WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners. Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads. Firmware was locked down, so zero-days it was. Got a root shell. then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems. This isn’t a bug, It’s the product bro.

If your company refers to engineers as the IT department, you have nothing to worry about. You were already breached last week.

BREAKING: Bernie Sanders warns AI could “endanger the entire global financial system.”

🚨BREAKING: Quest Diagnostics has been hacked. The company confirmed unauthorized access to its Quanum Lab Services Manager system, used by clients to order tests and access lab results. Access has been suspended while the investigation continues. Core operations remain unaffected.

JUST IN: Anthropic's deputy security chief warns cyber threats are going to get “a lot worse before they get better,” urging companies to prepare for the next 18 months.

OVH supply chain compromise. Attackers took over a developer's GitHub account and replaced existing OVHcloud CLI release binaries with backdoored versions.

In Japan, reports of large-scale cyberattacks and data breaches have been coming in almost every day since last week, forcing even non-engineers to stay on high alert and leaving everyone on edge.

😈 #CyberSecurity #infosec

Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this. foxio.io/blog/header-accordi…

It’s time to turn off the internet.

Fascinating. Amazon says it has telemetry showing PHP2Shell was being exploited on Oct. 17—that is, four days prior to public disclosure. Not known who was doing it. "It remains unclear how the actor acquired exploit information prior to disclosure." aws.amazon.com/blogs/securit…

‼️ BREAKING: North Korea has been largely offline for more than a day. NetBlocks confirms the outage. NK News says nearly every .kp site has been down or unstable, from state news agency KCNA to national airline Air Koryo. The cause is unknown, and nobody has claimed an attack.

🚨 AI has discovered major PHP vulnerabilities, and they have been leaked. Attackers could exploit these vulnerabilities. If your systems run PHP, take these actions NOW: ***Recommendations of the UK National Cyber Security Center - Identify systems running PHP across your infrastructure, prioritizing internet-facing systems. Because all versions may be affected, don't limit discovery to outdated PHP versions; identify PHP installations generally and assess their exposure to CVE-2026-109618 and CVE-2026-109619. - Continuously monitor for security updates from third-party software vendors, including for appliances and services that may bundle PHP as a component. Apply relevant updates as they become available. - Update to the latest version of PHP and continue to monitor for future updates. - Apply the additional hardening steps provided by the PHP Team. - If you are unable to update to a version with the security update applied, the PHP Team has provided temporary mitigations. - If you are unable to apply the temporary mitigations, or applying them would take too long, you should consider taking the system offline until it can be fully mitigated. - If you are unable to update or disable the system immediately, then you should assess the system for any evidence of compromise prior to your upgrade or mitigation and look for backdoors installed by an attacker. If you are not confident you can do this yourselves, you can get assistance from an NCSC-assured Cyber Incident Response provider. - Continuously monitor for security updates from third-party software vendors, including for appliances and services that may bundle PHP. NCSC-NL has published an inventory list of software products with a PHP dependency potentially affected by the vulnerabilities. 👉 If you know organizations that might have been affected, share these recommendations with them.