October 2026
AWS AgentCore security undone by prompt requesting credentials
Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier
Citrix gives NetScaler admins another critical reason to patch
No word on exploitation status, but a 9.5 severity score suggests time is of the essence
US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide
Infecting devices from 2021 until the FBI stepped in
High-severity Nvidia bug could crash GPU monitoring on exposed servers
The GPU giant released a fix for the flaw, tracked as CVE-2026-47483
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise
Credential-stealing malware detected within minutes of npm release, but impact remains unknown
Fighting GenAI with GenAI: The New Email Security Landscape
SPONSORED FEATURE: Old attack, new protections
UK and Germany team up against Russian cyberattacks as Brexit rethink looms
Security pact promises information-sharing and coordinated disruption, but offers little detail on agencies or funding
Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead
Feds claim he charged clients more than ransoms, paid up, pocketed the difference
Attackers hijacked top-level domains, minted fake security certs for Google and other orgs
Trusted brand impersonation without the usual browser certificate warnings spells trouble