-
Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as CVE-2026-105445 and dubbed GhostPat, exploited how Docker handled personal access tokens during ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Meta removed more than 3.7 million Facebook and Instagram accounts, Pages, and Groups during an international crackdown on West African scam networks that resulted in 28 arrests and the rescue of 117 trafficking victims. Announced October 13, the opera…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A search for PuTTY can lead to more than a fake download. In a campaign reported on October 12, attackers used search-engine optimization (SEO) poisoning to steer users to a counterfeit PuTTY site and deliver a trojanized Windows installer. The campaig…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has addressed a vulnerability in Windows Shell that attackers are actively exploiting, allowing them to bypass the Mark of the Web (MOTW) security protections. Designated CVE-2026-96951, the flaw was disclosed on October 13, 2026, during the …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
TFG London has confirmed a cybersecurity incident affecting the IT systems that support its brands Hobbs, Whistles, and Phase Eight. Several of these systems remain unavailable. The parent company, The Foschini Group, disclosed the incident in a stock …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI and CrowdStrike have disrupted U.S. laptop farms supporting FAMOUS CHOLLIMA, a North Korean operation that places fraudulent remote IT workers inside American companies. The infrastructure enabled workers abroad to collect salaries, conceal the…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An OpenAI engineer has been arrested for allegedly concealing an audio recording device in an executive conference room at the company’s San Francisco offices. According to a Justice Department announcement, Abdulrahman Alfozan, 35, a Saudi national, w…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Critical FortiSandbox Vulnerability Lets Remote Attackers Bypass Authentication and Execute Commands
Fortinet has disclosed a critical authentication bypass vulnerability in FortiSandbox that could let remote attackers access its web management interface without valid credentials and execute unauthorized code or commands. This vulnerability is tracked…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that enterprise defenders must address immediately. This unusually large update cycle affects various Mic…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A single visit to a compromised or deceptive website can let a sophisticated exploit kit take control of a vulnerable iPhone. On the Packet Protector podcast, mobile security architect Akili Akridge warned that Coruna and DarkSword demonstrate how surv…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