Vertech News

> Vertech Solucoes

Need AI automation for your business?

We build custom AI pipelines, chatbots, and automation systems. From concept to production — the same tech behind this site.

Talk to Vertech

> Vertech Solucoes

Need AI automation for your business?

We build custom AI pipelines, chatbots, and automation systems. From concept to production — the same tech behind this site.

Talk to Vertech

Cybersecurity

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

Microsoft Patches More Than 1,400 Security Flaws

OpenAI engineer arrested for allegedly planting spy device in office

Ghostscript flaw lets hackers hijack servers via PDF uploads

NordVPN

Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

Microsoft releases Windows 10 KB5126657 extended security update

Microsoft: Windows 11 24H2 Home and Pro reached end of support

UK Housing Ombudsman Service investigates 'security incident'

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

Windows 11 KB5127648 & KB5126653 cumulative updates released

1Password

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

AI companion startup Character.ai files for Chapter 11 bankruptcy, citing costs and litigation

Ivanti warns of Connect Secure zero-day exploited in attacks

Proton Mail

Docker Hub flaw let attackers impersonate users, tamper with images

The MFA Gaps Attackers are Still Exploiting

SAP warns of maximum severity OAuth2 SSRF security flaw

Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

French supermarket fridges get hacked, heating to 122°F and sparking fires

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

NordVPN

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

Product Walkthrough: Bitdefender AI Visibility and Control

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

1Password

Norway fines Microsoft ad firm $9.6 million over Grindr data sharing

IonQ to acquire cybersecurity firm Elisity in an all-stock deal for up to $1.3 billion

Yandex confirms service outage as users lose access to cloud files

⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

Bring Your Own Agent: Your Employees' Assistants Are Already Logged In

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Proton Mail

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

FBI Arrests Executive at Ransomware Negotiation Firm

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

NordVPN

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

1Password

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

Proton Mail

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

NordVPN

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

1Password

Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions