Vulnerabilities & patches · News & analysis
Node2Shell Makes the Running Runtime the Critical Patch Check
Node.js fixes and an independent exploitation test put the focus on deployed containers and the paths that decode untrusted compressed data.
NEWS · ALERTS · RESEARCH
Telecommunications
Original cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.
Original reporting & analysis
Cybercrime & fraud · News & analysis
Unit 42 Separates AI-Assisted Intrusions From a Criminal Operator’s Plans
A new investigation reports university data theft alongside uncompleted fraud preparations, an important distinction for defenders evaluating AI-enabled crime.
Policy & compliance · News & analysis
UK Subsea Security Proposal Would Put New Duties on Cable Operators
An October 22 consultation goes beyond tougher sabotage penalties, proposing security, recovery and notification responsibilities for subsea telecoms infrastructure.
Security technology · News & analysis
OpenSSL 4.1 Adds DTLS 1.3, With Known Issues That Belong in Deployment Tests
The October 23 feature release expands protocol support, while its release notes and branch lifecycle make upgrade planning an application-specific decision.
AI security · News & analysis
Anthropic Adds Hardware and Data-Center Controls to Its AI Security Roadmap
The October 19 update expands future hardening goals, giving enterprise buyers a reason to separate security commitments from deployed controls.
Threat intelligence · News & analysis
AOMEI Update Fix Leaves Businesses With a Historical Exposure Check
Brief changes to update infrastructure show why a clean download today cannot settle whether a workstation was exposed months ago.
Vulnerabilities & patches · News & analysis
FreeRTOS DNS Fix Requires a Configuration Change After the Upgrade
An AWS advisory makes firmware settings part of the remediation: installing the fixed network library alone does not close the DNS issue.
Security technology · News & analysis
VMware HyperArmor Puts the Hypervisor’s Trusted Baseline Under Scrutiny
Broadcom’s new host protections make deployment review, script approvals and emergency access important parts of a security evaluation.
Critical infrastructure · News & analysis
Who Can Switch Off a Critical Service? UK Response Puts Supplier Dependence in Focus
A parliamentary answer addresses overseas technology dependence, giving operators a concrete continuity question to test with suppliers.
Critical infrastructure · News & analysis
Red Lion Switch Advisory Puts Industrial Management Access in Focus
CISA details seven N-Tron 700 Series weaknesses, with a firmware update and changes to management access among the recommended measures.
Security technology · News & analysis
SIM-Based Verification Moves Another Step Into Business Applications
U Mobile and Telenor Linx’s Malaysia launch removes the manual SMS-code step for supported services, while leaving businesses with important recovery and fallback decisions.
Security technology · News & analysis
GitHub Extends Secret Detection Beyond Recognizable Token Formats
A new classifier aims to identify password-like values from code context, with push protection still in preview.
Ransomware · News & analysis
Warlock Intrusions Put Domain-Wide Recovery Plans to the Test
New Symantec and Carbon Black research traces ransomware activity from SharePoint access to the systems used to distribute software across an organization.
Security technology · News & analysis
NIST’s Rogue-Cell Research Puts 5G Resilience Back on the Test Agenda
A new draft studies device responses to simulated false base stations and invites feedback through October 31, with implications for mobile-dependent businesses.
Vulnerabilities & patches · News & analysis
Exploited Cisco SD-WAN Flaw Puts Network Management on the Emergency List
Cisco’s authentication-bypass warning calls for a release check, restricted management access and a separate investigation into earlier activity.
Cybercrime & fraud · News & analysis
Telecom Extortion Sentence Underscores the Value of Stolen Call Records
A former U.S. soldier’s 70-month sentence highlights the exposure created by sensitive communications metadata.
Industry & business · News & analysis
Censys Expands Its Partner Program as Exposure Management Moves Into Managed Services
A channel push creates opportunities for service providers—and a need to define who owns the work after an exposure is found.
Threat intelligence · News & analysis
Stolen Cloud Identities Put Recovery Systems in the Line of Fire
Microsoft’s latest Storm-3168 research shows why workload permissions deserve the same scrutiny as human administrator accounts.
Vulnerabilities & patches · News & analysis
CISA Adds SharePoint and MikroTik Flaws to Its Exploited-Vulnerability List
The September 25 additions give businesses a specific inventory check, with remediation decisions grounded in affected products and vendor guidance.
Headlines from our sources
4 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
Palo Alto Networks Unit 42
“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities ↗
ResearchSecurityWeek
Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack ↗
Industry newsInfosecurity Magazine
New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic ↗
Industry newsUK NCSC
Help shape the future of resilient private 5G ↗
AgencyCross-industry security developments
These broader alerts and reports apply across business sectors; they are not reports of incidents specific to this industry.
1257 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
The Hacker News
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass ↗
Industry newsSecurityWeek
Long-Hidden Flaws Patched in EPICS Research Facility Control Software ↗
Industry newsThe Hacker News
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed ↗
Industry newsSecurityWeek
Hackers Start Probing Fresh Oracle EBS Vulnerability ↗
Industry newsSecurityWeek
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts ↗
Industry newsThe Hacker News
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits ↗
Industry newsSOCRadar
n0n Ransomware: Inside an AI-Assisted Extortion Operation ↗
ResearchThe Hacker News
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering ↗
Industry newsThe Hacker News
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach ↗
Industry newsHelp Net Security
Bellini Capital CISO on AI security governance and the limits of patching faster ↗
Industry newsThe Hacker News
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers ↗
Industry newsThe Hacker News
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws ↗
Industry newsThe Hacker News
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges ↗
Industry newsHelp Net Security
NIST starts the countdown to retire quantum-vulnerable encryption ↗
Industry newsCIS / MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution ↗
Threat sharingSANS Internet Storm Center
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th) ↗
ResearchCIS / MS-ISAC
A Vulnerability in Brotli Library Could Allow for Remote Code Execution ↗
Threat sharingAWS Security Blog