Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell

The AI-enabled campaign hit two dozen targets, including sites linked to the U.S. government.

By David Jones • Oct. 30, 2026

Hackers could poison AI models by tampering with core infrastructure

AI systems rely on a complex web of hardware. Compromising any one component could let adversaries change model weights.

By Eric Geller • Oct. 29, 2026

Explore the Trendline➔

Managing and securing identity sprawl

Cyber threat actors know the simplest way to hack into an enterprise and remain under the radar is with stolen, legitimate user credentials -- and AI is making managing and securing digital identities more challenging than ever.

By Cybersecurity Dive staff

Hackers seize on vulnerable IoT devices to spy, pivot and route traffic

Known vulnerabilities with available patches are by far the biggest risk facing connected devices, a new report found.

By Eric Geller • Oct. 28, 2026

US launches program to deliver free cybersecurity help to rural hospitals

Small and rural healthcare organizations are among the most vulnerable critical infrastructure organizations in the nation.

By Eric Geller • Oct. 27, 2026

PwC confirms learning records breached in attack on vendor site

The professional services firm was the subject of a claim by a known ransomware actor.

By David Jones • Oct. 26, 2026

Large businesses’ cybersecurity insurance claims are now less frequent but more expensive

AI-powered attacks and hidden supply-chain weaknesses are making insurers’ work more difficult, according to a new report.

By Eric Geller • Oct. 23, 2026

China-nexus actor linked to attack on ConnectWise Cloud Backup

Researchers said the hackers employed a powerful AI tool to accelerate and scale the attacks against hundreds of Microsoft 365 users.

By David Jones • Oct. 22, 2026

Agentic AI helps hackers level up, even without detailed instructions

Low-skilled hackers are likely to become a lot more dangerous over the next 12 months, CrowdStrike warned.

By Eric Geller • Oct. 22, 2026

Weak encryption certificates could have let hackers easily spoof websites

Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized.

By Eric Geller • Oct. 21, 2026

FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure

The group has been linked to a 2025 attack targeting technology firm Ingram Micro.

By David Jones • Oct. 21, 2026

Critical PHP vulnerabilities expose most websites to potential compromise

Government agencies urged organizations to take their sites offline until they could be fixed.

By Eric Geller • Updated Oct. 21, 2026

Ransomware groups expand targeting of Palo Alto Networks vulnerability

Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal.

By David Jones • Oct. 20, 2026

AI security hiring focuses on red-teaming, SOC orchestration and governance

Roles mitigating AI deepfakes and overseeing post-quantum encryption rollouts are on the horizon, according to the SANS Institute.

By Eric Geller • Oct. 20, 2026

Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness

Nearly half of corporate directors think board members need cybersecurity expertise, a new survey found.

By Eric Geller • Oct. 19, 2026

ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users

Managed service providers said an attacker used compromised credentials to gain access to tenants.

By David Jones • Oct. 19, 2026

Q-day is coming: How to prepare for post-quantum security challenges

Q-day is coming. Discover how to prepare your IT infrastructure for post-quantum security challenges.

By Sue Poremba • Oct. 19, 2026

Open-source security rests on understanding risks, scaling fixes

Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report.

By Eric Geller • Oct. 16, 2026

Thousands of refrigerator devices remain exposed following French cyberattack

The investigation points to a much wider risk for industrial systems across the globe.

By David Jones • Updated Oct. 15, 2026

Internet exposure of AI tools, ICS devices continues to grow

Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found.

By Eric Geller • Oct. 15, 2026

Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests

The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking plots.

By Eric Geller • Oct. 14, 2026

Microsoft, Health-ISAC and partners take down popular phishing kit services

The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names.

By Eric Geller • Oct. 14, 2026

Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud

Risks are growing at a time when companies rely more than ever on vendors for cybersecurity, according to a new report.

By Eric Geller • Oct. 13, 2026

GitLab fixes critical vulnerability that exposed software environments to sabotage

The company urged customers to upgrade to the latest versions of its flagship products.

By Eric Geller • Oct. 12, 2026

FBI seizes domains linked to China-nexus botnet

The infrastructure supported an international hacking campaign that targeted critical providers, including a South Carolina-based power company.

By David Jones • Oct. 9, 2026

As frontier models go rogue, colleges beef up AI cybersecurity education

Student interest in AI safety is growing rapidly, and schools are rushing to prepare for new career paths.

By Eric Geller • Oct. 9, 2026