Posts of last few hours

Реклама закончилась, начался Linux. Огромный экран на стокгольском вокзале показал свою изнанку
Случайная ошибка на несколько мгновений раскрыла совсем другую сторону городской инфраструктуры.
https://www.securitylab.ru/news/578425.php
Building an evidence-grounded agentic security operations harness on Cloudflare
Cloudflare Managed Defense uses a team of specialized AI agents built on Workers and global network telemetry to analyze security alerts. By separating deterministic evidence collection from model inference, the system delivers grounded recommendations to Managed Defense Analysts.
https://blog.cloudflare.com/agentic-security-operations/
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall rates it 10.0 on the CVSS scale and says it has no evidence that any of the four flaws is being
https://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html
Русскоязычный хакер кинул собственную группировку и забрал выкупы себе
Партнёр The Gentlemen незаметно построил второй бизнес прямо за спиной сообщников.
https://www.securitylab.ru/news/578414.php
CVE-2026-21589: Critical Arbitrary File Read Vulnerability in Atlassian Products
https://www.akamai.com/blog/security-research/2026/oct/cve-2026-21589-atlassian-arbitrary-file-read-vulnerability
HPE security advisory (AV26-1011)
https://cyber.gc.ca/en/alerts-advisories/hpe-security-advisory-av26-1011
Microsoft Outlook to block MSIX attachments starting November
Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-to-block-msix-attachments-used-in-attacks/
Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates

Hackers compromised the .gh, .sl and .as country-code domain registries and used their access to obtain unauthorized HTTPS certificates for Google and other organizations. Chrome blocked the identified certificates automatically, while Google worked with certificate authorities to revoke those covering its properties. In its October 6 disclosure, Google said it learned of the attacks the […]

The post Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates appeared first on Cyber Security News.

https://cybersecuritynews.com/hackers-hijack-domain-registry/
[Control Systems] Johnson Controls security advisory (AV26-1010)
https://cyber.gc.ca/en/alerts-advisories/control-systems-johnson-controls-security-advisory-av26-1010
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed version is available. The flaw is in LMCache's multiprocess mode, where the cache runs as a standalone server that LLM workers reach over the ZeroMQ messaging library. A single network
https://thehackernews.com/2026/10/unpatched-critical-lmcache-flaw-lets.html
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence (AI) and large language model (LLM) infrastructure with an aim to deploy cryptocurrency miners and further expand the scale of the botnet. The financially motivated campaign, dubbed Canto Incognito, has been found to install cryptocurrency miners, including
https://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.html
Суперкомпьютерная симуляция связала первые галактики с древнейшими звёздами Млечного Пути
Модель проследила путь вещества от первичного газа до элементов, которые сегодня находят в старых светилах.
https://www.securitylab.ru/news/578458.php
一环扣一环的求职骗局，从简历投递到内网隧道完整入侵
2026年3月，伊拉克某关键基础设施行业的一位软件工程师收到一封来自“迪拜机场IT部门”的邮件。
https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451189173&idx=1&sn=920a0ccc154ccdb3445c3e3c1a3d8648
Veeam security advisory (AV26-1009)
https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-1009
CrowdStrike, AWS, and NVIDIA Expand Global Cybersecurity Startup Accelerator

CrowdStrike announced its fourth annual Cybersecurity Startup Accelerator on October 6, 2026, expanding its collaboration with Amazon Web Services and NVIDIA. The global initiative will help early-stage companies develop agentic cybersecurity products through technical mentorship, business development, and broader access to enterprise security ecosystems. Applications are open worldwide until November 2, 2026. The eight-week program […]

The post CrowdStrike, AWS, and NVIDIA Expand Global Cybersecurity Startup Accelerator appeared first on Cyber Security News.

https://cybersecuritynews.com/crowdstrike-cybersecurity-accelerator/
PoeLLM malware infects exposed AI servers in cryptomining attacks
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads. [...]
https://www.bleepingcomputer.com/news/security/poellm-malware-infects-exposed-ai-servers-in-cryptomining-attacks/
EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data

Ernst & Young (EY) has warned that a data breach exposed personal and financial information belonging to clients of Goldman Sachs’ wealth management division and Man Group. The incident involved a platform supporting EY’s tax services, not the financial firms’ own networks, according to client notifications reported by the Financial Times. The latest disclosures expand […]

The post EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/ey-data-breach/
Более 100 украинских сайтов превратили в ClickFix-ловушки
Поддельная проверка Cloudflare заставляла посетителей самим запускать заражение.
https://www.securitylab.ru/news/578412.php
Oklahoma judge’s Flock ruling shows the power of Supreme Court’s digital evidence decision
How a recent Supreme Court decision on geofencing influenced a federal judge to toss a sheriff's Flock camera evidence in a drug trafficking case.
https://therecord.media/oklahoma-flock-ruing-supreme-court-chatrie-decision
PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem

More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem.

The post PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem appeared first on CyberScoop.

https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/

Managed ad