;
;

SecurityWeek

Cybersecurity News, Insights & Analysis

Website Twitter Linkedin Facebook

In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotia...
Posted on 23 October 2026 | 2:23 pm

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai B...
Posted on 23 October 2026 | 12:45 pm

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments. The post China APT Uses AI Pentes...
Posted on 23 October 2026 | 10:31 am

Attackers Exploit Third Arista VCO Zero-Day in Four Months

The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges. The post Attack...
Posted on 23 October 2026 | 9:58 am

11 Million Impacted by Capcom Data Breach

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts. The post 11 Million Impacted by Capco...
Posted on 23 October 2026 | 8:34 am

Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can pla...
Posted on 23 October 2026 | 8:25 am

LiteLLM Compromised in Fresh Supply Chain Attack

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh S...
Posted on 23 October 2026 | 8:10 am

Atlassian Patches 75 Flaws in Data Center and Server Products

Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components. The post Atlass...
Posted on 23 October 2026 | 7:54 am

Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016

After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016. The post Iran’s...
Posted on 23 October 2026 | 6:39 am

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t. The post Hacker Convers...
Posted on 22 October 2026 | 2:31 pm