access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Windows 11 cumulative updates KB5124008 & KB5122880 released
Microsoft has released Windows 11 KB5124008 and KB5122880 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-cumulative-updates-kb5124008-and-kb5122880-released/ also interesting: Microsoft NTLM Zero-Day to Remain Unpatched Until April 3 Actively Exploited Zero-Day Flaws Patched in Microsoft’s Latest Security Update The cloud is not your…
-
Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days
Today is Microsoft’s September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-september-2026-patch-tuesday-fixes-966-flaws-2-zero-days/ also interesting: Windows spoofing flaw exploited in earlier zero-day attacks Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days Microsoft fixes actively exploited Windows Hyper-V…
-
Government rejects Computer Misuse Act amendment to protect cyber professionals
The government has rejected an amendment to the Cyber Security and Resilience Bill intended to protect cyber security professionals, but says reforms are a priority First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366650173/Government-rejects-Computer-Misuse-Act-amendment-to-protect-cyber-professionals also interesting: UK Cybersecurity Weekly News Roundup 9 March 2025 Cybersecurity Snapshot: Security Lags Cloud and AI Adoption, Tenable Report Finds, as…
-
Your AI Didn’t Lie to You: It Was Just Being Manipulated
Hidden AI Activity Creates Security Gaps That Traditional Controls Can’t Detect As AI agents gain access to critical business systems, prompt injection, shadow AI and poisoned data can manipulate decisions without triggering traditional controls. Full-pipeline telemetry and continuous testing can help security teams investigate incidents while maintaining human accountability. First seen on govinfosecurity.com Jump to…
-
The High-Stakes Impersonation Threat Targeting Portfolio Companies and Fund Closes
Tags: threatIn private equity and venture capital, trust is the asset that actually moves money. A single transaction can represent hundreds of millions of dollars, riding on relationships with limited partners and reputations that took decades to build. So it’s no… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-high-stakes-impersonation-threat-targeting-portfolio-companies-and-fund-closes/ also interesting: A new variant of Cicada…
-
AIs as Modern Genies
This essay was written with Barath Raghavan, and originally appeared in Lawfare. In April, an artificial intelligence (AI) agent conducting a routine task at a company hit a snag, tried to solve it, and soon ended up deleting the company’s… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/ais-as-modern-genies/ also interesting: News alert: Hybrid Analysis adds…
-
Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026.Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the name Slim Spider.”The adversary demonstrates deep operational knowledge of Brazilian financial infrastructure, including the instant payment First seen on thehackernews.com Jump to article: thehackernews.com/2026/09/slim-spider-steals-crypto-custody.html…
-
OpenAI says ChatGPT outage causes image generation errors
OpenAI is investigating an ongoing incident causing ChatGPT image generation failures and delays when uploading files. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/technology/openai-says-chatgpt-outage-causes-image-generation-errors/ also interesting: Third-Party ChatGPT Plugins Could Lead to Account Takeovers OpenAI Developing Its Own Chip to Reduce Reliance on Nvidia OpenAI Purges ChatGPT Accounts: China and North Korea Weaponizing AI for…
-
ShinyHunters hackers claim breach of Florida “DAVID” DMV database
The ShinyHunters extortion gang claims it breached an online platform for the Florida Department of Motor Vehicles database known as “DAVID” and stole over 200,000 records about drivers in the state. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/shinyhunters-hackers-claim-breach-of-florida-david-dmv-database/ also interesting: Life360 says hacker tried to extort them after Tile data breach Discord users’ data…
-
AI Agents Can Make Human Oversight Less Reliable
Tags: aiResearchers Say Routine Approvals Can Dull Attention, Skills. AI agents are supposed to work under human supervision. But as they take on more work, the people watching them may become less prepared to catch their mistakes. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-agents-make-human-oversight-less-reliable-a-32768 also interesting: Noma Security Raises $32 Million to Safeguard Gen-AI Applications…
-
AI Agents Can Make Human Oversight Less Reliable
Tags: aiResearchers Say Routine Approvals Can Dull Attention, Skills. AI agents are supposed to work under human supervision. But as they take on more work, the people watching them may become less prepared to catch their mistakes. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-agents-make-human-oversight-less-reliable-a-32768 also interesting: Noma Security Raises $32 Million to Safeguard Gen-AI Applications…
-
‘White hat’ hackers take $47 million bounty after $320 million crypto theft
Public negotiations between hackers and the operators of the Liquid Network crypto platform ended with the attackers sending back most, but not all, of what they took. First seen on therecord.media Jump to article: therecord.media/liquid-network-blockstream-crypto-theft-hackers-keep-reward also interesting: How defenders use the dark web Dark Partners Hacker Group Drains Crypto Wallets Using Fake AI Tools and…
-
August updates trigger 0xc0000409 errors on Windows Server 2016
Microsoft says the August 2026 security update may trigger 0xc0000409 errors on Windows Server 2016 systems where the Compatibility Appraiser diagnostic service is enabled. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/august-updates-trigger-0xc0000409-errors-on-windows-server-2016/ also interesting: Patch Tuesday for May: Five zero day vulnerabilities CISOs should focus on Cyber agencies produce ‘long overdue’ best practices for securing…
-
The US military just turned off ad tracking on its phones. Maybe you should too
