CybernewsPH

“Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator”, The Hacker News reports. #cybersecurity

“The Securities and Exchange Commission (SEC) has warned the public against investing in a restaurant franchise co-ownership scheme promising guaranteed monthly returns of up to 4 percent without requiring investors to manage a branch”, Inquirer Business reports. #cybersecurity #Philippines

“Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates”, BleepingComputer reports. #cybersecurity

“Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure”, BleepingComputer reports. #cybersecurity

“His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through third-party IT suppliers”, The Record reports. #cybersecurity

“For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe”, The Record reports. #cybersecurity #Philippines

“Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses”, BleepingComputer reports. #cybersecurity

“A leaked SquareML access key could have been used to access a database containing personal and health information”, SecurityWeek reports. #cybersecurity

“CISA added the widely publicized PHP vulnerabilities to the KEV, but didn't specify what kind of exploitation it was observing”, The Record reports. #cybersecurity

“More than half of the individual warnings from the Australian Signals Directorate (ASD) drew on previously secret material that had been cleared for disclosure, underscoring the growing role of intelligence sharing to prevent attacks”, The Record reports. #cybersecurity

“​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in ‘extremely sophisticated’ targeted attacks on iOS devices”, BleepingComputer reports. #cybersecurity

“Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon”, SecurityWeek reports. #cybersecurity

“A China-linked ransomware crew disabled the security tools at a critical infrastructure operator before it launched the encryptor”, CyberScoop reports. #cybersecurity

“Running at system boot, it periodically polled the update domain to execute any code served, with full privileges”, SecurityWeek reports. #cybersecurity

“French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners”, BleepingComputer reports. #cybersecurity

“Palace Press Officer Claire Castro on Tuesday likened fake news peddlers to ‘gremlins’ that multiply, even when it is not raining”, Inquirer.net reports. #cybersecurity #Philippines

“The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday”, BleepingComputer reports. #cybersecurity

“Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products”, SecurityWeek reports. #cybersecurity

“The Bureau of Internal Revenue (BIR) has suspended its contentious order requiring taxpayers to display their registration seal badges on digital platforms amid growing scrutiny over data privacy concerns”, Inquirer Business reports. #cybersecurity #Philippines

“The Department of Health (DOH) on Tuesday warned the public against individuals posing as Health Secretary Edwin Mercado to solicit donations”, Inquirer.net reports. #cybersecurity #Philippines

“Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account”, Help Net Security reports. #cybersecurity

“Attackers are exploiting newly disclosed security flaws within days, leaving organizations little time to respond, according to Rapid7’s Q3 2026 Quarterly Threat Landscape Report”, Help Net Security reports. #cybersecurity

Every item on the Route Map list has shipped: live watch, load-balanced paths, reverse traces, DNS timing, port tests, remote agents. Plus a Windows bug I explained wrong first. blog.osintph.info/route-map-everything-on-the-list/ #opensource #OSINT #networking

“The Monetary Board of the Bangko Sentral ng Pilipinas (BSP) has disqualified five money changers from registering with the central bank after finding they operated as money service businesses (MSBs) without registration, the BSP said”, Fintech News Philippines reports. #cybersecurity #Philippines

“Keystone destroyed 18,835 hardware wallets and halted shipments after intruders breached its Shopify database and stole a root device authentication key”, BitPinas reports. #cybersecurity

“CICC says child safety ‘cannot be matched by promises alone,’ urging platforms to deliver results on safeguards for minors online”, Rappler Technology reports. #cybersecurity #Philippines

“The University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and canceled appointments at more than 30 clinics”, SecurityWeek reports. #cybersecurity #Philippines

“The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed in the wild”, CyberScoop reports. #cybersecurity

Route Map is close to leaving beta. Before I pay for code signing, I want feedback from real networks. Free, open source visual traceroute for Windows, macOS and Linux. Try it, tell me what breaks, and star it on GitHub if it helps. getroutemap.app/download #networking #opensource #OSINT

“The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people”, BleepingComputer reports. #cybersecurity

“South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks”, BleepingComputer reports. #cybersecurity

“A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions”, Dark Reading reports. #cybersecurity

“According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks”, The Hacker News reports. #cybersecurity

“DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface”, BleepingComputer reports. #cybersecurity

“DepEd Davao City reiterates DepEd Order No. 6, banning cellphone use in classes and requiring social media consent for learners”, SunStar Publishing Inc. reports. #cybersecurity #Philippines

“Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell”, BleepingComputer reports. #cybersecurity

“The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected”, SecurityWeek reports. #cybersecurity

“UA says it has identified cases in which hackers compromised Dahua internet-connected cameras and video recorders, changed their settings and created unauthorized user accounts”, The Record reports. #cybersecurity

“Quest Diagnostics says a breach affected personal information and patient records”, Malwarebytes Labs reports. #cybersecurity

“The Philippine central bank reportedly confirms talks with Revolut, which must meet foreign bank entity rules before a digital licence is approved”, The Paypers reports. #cybersecurity #Philippines

“The BIR stops the mandatory online display of registration badges, which had an original deadline of October 31, following complaints over data privacy and additional red tape”, Rappler reports. #cybersecurity #Philippines

“Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild”, BleepingComputer reports. #cybersecurity

“Bicol Saro party-list Rep. Terry Ridon has called out members of the Duterte family for the cyber libel cases filed against members of the media, saying that if they were able to do it before, lawmakers will not allow it to happen again”, Inquirer.net reports. #cybersecurity #Philippines

“TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native Computing Foundation, and an open community now maintains it”, Help Net Security reports. #cybersecurity

“The Senate impeachment court has not dismissed the case against Vice President Sara Duterte and will resume the trial on November 9”, Rappler reports. #cybersecurity #Philippines

“Stellar Cyber collects and normalizes telemetry, detects suspicious activity, correlates evidence, builds cases, investigates incidents, triages findings, and drives response from the same security architecture”, Help Net Security reports. #cybersecurity

“Fastly recorded approximately 250,000 requests from PHP2Shell-named tools across roughly 3,200 public IP addresses through midday October 22”, GBHackers reports. #cybersecurity

“AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report”, Help Net Security reports. #cybersecurity

“This proof-of-concept (PoC) exploit illustrates how specially crafted HTTP requests can trigger memory corruption, disclose internal PHP addresses, and execute commands on a vulnerable server”, GBHackers reports. #cybersecurity

“Eighty-one percent of suspected digital fraud in its network during the first half of 2026 occurred during account logins and financial transactions, highlighting risks that persist throughout a customer relationship”, Help Net Security reports. #cybersecurity