#CyberSecurity

F5 Issues Emergency Patches for Critical NGINX Code Execution Flaws

F5 released emergency patches for three critical NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479) that allow unauthenticated remote code execution and denial-of-service attacks.

**If you run NGINX in any form (open-source web server, NGINX Plus, Ingress Controller, Gateway Fabric, or the NGINX WAF/App Protect products), install F5's latest security patches ASAP. If you can't patch, turn off Server Side Includes and asynchronous file I/O, and have your team remove alias directives that use $request_filename and switch regex maps to named captures until the patch is in.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/f5-issues-emergency-patches-for-critical-nginx-code-execution-flaws-p-9-m-u-w/gD2P6Ple2L

Possible Phishing 🎣
on: ⚠️hxxps[:]//sites[.]google[.]com/view/kundekonto0/home
🧬 Analysis at: https://urldna.io/scan/6ad6b6f43b775000030e15ae
#cybersecurity #phishing #infosec #urldna #scam #infosec

This dumb password rule is from Tanishq.

Password must contain:
- 6 to 16 characters.
- At least one special character (@, #, $, %, * and & only).
- At least one alphabet.
- At least one number.

https://dumbpasswordrules.com/sites/tanishq/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

An OVHcloud CLI attack swapped GitHub release files with a secret-stealing binary. Learn which versions are hit in this supply chain attack.

#OVHcloud #SupplyChainAttack #GitHub #CLI #SecretsTheft #DevSecOps #Cloud #Cybersecurity

https://securityonline.info/ovhcloud-cli-supply-chain-attack/?utm_source=mastodon&utm_medium=jetpack_social

Ahold Delhaize cyberattack took brand sites offline in Europe and the US. Albert Heijn outage ends as the app returns; no data theft found yet.

#AholdDelhaize #AlbertHeijn #Cyberattack #CyberSecurity #FoodLion #StopAndShop #RetailSecurity

https://securityonline.info/ahold-delhaize-cyberattack/?utm_source=mastodon&utm_medium=jetpack_social

Possible Phishing 🎣
on: ⚠️hxxps[:]//desmondcooper6[.]wixsite[.]com/atllt
🧬 Analysis at: https://urldna.io/scan/6ad662923b77500007bd37b5
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 Detect it early: #CLOUDHAZE is a signed Rust implant distributed through fake PDF-tool Google Display ads, with high activity targeting US users.

586 ads from two verified advertisers on calendar and template sites led victims to download an implant that runs without admin rights.

❗️ Three signed samples had zero AV detections at the time of analysis. See the analysis & collect #IOCs: https://app.any.run/tasks/d033300c-1c20-4d03-9a32-b37da69bceea?utm_source=mastodon&utm_medium=post&utm_campaign=cloudhaze&utm_content=linktoservice&utm_term=191026

⚠️ CLOUDHAZE executes C2 commands and hijacks Chrome search. Since February, the operator has used brands including GalacticPDF, LuminaRead, Ironbark, QuartzLine, PageGlass, and PageStone across six C2 generations with new domains. Track activity and uncover related infrastructure in TI Lookup: https://intelligence.any.run/analysis/lookup?utm_source=mastodon&utm_medium=post&utm_campaign=cloudhaze&utm_content=linktotilookup&utm_term=191026#%7B%22query%22:%22url:%5C%22*/quarry/vein%5C%22%20OR%20url:%5C%22*/quarry/deposit%5C%22%20OR%20url:%5C%22*/quarry/geode%5C%22%20OR%20url:%5C%22*/quarry/talc%5C%22%20OR%20url:%5C%22*/mosaic/anchor%5C%22%20OR%20url:%5C%22*/mosaic/shoal%5C%22%20OR%20url:%5C%22*/mosaic/current%5C%22%20OR%20url:%5C%22*/mosaic/harbor%5C%22%20OR%20url:%5C%22*/grove/heartwood%5C%22%20OR%20url:%5C%22*/grove/phloem%5C%22%20OR%20url:%5C%22*/grove/barkline%5C%22%20OR%20url:%5C%22*/filament/radiance%5C%22%20OR%20url:%5C%22*/filament/prism%5C%22%20OR%20url:%5C%22*/filament/resonance%5C%22%20OR%20url:%5C%22*/pluto/zen%5C%22%20OR%20url:%5C%22*/pluto/oak%5C%22%20OR%20url:%5C%22*/piglet/trestle%5C%22%22,%22dateRange%22:30%7D

#cybersecurity #infosec

A massive Sourcenext data breach exposed up to 22.5 million customer records via abused member APIs, prompting emergency company-wide password resets.

#Sourcenext #DataBreach #Cybersecurity #APISecurity #InfoSec

https://securityonline.info/sourcenext-data-breach-api-leak/?utm_source=mastodon&utm_medium=jetpack_social

🔄 208 ENTRY CHANGES 🔄

💻 macOS Golden Gate 27 - 34 added, 17 updated
https://support.apple.com/en-us/149035
📱 iOS and iPadOS 27 - 20 added, 10 updated
https://support.apple.com/en-us/149034
💻 macOS Tahoe 26.7 - 20 added, 8 updated
https://support.apple.com/en-us/149042
💻 macOS Sequoia 15.8 - 19 added, 9 updated
https://support.apple.com/en-us/149043
🥽 visionOS 27 - 14 added, 8 updated
https://support.apple.com/en-us/149038
⌚ watchOS 27 - 7 added, 9 updated
https://support.apple.com/en-us/149037
📺 tvOS 27 - 8 added, 5 updated
https://support.apple.com/en-us/149036
📱 iOS and iPadOS 26.7 - 9 added, 4 updated
https://support.apple.com/en-us/149041
🔨 Xcode 27 - 4 added
https://support.apple.com/en-us/149040
🌐 Safari 27 - 2 added, 1 updated
https://support.apple.com/en-us/149039

#apple #cybersecurity #infosec #security #ios

Possible Phishing 🎣
on: ⚠️hxxps[:]//ionos[.]serve-lad[.]eu/Kundenkonto[.]html
🧬 Analysis at: https://urldna.io/scan/6ad6d30a3b77500009c354b5
#cybersecurity #phishing #infosec #urldna #scam #infosec

US moves to staff leaders for industry-partnered offensive cyber program

The U.S. is recruiting private companies for offensive cyber operations against foreign criminals. While the August program shows promise, key details remain murky: payment structures, liability protections, and target identification are unresolved. Experts support the collaboration but stress need for clear guidelines on legal responsibility and international coordination to avoid unintended harm.

https://www.nextgov.com/cybersecurity/2026/10/us-moves-staff-leaders-industry-partnered-offensive-cyber-program/416613/

#InfoSec #CyberSecurity

⚠️ #IronChain uses elevated privileges & kernel-level components to weaken security controls before encrypting files. It can disrupt Windows systems and leave organizations facing data loss and extended downtime.

👨‍💻 How to detect it before damage occurs: https://any.run/malware-trends/ironchain/?utm_source=mastodon&utm_medium=post&utm_campaign=ironchain_mtt&utm_term=191026&utm_content=linktomtt

#cybersecurity #infosec

Log monitoring is for losers.
Automating your SOC is stupid.
Smart people - winners - take sensitive information off the Internet and connect their locations with private circuits.
Instead of watching the breach happen, put the data where it can't be breached.

#cybersecurity #soc #business

📬 NicFab Newsletter #43 | October 20, 2026

Privacy, Data Protection, AI & Cybersecurity — weekly review.

👉 Read the full issue: https://www.nicfab.eu/en/newsletter-issues/2026-10-20-issue-43/?utm_source=mastodon&utm_medium=organic-social&utm_campaign=issue-43

📩 Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now

#Privacy #GDPR #DataProtection #AI #AIAct #Cybersecurity #InfoSec

Possible Phishing 🎣
on: ⚠️hxxps[:]//prontonllkio[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6ad6ef273b77500009c3572a
#cybersecurity #phishing #infosec #urldna #scam #infosec

⌛Just one week left until it-sa 2026!⌛

Our highlights:
🔹 Migration to BlueSpice: Discover how to successfully transition from existing knowledge platforms – including our exclusive migration kit.
🔹 BlueSpice Galaxy: The next generation of knowledge management live in a demo.

📅 October 27–29, 2026
📍 Messe Nürnberg | Hall 7, Booth 352

👉 Free ticket: https://bluespice.com/bluespice-at-it-sa/

#itsa2026 #BlueSpice #Cybersecurity #KnowledgeManagement #DataSovereignty #OpenSource

Possible Phishing 🎣
on: ⚠️hxxps[:]//facebook-mx[.]blogspot[.]com/?m=1
🧬 Analysis at: https://urldna.io/scan/6ad64cc03b77500007bd3557
#cybersecurity #phishing #infosec #urldna #scam #infosec

MISP Modules v3.0.13 is a substantial release, bringing a new wave of OSINT and threat intelligence enrichment capabilities, new ways to export indicators into operational security tools, and new workflows for publishing IOCs directly to security platforms.

