Continuous Monitoring and Protection
Social Media You can trust a social media platform and still get scammed by an ad running on it Phil Muncaster 20 Oct 2026 • , 7 min. read Fraudulent ads have been around for about as long as the advertising industry. Today, they often reach you through social media feeds, apps and search results you use every day, and the platforms showing them can also (inadvertently) help build them. In September, the US Federal…
Read MoreDetails on two critical-severity PHP vulnerabilities named PHP2Shell have been leaked online ahead of scheduled coordinated disclosure and official patches. On Tuesday, PHP warned that patches for the critical issues, both with a CVSS score of 9.2, are planned for Wednesday, 21 October 2026 at 14:00 UTC (10:00 am ET), urging defenders to prepare for immediate patching. “All PHP users are encouraged to prepare now so they can upgrade as soon as the release is…
Read MoreSiemens revealed on Monday that threat actors have exploited a vulnerability in Siemens Software Center as part of a malware campaign. Siemens Software Center handles the download, installation, activation and updating of software that customers have bought, and it can also be used to start free trials. The vulnerability, tracked as CVE-2026-110936, exists because the program doesn’t properly restrict the locations it searches for DLL files. An authenticated local attacker could plant a malicious DLL…
Read MoreU.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom. Hackers aligned with ShinyHunters have claimed credit for dozens of…
Read MoreAnthropic has acquired Opaque Systems, a company that developed technology for using sensitive data in AI systems while keeping it protected by the underlying hardware. Opaque announced the deal last week, saying its team is joining Anthropic. Financial terms were not disclosed. Opaque started as a research project at UC Berkeley’s RISELab a decade ago. Its founders include Ion Stoica, co-founder of Databricks and Anyscale, and Raluca Ada Popa, an encryption and systems security researcher…
Read MoreIn September, reports emerged that a Virginia woman had been submerged by a flood of emails. Hundreds of automated messages poured in over a 24-hour period, including newsletters and promotions she’d never signed up to. But this was no ordinary spam campaign. The real reason behind the inbox blitz was to bury a legitimate email from the victim’s bank warning her about a fraudulent laptop purchase. This is email bombing. And if it’s happened to…
Read MoreCandiru spyware has infected devices at international news network Al Jazeera in zero-click attacks, via targeted advertisements, Canadian internet watchdog group Citizen Lab reports. As part of the operation, dubbed AdFection, ads purchased by Israeli company Discover-Tech were used to de-anonymize, fingerprint, and infect users, and also allow threat actors to track millions of devices. As part of the online advertising ecosystem, companies bid at billions of daily Real-Time Bidding (RTB) auctions hosted on ad…
Read MoreSecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers stay well-informed about the evolving cybersecurity environment. Here are this week’s highlights: ICS-Sniper attack picks off critical OT traffic University of British Columbia researchers have…
Read MoreCISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade first. Cyber threat actors are actively exploiting the vulnerability to gain initial access, then establishing persistence, escalating privileges, and moving laterally. CISA added CVE-2026-102764 to its Known Exploited Vulnerabilities (KEV) catalog on Oct. 16, 2026. CISA urges organizations with affected self-hosted…
Read MoreScammers love a pretext. And with Medicare Open Enrollment, they have a perfect opportunity to exploit victim expectations, masking their fraud under the cover of legitimate activity. From October 15 to December 7 beneficiaries are able to review and amend various parts of their plan. There’ll be ads, emails, messages and calls from genuine insurers at this time. Some might even ask for personal and health details. That provides great cover for fraudsters, and enough…
Read More