Skip to content
TrustList

TrustList daily digest · Tech and security

Sunday, 11 October 2026

Tech and security: the stories TrustList published on this day, each in a line of our own. Open a story for the whole piece and its sources.

Tech and security2

  1. 1Security advisories

    Seven countries tie old exploited flaws to China's Integrity Tech

    Advisory AA26-281A names eight CVEs, SoftEther persistence and Exchange password spraying, while the FBI seized seven domains behind the MicroScan and FishHub tools.

  2. 2Security advisories

    Fake "Security Audit" GitHub workflows now sweep git histories for keys

    A new GhostAction wave used hijacked maintainer accounts, including the author of an Uber repository, to plant a credential-stealing workflow. Socket counts more than 500 accounts since 7 October.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy