Metacurity.com (https://metacurity.com) is the one-stop destination for leading infosec news and cybersecurity developments. Run by infosec writer and columnist Cynthia Brumfield, Metacurity draws from thousands of sources every day to deliver aggregated summaries of the latest infosec developments. If anyone wants to get in touch with me, on or off the record, you can reach me at cynthia [at] digitalcrazytown.com or on Signal via Cynthia.507. Sign up for our free daily emails at https://www.metacurity.com. Searchable
Open remote profile ↗Somehow I missed this...
https://www.theregister.com/security/2026/10/22/php-blames-supply-chain-security-biz-chainguard-for-putting-huge-chunks-of-the-web-at-risk/5304611
theregisterPHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg
AI-discovered bugs may soon trigger fresh disruptions, cyber experts say
https://www.reuters.com/legal/litigation/ai-discovered-bugs-may-soon-trigger-fresh-disruptions-cyber-experts-say-2026-10-23/
"The effort [to thwart PHP vulnerability exploitation] was aided, inadvertently, by the current limits of some widely available AI models, which did not appear to be very helpful at exploiting the vulnerabilities."
https://www.nbcnews.com/tech/security/hackers-php-flaws-cybersecurity-crisis-rcna605112
NBC NewsHackers appear to be struggling to exploit PHP flaws after global cybersecurity crisisThe vulnerabilities are devastating in theory. But experts say they are also technically very difficult to hack.
Resident Evil Developer Capcom Issues Phishing Warning After Data Breach Hits Over 11 Million Customer Accounts
https://www.ign.com/articles/resident-evil-developer-capcom-issues-phishing-warning-after-data-breach-hits-over-11-million-customer-accounts
IGN'Capcom Takes This Matter Extremely Seriously' — Resident Evil Dev Issues Phishing Warning After Data Breach Hits Over 11 Million Customer AccountsCapcom has disclosed a data breach of its online membership service affecting over 11 million customer accounts, warning gamers to brace themselves for potential phishing attempts.
Disgraced eMudhra drops out of TLS business after using cert private key of 4
https://arstechnica.com/security/2026/10/disgraced-emudhra-drops-out-of-tls-business-following-certificate-debacle/?mid=1#cid=3769663
Ars TechnicaDisgraced eMudhra drops out of TLS business after using cert private key of 4Flubbed key signing "ceremony" allowed minting of web credentials for any site.
The Dutch NCSC website status right now.
"Due to vulnerabilities in PHP, we have temporarily taken the NCSC website offline as a precaution. We're working to get the website back up and running as quickly as possible. For updates, please check out advisories.ncsc.nl (Dutch only)."
Don't miss today's Metacurity for the most crucial infosec developments you should know today, including
--DHS orders DeepSeek out of federal civilian systems,
--FBI probe uncovers ransomware negotiators’ close ShinyHunters ties,
--Army wants AI agents to hack and disable enemy systems,
--OpenAI bugging suspect held without bail amid Saudi royal ties,
--WhatsApp chatbot instructions told users not to contact regulators,
--Hackers reportedly steal 421k emails from Germany’s far-right AfD,
--Nikkei’s third breach in a month exposes 1.83m records,
--China-linked AI agent tied to attacks on Japanese firms,
--Microsoft treats AI agents as potential insider threats,
--MiniMax touts cybersecurity gains and 70% cost cut for M3.1 Flash,
--Hackers hit unpatched Plex servers with cryptominers,
--ConnectWise breach compromises at least 162 Microsoft 365 tenants,
--Ahold Delhaize confirms cyberattack behind US and European outages,
--Vibe coders strip smart TVs of ads and tracking,
--Wyden flags encryption gap across 350 federal web addresses,
--UK financial regulator calls for reporting AI failures and near-misses,
--Australia plans to sue social platforms over under-16 ban violations,
--Muse sells a keyboard and sends a stranger to the seller’s home
https://www.metacurity.com/dhs-orders-deepseek-out-of-federal-civilian-systems/
MetacurityDHS orders DeepSeek out of federal civilian systemsThe ban also blocks future purchases and covers affiliates and third-party products built on DeepSeek technology.
Big Google cloud outage in Europe
Google Cloud outage: Revolut suffers service disruption as bank customers report problems – business live
https://www.theguardian.com/business/live/2026/oct/20/uk-unemployment-rate-pre-budget-boost-wages-vacancies-latest-news-updates
the GuardianGoogle Cloud outage: Revolut suffers service disruption as bank customers report problems – business liveRolling coverage of the latest economic and financial news