-
DreamHost password resets have blocked affected email and FTP/SFTP users from signing in following an incident that disrupted its File Manager service. As of October 26, the hosting provider said it had sent recovery instructions to all affected account owners, while the incident remained active. Users must wait for their account owner to establish new…
-
The HTTP2Shell Brotli flaw has prompted emergency security updates across several software ecosystems. Tracked as CVE-2026-111497, the vulnerability can cause crashes, expose sensitive memory and potentially allow remote code execution when applications decompress malicious data. Researchers initially identified the issue in Node.js before finding broader exposure in the underlying Brotli decoder. Consequently, the vulnerability also…
-
Microsoft released emergency security updates on October 26 to address the critical .NET Brotli flaw. The vulnerability threatens applications that process specially crafted Brotli-compressed data, potentially causing crashes, memory leaks or remote code execution. The issue, tracked as CVE-2026-111497, also carries the names Broccoli2Shell, Node2Shell and HTTP2Shell. However, exposure depends on application settings because standard…
-
A newly emerged extortion group claims it stole 19GB of Hisense data and is demanding $5 million in Bitcoin. The alleged Hisense data breach reportedly involves warranty records, customer information and internal business documents. However, Hisense had not confirmed the incident at the time of the report. A sample that the attackers claimed to publish…
-
A researcher has publicly detailed 11 reported security flaws affecting Tailscale and Headscale before patches became available. The disclosure has prompted debate over whether early warnings help administrators protect networks or give attackers an advantage. Researcher Erica Windisch published the findings after laboratory testing between October 22 and 24. According to the report, some weaknesses…
-
An AI skin cancer comparison found that an older image-recognition model outperformed two advanced chatbots at classifying skin lesions. In the reported test, GPT-6 Astra and Claude Fable 5.1 each selected the correct diagnosis in roughly 42% of cases. By comparison, a specialised version of Google’s Inception v3 correctly classified 125 of 200 lesions, or…
-
New Samsung TV privacy allegations have emerged after a reverse engineer claimed to uncover extensive monitoring features in a 2025 television. The researcher, who uses the name Log4j, alleges that the software collects audio-related information, builds viewing profiles and shares data with hundreds of partners. However, the supplied account does not include an independently verified…
-
A Chinese national has appeared in court in California following his extradition from the Netherlands over an alleged cryptocurrency scam. Prosecutors say the operation took more than $36.9 million from 174 victims across the United States. Zhen Zhao, 44, faces a charge of conspiracy to commit money laundering. Authorities allege he helped move victims’ funds…
-
Confirmed PHP2Shell exploitation has now resulted in remote code execution in the wild, according to newly published honeypot evidence. The findings mark a shift from earlier scanning and failed attempts to a successful attack. The two flaws, tracked as CVE-2026-109618 and CVE-2026-109619, received emergency patches on October 21. However, researchers have now documented a successful…
-
The BlackX UEFI bootkit bypassed Secure Boot during an espionage campaign targeting diplomatic agencies in Central Asia. Researchers discovered the operation in early 2026, with targets concentrated in Tajikistan, Uzbekistan and Turkmenistan. Kaspersky linked the campaign to the Chinese state-sponsored group APT41 with medium confidence. However, that assessment does not establish attribution with certainty. The…