TECHZONE™
Открыть в Telegram
TECHZONE CYBERNEWS && UPDATES Wᴇʟᴄᴏᴍᴇ Tᴏ TECHZONE™ ✔️Infosec Facts ✔️Cheatsheets ✔️Free Courses ✔️Open source tools ✔️Tech news
Больше564
Подписчики
Нет данных24 часа
Нет данных7 дней
-830 дней
Загружаем данные
Похожие каналы
Облако тегов
Входящие и исходящие упоминания
---
---
---
---
---
---
Привлечение подписчиков
октябрь '26окт. '26
октябрь '26
+1
в 0 каналах
сентябрь '26
+5
в 0 каналах
Get PRO
август '26
+2
в 0 каналах
Get PRO
июль '26
+1
в 0 каналах
Get PRO
июнь '26
+1
в 0 каналах
Get PRO
май '26
+2
в 0 каналах
Get PRO
апрель '26
+1
в 0 каналах
Get PRO
март '26
+1
в 0 каналах
Get PRO
февраль '26
+2
в 0 каналах
Get PRO
январь '26
+2
в 0 каналах
Get PRO
декабрь '250
в 0 каналах
Get PRO
ноябрь '250
в 0 каналах
Get PRO
октябрь '250
в 0 каналах
Get PRO
сентябрь '250
в 0 каналах
Get PRO
август '25
+1
в 0 каналах
Get PRO
июль '25
+1
в 0 каналах
Get PRO
июнь '25
+1
в 0 каналах
Get PRO
май '250
в 0 каналах
Get PRO
апрель '250
в 0 каналах
Get PRO
март '250
в 0 каналах
Get PRO
февраль '25
+1
в 0 каналах
Get PRO
январь '250
в 0 каналах
Get PRO
декабрь '24
+1
в 0 каналах
Get PRO
ноябрь '24
+1
в 0 каналах
Get PRO
октябрь '240
в 0 каналах
Get PRO
сентябрь '24
+10
в 0 каналах
Get PRO
август '24
+4
в 0 каналах
Get PRO
июль '240
в 0 каналах
Get PRO
июнь '24
+1
в 0 каналах
Get PRO
май '24
+1
в 0 каналах
Get PRO
апрель '240
в 0 каналах
Get PRO
март '24
+2
в 0 каналах
Get PRO
февраль '24
+9
в 0 каналах
Get PRO
январь '24
+2
в 0 каналах
Get PRO
декабрь '230
в 0 каналах
Get PRO
ноябрь '230
в 0 каналах
Get PRO
октябрь '230
в 0 каналах
Get PRO
сентябрь '230
в 0 каналах
Get PRO
август '230
в 0 каналах
Get PRO
июль '230
в 0 каналах
Get PRO
июнь '230
в 0 каналах
Get PRO
май '230
в 0 каналах
Get PRO
апрель '230
в 0 каналах
Get PRO
март '23
+6
в 0 каналах
Get PRO
февраль '23
+6
в 0 каналах
Get PRO
январь '23
+10
в 0 каналах
Get PRO
декабрь '22
+12
в 0 каналах
Get PRO
ноябрь '22
+42
в 0 каналах
Get PRO
октябрь '22
+55
в 0 каналах
Get PRO
сентябрь '22
+135
в 0 каналах
Get PRO
август '22
+124
в 0 каналах
Get PRO
июль '22
+103
в 0 каналах
Get PRO
июнь '22
+3
в 0 каналах
Get PRO
май '22
+5
в 0 каналах
Get PRO
апрель '22
+7
в 0 каналах
Get PRO
март '22
+7
в 0 каналах
Get PRO
февраль '22
+8
в 0 каналах
Get PRO
январь '22
+23
в 0 каналах
Get PRO
декабрь '21
+49
в 0 каналах
Get PRO
ноябрь '21
+55
в 0 каналах
Get PRO
октябрь '21
+101
в 0 каналах
Get PRO
сентябрь '21
+145
в 0 каналах
Get PRO
август '21
+230
в 0 каналах
Get PRO
июль '21
+208
в 0 каналах
Get PRO
июнь '21
+315
в 0 каналах
Get PRO
май '21
+232
в 0 каналах
Get PRO
апрель '21
+84
в 0 каналах
Get PRO
март '21
+18
в 0 каналах
Get PRO
февраль '21
+29
в 0 каналах
Get PRO
январь '21
+35
в 0 каналах
Get PRO
декабрь '20
+1 038
в 0 каналах
| Дата | Привлечение подписчиков | Упоминания | Каналы | |
| 22 октября | 0 | |||
| 21 октября | 0 | |||
| 20 октября | 0 | |||
| 19 октября | 0 | |||
| 18 октября | 0 | |||
| 17 октября | 0 | |||
| 16 октября | 0 | |||
| 15 октября | 0 | |||
| 14 октября | 0 | |||
| 13 октября | 0 | |||
| 12 октября | 0 | |||
| 11 октября | +1 | |||
| 10 октября | 0 | |||
| 09 октября | 0 | |||
| 08 октября | 0 | |||
| 07 октября | 0 | |||
| 06 октября | 0 | |||
| 05 октября | 0 | |||
| 04 октября | 0 | |||
| 03 октября | 0 | |||
| 02 октября | 0 | |||
| 01 октября | 0 |
Посты канала
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014.
