный заказчик способен резко изменить масштаб бизнеса.
https://www.securitylab.ru/news/578435.php
AMD security advisory (AV26-1014)
https://cyber.gc.ca/en/alerts-advisories/amd-security-advisory-av26-1014
Weekly Threat Bulletin – October 7th, 2026
These are the top threats you should know about this week.
https://www.f5.com/labs/articles/weekly-threat-bulletin-october-7th-2026
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a lone threat actor who appears to have published 12 packages since August 2023, eight of which have
https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html
Discord Users’ Data Exposed in Security Bot Double Counter Security Breach

Double Counter, a Discord security bot, has disclosed a breach that exposed user data after an attacker broke into its cloud systems on October 4, 2026. Attackers copied about 12 GB of database records, and the stolen bot token was used to post unwanted invitations across roughly 50 large Discord servers. According to Double Counter’s […]

The post Discord Users’ Data Exposed in Security Bot Double Counter Security Breach appeared first on Cyber Security News.

https://cybersecuritynews.com/discord-users-data-exposed/
Чёрная дыра в центре Галактики может швыряться частицами через процесс Пенроуза 1969 года
Физики рассчитали механизм, который разгоняет протоны до 10 ПэВ за счёт вращения Стрельца A*.
https://www.securitylab.ru/news/578457.php
Qualcomm security advisory (AV26-1013)
https://cyber.gc.ca/en/alerts-advisories/qualcomm-security-advisory-av26-1013
Alert Overload, Tool Sprawl and Evasive Phishing: The 5 Bottlenecks Slowing Down US SOCs 

US security operations centers are not short on security products. They are short on time, people and context. Current industry research suggests the biggest obstacles to fast detection and containment are operational: too many alerts, too much manual triage, investigations split across disconnected tools, and phishing campaigns built to slip past standard checks.  A new […]

The post Alert Overload, Tool Sprawl and Evasive Phishing: The 5 Bottlenecks Slowing Down US SOCs  appeared first on Cyber Security News.

https://cybersecuritynews.com/alert-overload-tool-sprawl-and-evasive-phishing-the-5-bottlenecks-slowing-down-us-socs/
JetBrains security advisory (AV26-1012)
https://cyber.gc.ca/en/alerts-advisories/jetbrains-security-advisory-av26-1012
FBI, French authorities seize deepfake CSAM-for-sale websites 

Some of the material appeared to be recorded or stolen video of girls through interactions on social media sites like Snapchat, TikTok, Instagram and Facebook.

The post FBI, French authorities seize deepfake CSAM-for-sale websites  appeared first on CyberScoop.

https://cyberscoop.com/fbi-french-authorities-seize-deepfake-csam-websites/
8,8 из 10. Облако добралось до ядра Windows, а вместе с ним и новая уязвимость
Один неверно распознанный объект превращает системный код в источник больших проблем.
https://www.securitylab.ru/news/578433.php
How DNS, Firewalls and Endpoint Tools Block Websites
Website filtering can be enforced at four points in a request's lifecycle. What each layer sees, what routes around it, and why network filters miss traffic.
https://hackread.com/how-dns-firewalls-endpoint-tools-block-websites/
Реклама закончилась, начался Linux. Огромный экран на стокгольском вокзале показал свою изнанку
Случайная ошибка на несколько мгновений раскрыла совсем другую сторону городской инфраструктуры.
https://www.securitylab.ru/news/578425.php
Building an evidence-grounded agentic security operations harness on Cloudflare
Cloudflare Managed Defense uses a team of specialized AI agents built on Workers and global network telemetry to analyze security alerts. By separating deterministic evidence collection from model inference, the system delivers grounded recommendations to Managed Defense Analysts.
https://blog.cloudflare.com/agentic-security-operations/

Managed ad