Infosec bits for 2026 week 44

Zoya Vilakazi | Oct. 30, 2026, 4:04 p.m.

Cybersecurity News:

AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours [Jessica Lyons, The Register]

Global PHP scramble reaches the Union Buildings [Duncan McLeod, TechCentral]

Fake IT help desk callers got by on little more than names and email addresses [Mirko Zorz, Help Net Security]

Data Breaches:

26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories [Swati Khandelwal, The Hacker News]

Vulnerabilities & Patches:

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces [Ravie Lakshmanan, The Hacker News]

Long-Hidden Flaws Patched in EPICS Research Facility Control Software [Eduard Kovacs, Security Week]

Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open [Swati Khandelwal, The Hacker News]

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions [Swati Khandelwal, The Hacker News]

Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls [Divya, GB Hackers]

GitHub’s npm package firewall can block brand-new versions before they install [Mirko Zorz, Help Net Security]

Malware:

Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners [Ravie Lakshmanan, The Hacker News]

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys [Swati Khandelwal, The Hacker News]