Cybersecurity
Cybersecurity news — Sunday 25 October 2026
6 stories from 4 sources, every one in English. Each links to its publisher.
-
YARA-X 1.22.0 Release, (Sun, Oct 25th)
SANS ISC
YARA-X's 1.22.0 release brings 11 improvements and 9 bugfixes.
-
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
The Hacker News
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to…
-
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
The Hacker News
In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws. "What researchers saw was an…
-
AI coding agents hijacked using AGENTS.md file in Downloads folder
BleepingComputer
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]
-
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
SecurityWeek
Founded in 2025 by Unit 8200 alumni, Tel Aviv-based Mave uses AI agents to investigate alerts across existing security stacks. The post Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave appeared first on…
-
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
The Hacker News
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment…