ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

The Hacker News - Oct 22, 2026

This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't even over yet. But those big headlines are only half the story. Stolen passwords, exposed

Read full article

More News

Oct 22, 2026

INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown

INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects. Codenamed Operation Serengeti III, the cybercrime crackdown took place between June 29 and August 31, 2026. "Authorities identified

Oct 22, 2026

Combatting online scams in the age of AI

One in four Europeans has fallen victim to an online scam, from identity fraud to fake romances. The rise of artificial intelligence is ushering in new risks. Minh Nguyen, Chief Product Officer at security solutions provider Entrust, says both online platforms and governments can play a role in protecting consumers and businesses.

Oct 22, 2026

Unitree developing AI system to let humanoid robots improve themselves

Unitree Robotics is developing a “self-evolving” feedback loop designed to allow humanoid robots to write code, run simulations and improve their real-world performance independently, founder Wang Xingxing said, in a move that mirrors a broader push towards “self-improving” artificial intelligence. Speaking on Thursday at a physical AI conference hosted by Unitree in Hangzhou, Wang unveiled the project, dubbed “Unitree Rehearsal”, which he called the company’s most important initiative of the...

Oct 22, 2026

Websites go dark worldwide after critical flaws are exposed, leaving up to 70% of sites open to attack

An urgent warning has been issued to millions after a software used by more than half of the world's websites was found to have critical flaws that could let hackers take over servers.

Oct 22, 2026

‘Jensen’s nightmare’: Huawei, DeepSeek narrow AI chip ecosystem gap with Nvidia: report

Deepening “symbiosis” with artificial intelligence model start-up DeepSeek is helping Chinese tech champion Huawei Technologies catch up with Nvidia’s chip hardware and software ecosystem in a scenario that could mean Jensen Huang’s “nightmare is starting to come true”, according to a new report. DeepSeek’s latest software releases, on top of its increased experimentation with Huawei’s powerful Ascend 950PR chips, reveal that the technological gap with the US is closing, as the two firms...

Oct 22, 2026

I.U.C.N. Red List Classifies Most Shallow Coral Reefs as Critically Endangered

If climate change continues apace, 96 percent of shallow coral reef ecosystems may collapse within 50 years, including in Australia’s Great Barrier reef.

Oct 22, 2026

WhatsApp, Telegram SIM binding rules from January 1, 2027: Who will be affected in India?

WhatsApp, Telegram and other messaging apps may have to remain linked to registered, active SIM cards under India's new SIM-binding rules from January 1, 2027. The DoT has set December 31, 2026, as the compliance deadline, aiming to curb cyber fraud and the misuse of Indian mobile numbers.

Oct 22, 2026

The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns it. If an employee had that much reach with that little oversight, you would call it an insider risk. So why do we still call the agent a productivity tool?

Oct 22, 2026

Google Eyes Large ‘Virtual Power Plant’ for Data Centers

The tech giant is funding one of the nation’s largest “virtual power plants,” which would pay homes and businesses to adjust their energy use when grids are strained.

Oct 22, 2026

Elon Musk's Mars colonization dream faces reality check from Nobel laureate

Elon Musk’s Mars colonization dream faces reality check from Nobel laureateFor years, Elon Musk has patronized the idea of expanding human consciousness and colonization of the Mars planet as he thinks humans of inter-planetary species. Now Musk's plan of colonising the Red planet within 100...

Oct 22, 2026

At least four dead after storm brings flooding to southern France

The deaths include two women found drowned in a cellar in the Bouches-du-Rhône region.

Oct 22, 2026

What is PHP and why did it spark a global cyber-security scramble?

AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.

Recommended