@misp

🔗 https://github.com/MISP/misp-modules/releases/tag/v3.1.0

#misp #cti #threatintel #intelligence #cybersecurity #osint

CISA to AI labs: Share test-network IPs to flag rogue agents

CISA urges AI labs to share IP addresses to track rogue agents threatening critical infrastructure. While transparency could boost cybersecurity, experts debate its practicality due to cloud complexity and AI's dynamic nature. Alternative solutions like detection signatures are suggested. Public sector orgs should proactively test AI systems and prioritize vulnerability patches.

https://www.techtarget.com/cybersecurity/news/366651845/CISA-to-AI-labs-Share-test-network-IPs-to-flag-rogue-agents

#InfoSec #CyberSecurity

Possible Phishing 🎣
on: ⚠️hxxp[:]//instagram-login[.]hashnode[.]dev
🧬 Analysis at: https://urldna.io/scan/6ad64ca83b77500007bd3549
#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣
on: ⚠️hxxps[:]//blogfxempire[.]com
🧬 Analysis at: https://urldna.io/scan/6ad62a3c3b77500002f4d7e7
#cybersecurity #phishing #infosec #urldna #scam #infosec

Bank of America puts 4,000 people on fixing vulnerabilities uncovered by Anthropic's Mythos and ...

Bank of America deployed 4,000 personnel (3,000 employees + 1,000 contractors) to fix software vulnerabilities detected by AI like Anthropic's Mythos. CEO Moynihan confirmed hundreds of millions in Q3 cybersecurity spending. Once skeptical of AI security tools, major firms now embrace them after serious breaches. BofA leads in transparency, expecting future cost reductions in patching efforts.

https://the-decoder.com/bank-of-america-puts-4000-people-on-fixing-vulnerabilities-uncovered-by-anthropics-mythos-and-other-ai-models/

#InfoSec #CyberSecurity

Apple bans nudify apps and nonconsensual deepfakes under strict new App Store guidelines requiring developers to proactively block illicit content.

#Apple #AppStore #Deepfake #AI #Cybersecurity

http://securityonline.info/apple-bans-nudify-apps-app-store/?utm_source=mastodon&utm_medium=jetpack_social

Possible Phishing 🎣
on: ⚠️hxxps[:]//facebooklogin99999[.]blogspot[.]com
🧬 Analysis at: https://urldna.io/scan/6ad646523b77500007bd34e9
#cybersecurity #phishing #infosec #urldna #scam #infosec

Discover the critical PwnEscape vulnerability in the Linux kernel. Learn how this flaw allows attackers to escape virtual machines and seize server control.

#PwnEscape #LinuxKernel #Vulnerability #CloudSecurity #CyberSecurity

https://dailytechnow.com/critical-pwnescape-flaw-linux-virtual-machines/

This #Cybersecurity Agency Is Supposed to Protect U.S. #Elections. Officials Fear It’s Been Compromised by #Trump.

A few months into President Donald Trump’s second term, #political appointees at the Department of #HomelandSecurity made an unusual request of its agency focused on cybersecurity: Secretly acquire a #voting machine and #hack it.

The appointees wanted the Cybersecurity and #Infrastructure #Security Agency to procure the machine, examine it and report back the findings so they could be given to the #WhiteHouse , according to two former administration officials with knowledge of the request.
#dhs #voting #cisa

https://www.propublica.org/article/cisa-election-security-donald-trump

Possible Phishing 🎣
on: ⚠️hxxps[:]//instagramlogin77[.]blogspot[.]com/?m=1
🧬 Analysis at: https://urldna.io/scan/6ad64cbe3b77500004c2c0fa
#cybersecurity #phishing #infosec #urldna #scam #infosec

Following the Secure Boot certificate expiration, Windows PCs transition to UEFI CA 2023 while booting normally. Learn how to verify your device.

#SecureBoot #Windows11 #Microsoft #UEFI #Cybersecurity

https://securityonline.info/secure-boot-certificate-expiration-windows/?utm_source=mastodon&utm_medium=jetpack_social

Discover the critical Broadcom Wi-Fi software vulnerability known as WPSplinter. Learn how this flaw grants attackers root access to popular routers.

#Broadcom #WPSplinter #CyberSecurity #WiFiSecurity #RouterExploit

https://dailytechnow.com/broadcom-wifi-software-vulnerability/

Enterprise controls can't keep up with AI agents

🚨 Companies are deploying AI agents faster than they can control them. Organizations struggle to track what these agents access, do, or if they can stop them. Traditional security systems aren't built for autonomous AI. The result? Potential security gaps and leaders considering quiet incident handling. The shift ahead: focus on managing existing agents responsibly, not just rolling out more.

https://www.techtarget.com/ai/news/366652493/Enterprise-controls-cant-keep-up-with-AI-agents

#InfoSec #CyberSecurity #AIGovernance