General Cyber News via Ars Technica Risk Assessment

Anthropic VS code extension on Cursor backdoored for nearly 12 hours

It's still unknown how attackers got access to Anthropic's verified Cursor account.
Publish Date: 10/30/2026
read more -->

Code-execution flaw in UEFI firmware affects most servers on planet Earth

Critical flaw in EDK2 allows attackers to execute code early in the boot process.
Publish Date: 10/27/2026
read more -->

Disgraced eMudhra drops out of TLS business after using cert private key of 4

Flubbed key signing "ceremony" allowed minting of web credentials for any site.
Publish Date: 10/22/2026
read more -->

333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email

For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
Publish Date: 10/22/2026
read more -->

Enterprises keep buying software upgrades that IT thinks will make things worse

Survey of 2,018 IT heads at big firms points to a lack of leverage.
Publish Date: 10/21/2026
read more -->

PHP warns it plans to release 2 emergency patches imminently

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Publish Date: 10/21/2026
read more -->

The Internet goes on high alert after discovery of 8 compromised TLS certs

Intermediate certs allow anyone to mint web credentials for any Internet server.
Publish Date: 10/20/2026
read more -->

Meta Muse exposes users' personal and business secrets when they share conversations

Meta is suspending the sharing feature while it investigates its privacy.
Publish Date: 10/20/2026
read more -->

PSA: Patch your Plex media server before someone hacks it

A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
Publish Date: 10/19/2026
read more -->

ReactOS reaches major milestone with NTFS install support

ReactOS gains NTFS install support with new driver.
Publish Date: 10/19/2026
read more -->

OpenAI models hacked a crypto wallet and breached more websites

The actions could have resulted in criminal charges had humans been behind the keyboard.
Publish Date: 10/16/2026
read more -->

Targeted ads delivered 0-click exploits to install mercenary malware

The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Publish Date: 10/15/2026
read more -->

Fridge hack costing millions and sparking fires stemmed from poor security

Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
Publish Date: 10/14/2026
read more -->

Anthropic warns small AI models could self-replicate through IoT devices

"Small weight-based replicators" could usher in a new generation of computer worms.
Publish Date: 10/14/2026
read more -->

Topgolf saved over $11.3 million after leaving VMware

Topgolf and VMware "ran deep" before the migration.
Publish Date: 10/13/2026
read more -->

PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023

"The current decline may be just the beginning of a new downward cycle."
Publish Date: 10/9/2026
read more -->

Hackers obtain counterfeit TLS certificates for Google and other large services

Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
Publish Date: 10/6/2026
read more -->

OpenAI agents tried to hack Wikipedia tools and flooded it with traffic

The reports of OpenAI agents harming third-party sites keep coming.
Publish Date: 10/6/2026
read more -->

Licensing costs driving 90 percent of VMware users to explore options: Survey

Users want to "reduce risk and avoid unnecessary disruption" while making changes.
Publish Date: 10/6/2026
read more -->

MCP for agent-to-agent comms may be the riskiest protocol you've never heard of

Trust gaps in the new protocol spread malicious prompts from one agent to another.
Publish Date: 10/5/2026
read more -->


Copyright Ⓒ 2010 SecuritySpecifiers™