Posts of last few hours

Statement regarding critical vulnerabilities in PHP affecting websites and online services
https://cyber.gc.ca/en/news-events/statement-regarding-critical-vulnerabilities-php-affecting-websites-online-services
On Demand | Post-Quantum on Deadline: What EO 14412 Means for Risk and Compliance
https://ransomware.databreachtoday.com/webinars/on-demand-post-quantum-on-deadline-what-eo-14412-means-for-risk-w-7376
Utah OKs 3 Health-AI Pilot Apps for 'Regulatory Sandbox'
Test Projects Focus on AI-Enabled Drug Prescriptions, Physical Therapy Treatment
Utah has given the green light for three more healthcare technology companies to test out how their AI systems can safely provide services such as prescribing and refilling certain medications and providing AI-augmented physical therapy plans for specific health conditions.
https://ransomware.databreachtoday.com/utah-oks-3-health-ai-pilot-apps-for-regulatory-sandbox-a-33165
Weak Certificates From Indian CA Cause Cascade of Updates
eMudhra Says It Mistakenly Used Weak Certificates to Sign 8 Intermediary Certs
An Indian certificate authority revoked intermediate certificates after a researcher found it used a private encryption key that was only one byte in length, making it trivial for hackers to recover the key and issue their own fraudulent certs. The issue has the most salience for app developers.
https://ransomware.databreachtoday.com/weak-certificates-from-indian-ca-cause-cascade-updates-a-33166
New Acronis CEO Seeks MSP Growth Through Platform Expansion
Company Looks to Extend Its Cyber Resilience Roots Into Managed Detection Services
Former WatchGuard CEO Prakash Panjwani is leading Acronis' push to consolidate MSP security spending through open MDR and XDR integrations, AI-driven remediation and technician automation, with plans to expand adoption across 21,000 partners and define an acquisition strategy by early 2027.
https://ransomware.databreachtoday.com/new-acronis-ceo-seeks-msp-growth-through-platform-expansion-a-33168
More and More Cyber Jobs Require AI Expertise
But There's No Consensus Way to Assess Levels of Skill
A growing number of cybersecurity jobs require not just a baseline familiarity with AI tools, but significant AI expertise, according to an analysis of validated job vacancies in the field. The Sans Institute analyzed a two-day job market snapshot of 6,193 active postings.
https://ransomware.databreachtoday.com/more-more-cyber-jobs-require-ai-expertise-a-33170
Wednesday, October 21, 2026 Security Releases
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases
Мозг дрозофилы заперли в реальности, которой ещё не существует. ИИ достраивает мир прямо у неё под носом
Разработчики объединили модель пространства с симуляцией нервной системы из 140 тысяч нейронов.
https://www.securitylab.ru/news/579007.php
Weekly Threat Bulletin – October 21st, 2026
These are the top threats you should know about this week.
https://www.f5.com/labs/articles/weekly-threat-bulletin-october-21st-2026
Cisco security advisory (AV26-1073)
https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-1073
Миллион забаненных ботов в день, а толку ноль. Почему отчеты Tiktok больше никого не впечатляют
Фейковые лайки и спам исчезают миллиардами, а точных данных о последствиях операций влияния почти нет.
https://www.securitylab.ru/news/579042.php
ISC BIND security advisory (AV26-1072)
https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072
Oracle Corporation security advisory (AV26-1071)
https://cyber.gc.ca/en/alerts-advisories/oracle-corporation-security-advisory-av26-1071
Democrat lawmakers say Russia is aiming to undermine party ahead of midterms
The pair stressed the latest update showed no country is pursuing the technically challenging effort to interfere with or hack into the country’s election infrastructure or tamper directly with votes.
https://therecord.media/democrat-lawmakers-say-russia-is-aiming-to-undermine-party
Интернет лихорадит: CURATOR насчитал 11 утечек BGP-маршрутов всего за квартал
Как атаковали Virtualizor через BGP.
https://www.securitylab.ru/news/579049.php
AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619
https://cyber.gc.ca/en/alerts-advisories/al26-026-critical-vulnerabilities-impacting-php-cve-2026-109618-cve-2026-109619
PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024
In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened attention on both, why it scrambled to post information earlier than planned.
https://therecord.media/php-foundation-statement-critical-vulnerabilities
Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections

New York, NY, USA, October 21st, 2026, CyberNewswire According to the 2026 Autonomous Agents Threat Report, published by Arrakis Security, 76% of active agents have not run in 60 days, but their credentials still work and their triggers still fire. 44% have not run in 180 days. 24% of dormant agents can be started by […]

The post Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections appeared first on Cyber Security News.

https://cybersecuritynews.com/arrakis-security-report-finds-76-of-ai-agents-are-dormant-but-keep-their-credentials-and-connections/
The AI Adoption Blind Spot: How Fake AI Tools Put Enterprises at Risk 

AI adoption is accelerating across enterprises, with employees increasingly relying on platforms like ChatGPT, Claude, and Microsoft Copilot for everyday work. Cybercriminals are exploiting this growing trust, distributing malicious applications disguised as legitimate AI tools to steal credentials, deliver malware, and gain access to corporate environments.  Recent research by ANY.RUN reveals how attackers are impersonating […]

The post The AI Adoption Blind Spot: How Fake AI Tools Put Enterprises at Risk  appeared first on Cyber Security News.

https://cybersecuritynews.com/the-ai-adoption-blind-spot-how-fake-ai-tools-put-enterprises-at-risk/
Чипы из России, кремний из Индии: новый план спасения микроэлектроники выглядит дорогим и зыбким
Москва ищет площадку, где отечественные проекты можно превратить в реальные микросхемы.
https://www.securitylab.ru/news/579047.php

Managed ad