Cybersecurity news from across the internet
Cybersecurity news from across the internet

Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party o…

The regulations on “controlled unclassified information” include security rules and requirements for reporting when they’re breached, including by cyberattacks. The post Major rules for federal contractors handling sensi…





3 lessons from frontier AI vulnerability research
[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)
[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)
Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
ISC Stormcast For Wednesday, October 7th, 2026 https://isc.sans.edu/podcastdetail/10126, (Wed, Oct 7th)
ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)
Google issues Android security updates: who can get them and how
Warning: Attackers Are Tricking Employees Into Sharing Malicious Calendar Invites
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
Update Chrome and ChromeOS to fix critical security issues