Thursday , November 5 2026

International

HexStrike AI Connects ChatGPT, Claude, Copilot with 150+ Security Tools

HexStrike AI, a new tool, aims to connect large language models (LLMs) with practical cybersecurity operations.The latest release, v6.0, provides AI agents like OpenAI’s GPT, Anthropic’s Claude, and GitHub’s Copilot with over 150 advanced security tools for independent penetration testing, vulnerability research, and bug bounty automation. This advanced framework serves …

Read More »

UK telecom firm Colt suffers massive ransomware attack: data up for sale

UK telecom

UK telecoms company Colt suffered a cyberattack by the Warlock ransomware gang. The attack began on Tuesday, 12th August, around 11 am BST, initially reported as a technical issue. By Thursday, 14th August, Cold announced they were addressing a cyber incident affecting Colt Technology Services, including hosting, porting services, Colt …

Read More »

Hackers To Attack Fortinet SSL VPN From 780 unique IPs

Fortinet SSL VPN

An unprecedented surge in brute-force attacks targeting Fortinet SSL VPN infrastructure, with over 780 unique IP addresses participating in coordinated assault campaigns. The August 3rd attack represents the highest single-day volume recorded on GreyNoise’s Fortinet SSL VPN Bruteforcer tag in recent months, raising concerns about potential zero-day vulnerabilities and sophisticated …

Read More »

Biometric Clone: ₹5.58 crore loss, 251 accounts in 17 districts

₹5.58 crore

A sophisticated cyber fraud has stolen over ₹5.58 crore from many bank accounts, highlighting serious concerns about digital payment security. This scam involved cloning biometric data and affected 251 accounts in 17 districts. Authorities are working hard to contain the situation and catch those responsible. The Modus Operandi: A Digital …

Read More »

Amazon ECS Internal Protocol Exploited to Steal AWS Credentials

ECS

Security researchers disclosed a cirtical flaw in Amazon Elastic Container Service (ECS) that enables harmful containers to steal AWS credentials from other tasks on the same EC2 instance. The attack, dubbed “ECScape,” exploits an undocumented internal protocol to impersonate the ECS agent and harvest privileged credentials without requiring container breakout. …

Read More »

7 Tools for Automated Server Patching

7 tools

Let’s look at 7 tools for automating patch deployment. Each tool offers unique features for various environments, from small DevOps teams to large enterprises. Attune by AttuneOps (Windows and Mac: Free & Enterprise) Best for: DevSecOps teams and infrastructure-as-code workflows Attune is purpose-built for automating complex server administration tasks, with …

Read More »

Germany’s top court rules police may use spyware solely for serious crimes

police

Germany’s top court ruled on Thursday that police can secretly install spy software on phones and computers only for serious crimes. Key Points: German high court has limited the use of police spy software to serious criminal investigations. The court called the use of spyware a “serious interference” with privacy …

Read More »

Firepass Offers Safer, Cheaper Alternative to Traditional Fire Systems

Firepass

SmartData, has introduced advanced fire-extinguishing technology; Firepass, is gaining attention in Bangladesh as a fire prevention solution. This technology prevents fire from spreading in a specific area and can quickly extinguish any fire that starts. Now, this technology is cheaper than the traditional fire fighting system in Bangladesh but its …

Read More »

Hidden Backdoor “TINYSHELL” Found in ATM Network via Raspberry Pi

A covert attack on ATM systems has been detected, using a hidden Raspberry Pi to access internal bank networks. The intrusion involved physical access, a rarely seen anti-forensics technique and malware designed to avoid standard detection methods. Attackers Gained Physical Access to ATM Network: A group named UNC2891 connected a …

Read More »

OWASP Unveils Agentic AI Security Guidance

OWASP

OWASP has released new guidelines for securing AI applications that use large language models. The guidance, released on July 28, provides technical recommendations for builders and developers of AI agents, particularly targeting AI/ML engineers, software developers, security experts, and AppSec professionals. “As AI systems evolve toward more autonomous, tool-using, and …

Read More »