Signal RingRTC Flaw CVE-2026-113380 Can Keep Mic and Camera On
October 22, 2026
A CVSS 9.3 denial-of-service flaw in Signal’s RingRTC library can leave a microphone and camera live after hangup. A fix
News
Signal RingRTC Flaw CVE-2026-113380 Can Keep Mic and Camera On
A CVSS 9.3 denial-of-service flaw in Signal's RingRTC library can leave a microphone and camera live after hangup. A fix shipped in version 2.72.0 in ...
Exposed Servers Reveal INC and Gentlemen Ransomware AI Operations
SOCRadar found seven exposed servers tied to INC and The Gentlemen ransomware affiliates, holding AI chat logs, encryptor builds, credentials and 62 victims.
WhiteArmour Claims Breach of Disney Staff Directory
A hacker group called WhiteArmour says it holds Disney's internal staff directory and posted a sample of nearly 2,800 records. Disney has not commented.
Chrome 156 Patches 353 Security Flaws, Six Rated Critical
Google's Chrome 156 fixes 353 vulnerabilities, including six critical and 61 high-severity flaws, mostly memory safety bugs. No exploitation is reported.
PHP Warns of Two Critical RCE Flaws as Embargoed Details Leak
PHP pre-announced emergency patches for two CVSS 9.2 remote code execution flaws after embargoed details leaked, raising fears of mass exploitation soon.
DHS Orders Federal Civilian Agencies to Remove DeepSeek Products
A DHS order under the FASCSA directs US federal civilian agencies to remove DeepSeek products and bars new purchases, citing data access risks tied to ...
Feds Suspect Ransom Negotiator Helped Run ShinyHunters Leak Site
US investigators reportedly suspect executives at two ransomware negotiation firms had close ties to ShinyHunters, and one helped run its extortion site.
23andMe Successor Settles With California for $6M Over Breach
Chrome Holding Company, formerly 23andMe, will pay California $6 million over a 2023 breach that exposed data on nearly 7 million people, pending approval.
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
The UK ICO reprimanded Data Cymru and Ogi Networks after a test account with the password Password1 let ransomware hit data on 3,300 people, mostly ...
Mozilla, Google, Apple Block Eight Weak eMudhra CA Keys
Eight eMudhra CA intermediate keys were so weak they could be computed, so Mozilla, Google, Apple and Go blocked them and eMudhra revoked the certificates.
Exposed Servers Reveal INC and Gentlemen Ransomware AI Operations
October 22, 2026
SOCRadar found seven exposed servers tied to INC and The Gentlemen ransomware affiliates, holding AI chat logs, encryptor builds, credentials
WhiteArmour Claims Breach of Disney Staff Directory
October 22, 2026
A hacker group called WhiteArmour says it holds Disney’s internal staff directory and posted a sample of nearly 2,800 records.
Chrome 156 Patches 353 Security Flaws, Six Rated Critical
October 22, 2026
Google’s Chrome 156 fixes 353 vulnerabilities, including six critical and 61 high-severity flaws, mostly memory safety bugs. No exploitation is
PHP Warns of Two Critical RCE Flaws as Embargoed Details Leak
October 21, 2026
PHP pre-announced emergency patches for two CVSS 9.2 remote code execution flaws after embargoed details leaked, raising fears of mass
DHS Orders Federal Civilian Agencies to Remove DeepSeek Products
October 21, 2026
A DHS order under the FASCSA directs US federal civilian agencies to remove DeepSeek products and bars new purchases, citing
Feds Suspect Ransom Negotiator Helped Run ShinyHunters Leak Site
October 21, 2026
US investigators reportedly suspect executives at two ransomware negotiation firms had close ties to ShinyHunters, and one helped run its
23andMe Successor Settles With California for $6M Over Breach
October 21, 2026
Chrome Holding Company, formerly 23andMe, will pay California $6 million over a 2023 breach that exposed data on nearly 7
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
October 21, 2026
The UK ICO reprimanded Data Cymru and Ogi Networks after a test account with the password Password1 let ransomware hit
Mozilla, Google, Apple Block Eight Weak eMudhra CA Keys
October 21, 2026
Eight eMudhra CA intermediate keys were so weak they could be computed, so Mozilla, Google, Apple and Go blocked them
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.