Category: Cyber Security
-
The UNM Health cyberattack disrupted patient admissions, surgeries and academic activities before the University of New Mexico restored critical electronic systems on October 27. A ransomware group called Byod claimed responsibility, although the university’s assessment contradicts its allegations of widespread infrastructure access. UNM Health temporarily limited new patient admissions on Monday, October 26, and diverted…
-
A Convertr skimming attack reportedly compromised a shared analytics script to steal shoppers’ payment details at checkout. Security researchers identified the campaign on October 24, with malicious code targeting stores that use the Brazilian e-commerce platform. Convertr provides online stores and checkout systems for dozens of major Brazilian fashion brands, handling R$2 billion, or approximately…
-
The HTTP2Shell Brotli flaw has prompted emergency security updates across several software ecosystems. Tracked as CVE-2026-111497, the vulnerability can cause crashes, expose sensitive memory and potentially allow remote code execution when applications decompress malicious data. Researchers initially identified the issue in Node.js before finding broader exposure in the underlying Brotli decoder. Consequently, the vulnerability also…
-
Microsoft released emergency security updates on October 26 to address the critical .NET Brotli flaw. The vulnerability threatens applications that process specially crafted Brotli-compressed data, potentially causing crashes, memory leaks or remote code execution. The issue, tracked as CVE-2026-111497, also carries the names Broccoli2Shell, Node2Shell and HTTP2Shell. However, exposure depends on application settings because standard…
-
A researcher has publicly detailed 11 reported security flaws affecting Tailscale and Headscale before patches became available. The disclosure has prompted debate over whether early warnings help administrators protect networks or give attackers an advantage. Researcher Erica Windisch published the findings after laboratory testing between October 22 and 24. According to the report, some weaknesses…
-
New Samsung TV privacy allegations have emerged after a reverse engineer claimed to uncover extensive monitoring features in a 2025 television. The researcher, who uses the name Log4j, alleges that the software collects audio-related information, builds viewing profiles and shares data with hundreds of partners. However, the supplied account does not include an independently verified…
-
Confirmed PHP2Shell exploitation has now resulted in remote code execution in the wild, according to newly published honeypot evidence. The findings mark a shift from earlier scanning and failed attempts to a successful attack. The two flaws, tracked as CVE-2026-109618 and CVE-2026-109619, received emergency patches on October 21. However, researchers have now documented a successful…
-
The BlackX UEFI bootkit bypassed Secure Boot during an espionage campaign targeting diplomatic agencies in Central Asia. Researchers discovered the operation in early 2026, with targets concentrated in Tajikistan, Uzbekistan and Turkmenistan. Kaspersky linked the campaign to the Chinese state-sponsored group APT41 with medium confidence. However, that assessment does not establish attribution with certainty. The…
-
A Popcorn Time vulnerability in the abandoned Time4Popcorn fork left millions of computers potentially open to remote code execution. Security researchers intervened by taking control of its expired update domain and disabling vulnerable updaters. The flaw, tracked as CVE-2026-30612, affected the application’s Windows and macOS update mechanisms. Those components downloaded executables over unencrypted HTTP without…
-
A LiteLLM supply-chain attack compromised the project’s release pipeline and distributed credential-stealing malware through PyPI and container registries. The malicious release, version 1.107.0, targeted Windows, Linux and macOS environments. Maintainers said attackers breached the pipeline on October 21 and published packages containing compiled malware and tools for remote code execution. However, the incident did not…