The fix matters even for administrators who patched nine days earlier: the October 12 update covered only versions 19.2 and later, and the new fixed versions sit one patch above it, so an
| 2 | LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.
The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the | 5 |
| 3 | OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
https://thehackernews.com/2026/10/openais-gpt-6-agent-removed-safety.html
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks.
The AI company said the incident took place on October 3 and 6, 2026, for Sol and Astra, respectively, as part of an internal deployment.
"A GPT-6.1 Sol agent repairing an | 4 |
| 4 | PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server.
The flaws, together called PHP2Shell, sit in the PHP runtime, not in any application, so a site is exposed even when its own | 4 |
| 5 | Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands
https://thehackernews.com/2026/10/google-chrome-adds-clickfix-warnings-to.html
Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled.
ClickFix is a popular social engineering technique in which bad actors trick users into copying and pasting malicious code directly into their computer's operating system, thereby bypassing conventional security controls.
As part of | 4 |
| 6 | China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
https://thehackernews.com/2026/10/china-aligned-bronze-sandcastle-abuses.html
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025.
"The most distinctive technical marker for Bronze Sandcastle is its consistent use of Sandboxie DLL sideloading," Sophos security researcher Gabor Szappanos said in a post published | 4 |
| 7 | Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports
https://thehackernews.com/2026/10/generative-ai-is-erasing-behavioral.html
Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now arrive fluent, personalized, and unique to each recipient, and the behavioral signals email filters have relied on for years are fading as a result.
Proofpoint shared several examples of the shift at its Protect 2026 conference. | 3 |
| 8 | PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
https://thehackernews.com/2026/10/php2shell-what-actually-protects-you.html
You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggested it now says.
PHP will release the fix at 14:00 UTC on October 21 for two flaws it rates 9.2 out of 10, and has given no workaround of its own. Until you can install it, what lowers your | 3 |
| 9 | The Harness Is the Hard Part of Agentic Pentesting
https://thehackernews.com/2026/10/the-harness-is-hard-part-of-agentic.html
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on afterward lives in the harness around the model. The harness is where the engineering in AI pentesting sits. The Hugging Face intrusion OpenAI disclosed in July | 3 |
| 10 | Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
https://thehackernews.com/2026/10/attackers-hijacked-over-300-tor-exit.html
Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found.
Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination. Only a password login to an SSH server made through Tor between October 1 and 5, after accepting the interception | 5 |
| 11 | Is the ad a scam? How to tell before you click
https://www.welivesecurity.com/en/social-media/is-ad-scam-how-tell-before-click/
You can trust a social media platform and still get scammed by an ad running on it | 4 |
| 12 | PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
https://thehackernews.com/2026/10/php2shell-two-unpatched-critical-php.html
PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on the CVSS v4.0 scale but has not described.
Security researchers at watchTowr say the two flaws allow remote code execution. Only the four supported PHP branches, 8.2 through 8.5, can receive the fix, and no exploitation has been reported so far. | 4 |
| 13 | Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20.
An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept.
A researcher reported the | 4 |
| 14 | Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
https://thehackernews.com/2026/10/critical-fortisiem-flaw-gets-public.html
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution.
The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially | 6 |
| 15 | Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
https://thehackernews.com/2026/10/qilin-and-inc-ransomware-groups-exploit.html
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors.
The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto Networks in May 2026 and was | 5 |
| 16 | Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
https://thehackernews.com/2026/10/hackers-use-autonomous-ai-agents-to.html
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left their control panels open on the internet.
The agents tried more than 1,200 sites and reached websites belonging to more than 100 companies, including farm-equipment maker Deere, appliance company | 5 |
| 17 | ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
https://thehackernews.com/2026/10/connectwise-resets-credentials-as-cloud.html
ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing application credentials, as it continues to respond to a security incident that led to unauthorized access to application identities associated with Cloud Backup.
The company said it has completed the following actions since it began | 4 |
| 18 | Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
https://thehackernews.com/2026/10/hackers-hijack-five-ovhcloud-cli.html
An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says.
They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC, | 2 |
| 19 | ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
https://thehackernews.com/2026/10/clickfix-attackers-exploit-siemens.html
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks.
The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious code with the same privileges as the | 2 |
| 20 | Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge
https://thehackernews.com/2026/10/ex-openai-engineer-detained-in-spy.html
A U.S. court on Monday granted the U.S. government's request to detain a former OpenAI engineer accused of planting a recording device in an executive conference room at the company's San Francisco office to allegedly steal sensitive secrets.
In a new court filing Sunday, prosecutors revealed that Abdulrahman Alfozan, a 35-year-old Saudi national, was "in frequent communications via WhatsApp | 3 |
