NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a...
FTC Demands Answers From OpenAI and Anthropic About AI Safety
The Federal Trade Commission is demanding answers from OpenAI and Anthropic about the safety of their AI products. The agency...
German Police Seize Robot After Alleged Groping of 16-Year-Old Girl
German police have seized a humanoid robot after it allegedly touched a 16-year-old girl inappropriately on a street in Cologne,...
EU Questions OpenAI, Anthropic Over AI Agent Security Incidents
AI agents that reportedly breached external systems during testing are now raising a difficult legal question for European regulators: Can...
Windows 11 Remote Desktop Fails After Update — Microsoft Points to Security Feature
A Windows 11 security feature designed to protect administrator privileges is preventing some employees from connecting to remote work PCs....
Sophos ITDR expands identity protection for the AI era
Identity has become one of the most targeted attack surfaces in cybersecurity, with attackers increasingly relying on stolen credentials, compromised...
ServiceNow makes it easier to build AI agents, gives them verifiable identities
if ( !emtpy($headline_subheadline ) ) : ?> New automation tools give AI agents free rein to perform more tasks —...
TPG runs 5G network slicing trial for eftpos payments
Key points TPG Telecom trialled 5G network slicing at the Royal Adelaide Show to prioritise digital payment processing traffic. Vendors...
In Pictures: Governing the agents of chaos Saviynt Melbourne roundtable
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.Your use...
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via...
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
Scammers love a pretext. And with Medicare Open Enrollment, they have a perfect opportunity to exploit victim expectations, masking their...
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise Pierluigi Paganini October 15, 2026 Attackers exploit a...
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials Pierluigi Paganini October 15, 2026 Android trojan Hirudo replaces genuine banking...
Arm-Qualcomm legal fight ends in limited verdict, larger stakes remain
if ( !emtpy($headline_subheadline ) ) : ?> Jury awards $2 in damages after finding Arm breached licensing obligations, but a...
