📡 Tech & Security Digest — 2026-10-15
Curated from Hacker News, security blogs, and tech publications.
Ars Technica
- Fridge hack costing millions and sparking fires stemmed from poor security — Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet. …
BleepingComputer
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks — Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks…
- CISA warns admins to immediately fix Ivanti flaw exploited as zero-day — The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploit…
- Cisco patches new Secure Email Gateway zero-day exploited in attacks — Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute comman…
- Ghostscript flaw lets hackers hijack servers via PDF uploads — A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution t…
- UK Legal Aid Agency: Hackers stole records dating back to 1978 — The Legal Aid Agency (LAA), an executive agency of the UK’s Ministry of Justice that manages the country’s Public Defender Service, says attackers who…
- The Blind Spots of Agentic Pentesting and How to Close Them — AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities…
Hacker News
- Containment and monitoring failures are to blame for AI hacking reports: experts (903 pts)
- Wanted to download an ISO, ended up writing a kernel exploit (101 pts)
- It took me nine years to hack my Xbox 360 (85 pts)
Krebs on Security
- FBI Arrests Executive at Ransomware Negotiation Firm — Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an inves…
- Microsoft Patches More Than 1,400 Security Flaws — Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch…
- ShinyHunters Extorted Boeing Spin-off Prior to Arrests — A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooper…
- Two Alleged ‘TeamPCP’ Hackers Arrested in Australia — Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrati…
The Hacker News
- Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation — Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation.
The vuln…
- Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch — Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within…
- Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE — A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstac…
- AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches — Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop we…
- Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far — An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Vol…
- Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability — Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating syste…
- Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App — Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three…
- Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access — Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives a…
- Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies — The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) ca…
- Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own — Three research teams broke into Google’s Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fu…