Cloud security · News & analysis
Gheist Turns GitHub Workflow Logs Into a Route Out for Cloud Secrets
Wiz’s new investigation shows why private repository access and cloud trust policies belong in the same incident review.
NEWS · ALERTS · RESEARCH
Media & entertainment
Original cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.
Original reporting & analysis
Policy & compliance · News & analysis
UK Subsea Security Proposal Would Put New Duties on Cable Operators
An October 22 consultation goes beyond tougher sabotage penalties, proposing security, recovery and notification responsibilities for subsea telecoms infrastructure.
Security technology · News & analysis
OpenSSL 4.1 Adds DTLS 1.3, With Known Issues That Belong in Deployment Tests
The October 23 feature release expands protocol support, while its release notes and branch lifecycle make upgrade planning an application-specific decision.
Cloud security · News & analysis
AWS’s Hybrid Access Guidance Makes Certificate Rotation a Service-Continuity Issue
New PKI guidance asks cloud teams to connect short-lived credentials with clear workload identities, protected keys and tested renewal procedures.
Policy & compliance · News & analysis
EU Council Backs National Entry Points in Cyber Incident Reporting Proposal
The October 21 negotiating mandate would reshape reporting routes, but businesses should keep current procedures in force while legislation is negotiated.
Data breaches · News & analysis
Gyazo’s Final Breach Report Puts Screenshot Metadata on the Retention Agenda
Helpfeel separates account records, image metadata and confirmed image access, giving businesses a clearer basis for reviewing shared screenshots.
Cloud security · News & analysis
SageMaker SDK Fix Leaves Teams With a Second Job: Checking Old Logs
AWS says failed Git operations can expose repository credentials in CloudWatch Logs, making credential review part of the response.
MSP / MSSP · News & analysis
ConnectWise Cloud Backup Incident Leaves MSPs Facing Tenant Reviews and a Recovery Gap
Services remained suspended early Monday as Huntress reported wider authentication activity and warned that credentials added to other applications need separate investigation.
Cybercrime & fraud · News & analysis
West Africa Scam Crackdown Produces 28 Arrests and Millions of Account Removals
A coordinated enforcement effort shows why account removals, seized evidence and recoverable funds must be measured separately.
Cloud security · News & analysis
AWS GuardDuty Guidance Puts Cloud Alert Coverage Under the Microscope
An October operational guide explains how resource context strengthens attack-sequence findings—and why teams must check the services supplying that context.
MSP / MSSP · News & analysis
Google Workspace Recovery Planning Starts Before an Employee Leaves
Fresh backup guidance puts a concrete MSP responsibility in focus: deciding what survives account deletion and proving it can be recovered.
Vulnerabilities & patches · News & analysis
WP Post Author Fixes Put Website Patch Verification Under the Spotlight
Two newly disclosed SQL injection flaws show why website maintenance needs a verified fixed version, not simply a recent update.
MSP / MSSP · News & analysis
WatchGuard’s October Platform Rollout Gives MSPs an Automation Test
New investigation, application-discovery and access features put the focus on how managed providers validate changes across customer environments.
AI security · News & analysis
Anthropic’s Free OSS Scanner Moves the Bottleneck From Discovery to Triage
An optional stream of unreviewed AI findings gives open-source maintainers faster access to potential flaws—and a new decision about how much investigation they can absorb.
Vulnerabilities & patches · News & analysis
Atlassian File-Access Flaw Puts Self-Hosted Collaboration Systems on the Patch List
A critical advisory spans eight Atlassian products, making a complete installation inventory the first response task.
Cloud security · News & analysis
Cloud Supply-Chain Attacks Turn Build Credentials Into the Prize
Unit 42 describes how malicious dependencies and blockchain-based coordination reach beyond the infected developer machine.
Security technology · News & analysis
GitHub Extends Secret Detection Beyond Recognizable Token Formats
A new classifier aims to identify password-like values from code context, with push protection still in preview.
Industry & business · News & analysis
Hadrian’s $40 Million Raise Adds Momentum to Automated Security Testing
The funding announcement puts continuous exposure management and agentic testing in front of a practical buyer question: what can be independently validated?
AI security · News & analysis
A Patched Manus Flaw Shows Why AI Email Access Needs Tighter Boundaries
Salt Labs’ October 1 research describes a repaired email-to-code attack. For businesses connecting AI agents to inboxes, the practical question is how much authority each task receives.
Threat intelligence · News & analysis
Star Blizzard’s RedFlick Campaigns Turn Familiar Invitations Into an Access Risk
Microsoft’s latest research puts renewed attention on follow-up emails, event invitations and the trust built during ordinary professional exchanges.
Cloud security · News & analysis
A Password Reset Became a Route Into Cloud Deployment Credentials
Microsoft’s Storm-3068 case study shows why identity recovery, development pipelines and Kubernetes access need a shared incident view.
AI security · News & analysis
OpenAI’s Distillation Disclosure Raises Questions for AI Service Providers
A newly disclosed extraction campaign illustrates why providers need to protect intermediate model artifacts as well as final answers.
Cloud security · News & analysis
Restored GitHub Actions Expose a Hidden Risk in Build-System Recovery
Socket says previously compromised Actions became reachable again with malicious tags intact, reopening questions about trusted dependencies.
Policy & compliance · News & analysis
FTC Opens Review of Platform Advertising’s Role in Impersonation Scams
The agency is seeking public input on possible changes, putting scam-ad handling on the agenda for platforms and business advertisers.
Threat intelligence · News & analysis
Stolen Cloud Identities Put Recovery Systems in the Line of Fire
Microsoft’s latest Storm-3168 research shows why workload permissions deserve the same scrutiny as human administrator accounts.
Data breaches · News & analysis
Cloudflare Fixes Container Data Exposure, Finds No Evidence of Malicious Use
A disclosed isolation flaw offers cloud customers a concrete way to examine how providers handle residual data and incident communication.
Headlines from our sources
28 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
Cloudflare Blog
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang ↗
ResearchTenable Research
Discover and remediate PHP2Shell exposure with Tenable ↗
ResearchFBI / IC3 Public Alerts
Suspicious Letters Containing White Powder Mailed to State and Local Election Officials, Media Organizations, and Public and Private Polling Companies ↗
Agency · FBICrowdStrike Research
Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation ↗
ResearchThe Hacker News
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable ↗
Industry newsPalo Alto Networks Unit 42
EMudhra Intermediate CA Certificates Compromised ↗
ResearchCisco Talos
Compromised eMudhra intermediate certificates ↗
ResearchCISA Cybersecurity Advisories
Critical Vulnerabilities in PHP Require Immediate Patching ↗
Agency · CISASecurityWeek
Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys ↗
Industry newsChannelPro
Letter from the Publisher: What will drive MSP growth in 2027? ↗
Industry newsESET WeLiveSecurity
Is the ad a scam? How to tell before you click ↗
ResearchChannelPro
Letter from the Publisher: What will drive MSP growth in 2027? ↗
Industry newsThe Record
Russian social media giant VK faces disruptions after data center drone strike ↗
Industry newsDark Reading
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too ↗
Industry newsInfosecurity Magazine
Wikimedia Says Rogue AI Agents Abused its Platforms ↗
Industry newsAWS Security Blog
Building your AI vulnerability harness, Part 1 ↗
ResearchDark Reading
OpenAI Agent Escape Causes Wikimedia Service Outage ↗
Industry newsESET WeLiveSecurity
Inside a brand deal scam targeting YouTube creators ↗
ResearchInfosecurity Magazine
Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities ↗
Industry newsKrebsOnSecurity
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation ↗
Industry newsChannelPro
Key channel headlines: Barracuda launches AI Data Security, Cork Cyber brings AI remediation, and more ↗
Industry newsAWS Security Blog
Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline ↗
ResearchFBI / IC3 Industry Alerts
Iranian Cyber Targeting of Dissidents, Activists and Journalists ↗
Agency · FBIUK NCSC
UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists ↗
AgencyUK NCSC
Iranian cyber targeting of dissidents, activists and journalists ↗
AgencyKrebsOnSecurity
Read This Before You Buy That TV Streaming Stick ↗
Industry newsOkta Security
Okta Verify Vulnerability Disclosure Report - Response and Remediation ↗
ResearchOkta Security