Location data sold by the ad industry has reportedly helped adversaries target US troops. The Pentagon has responded by switching off ad tracking on its devices – and you can do the same on yours. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/us-military-turned-off-ad-tracking-phones also interesting: Critical Cybersecurity Lessons from the Recent Exposure of U.S. Military…
-
Don’t let AI distract from cybersecurity basics, officials and executives warn
Simple attacks remain far more consequential than anything AI is doing, government and industry leaders said. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-cybersecurity-basics-billington/829777/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems The 2 faces of AI: How emerging models empower and endanger cybersecurity 13 ways…
-
N-able issues patch for zero-day flaw
Security researchers warned the company of unusual threat activity in a recently patched N-able environment. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/n-able-issues-patch-zero-day-flaw/829808/ also interesting: CVE-2025-61882: Frequently Asked Questions About Oracle E-Business Suite (EBS) Zero-Day and Associated Vulnerabilities Critical Zero-Day in Oracle E-Business Suite Prompts Urgent Security Updates CVE-2026-35616: Fortinet FortiClientEMS improper access control vulnerability…
-
What Benchmark Data Says About Deterministic SAST and Agentic Code Scanning
Much of the debate about agentic code scanning revolves around three core questions: Do more capable models find more vulnerabilities? Where does deterministic, rules-based SAST still fit? What does the cost and performance balance look like? We ran two benchmarks… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/what-benchmark-data-says-about-deterministic-sast-and-agentic-code-scanning/ also interesting: Hackers impersonate DeepSeek to distribute…
-
What Benchmark Data Says About Deterministic SAST and Agentic Code Scanning
Much of the debate about agentic code scanning revolves around three core questions: Do more capable models find more vulnerabilities? Where does deterministic, rules-based SAST still fit? What does the cost and performance balance look like? We ran two benchmarks… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/what-benchmark-data-says-about-deterministic-sast-and-agentic-code-scanning/ also interesting: Hackers impersonate DeepSeek to distribute…
-
Kubernetes 1.37 Is Here: Pod Rightsizing, DRA, and Gang Scheduling
Tags: kubernetesKubernetes 1.37 shipped on August 26, and it’s a good time to check in on a couple of features that kept coming up in roadmap conversations: in-place pod resizing and Dynamic Resource Allocation (DRA). Both of these features have been… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/kubernetes-1-37-is-here-pod-rightsizing-dra-and-gang-scheduling/ also interesting: Possible Chinese Hackers Use OpenMetadata…
-
Service Account Credential Rotation: The Blast-Radius Checklist
TL;DRThe problem: Service account credentials pile up with no clear owner, and teams avoid rotating them for fear of breaking production dependencies nobody has mapped.The checklist: Answer eight questions before rotating: validity, exposure, access scope, consumers, vault location, duplicate copies,… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/service-account-credential-rotation-the-blast-radius-checklist/ also interesting: 5 steps to strengthen supply…
-
The Silent Failure Problem: Your Security Controls Rot Without Telling You
Tags: controlIn 2025, URIports analyzed the top one million domains and found that 53.6 percent of BIMI-enabled domains had at least one error preventing their logo from displaying, up from 41.8 percent the year before. More than half of the organizations… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-silent-failure-problem-your-security-controls-rot-without-telling-you/ also interesting: [Video] Games We Play: Defenses…
-
France Establishes New Government-Focused Cyber Incident Response Unit
After a major cyber-attack targeted France’s national tax authority, the Prime Minister called for the establishment of a new dedicated cyber incident response capability First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/france-new-government-cyber/ also interesting: Key strategies to enhance cyber resilience 25 on 2025: APAC security thought leaders share their predictions and aspirations The Biggest Cyber…
-
Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours
Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operations, with one financially motivated hacking group employing an autonomous, multi-agent attack framework to carry out a large-scale credential harvesting campaign within six hours.Google Threat Intelligence Group (GTIG) said it has observed attackers with diverse motivations targeting proprietary AI First seen on thehackernews.com…
-
ChatGPT Flaw Let a Planted Prompt Send a Victim’s Gmail Data to Another Account
Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause ChatGPT to quietly work for an attacker while answering the user’s question as usual.In the company’s proof of concept, that hidden work read data from the user’s connected Gmail account and passed it to a…
-
Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC
Whoever took nearly 4,000 bitcoin from the Liquid Network on Sunday, September 6, returned 3,400 of it the next day, Bitcoin’s public record shows. About 598.5 bitcoin has not come back.Liquid is a Bitcoin sidechain that holds real bitcoin to back a token called L-BTC. The network is still paused, so holders cannot turn that…
-
OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor
OpenAI confirmed that GPT-6 Astra is the first model it has broadly deployed to reach the “Critical level” for cybersecurity capabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-says-gpt-6-astra-can-find-zero-days-but-is-also-harder-to-monitor/ also interesting: 9 top bug bounty programs launched in 2025 prompted: Key Insights from the AI Security Practitioners Conference FireTail Blog OpenAI Models Escaped Sandbox, Breached…
-
SAP warns of maximum severity ‘OVERPASS’ kernel vulnerability
SAP has addressed 20 vulnerabilities across multiple products in its September 2026 security updates, including a maximum-severity memory corruption flaw in the SAP Kernel code. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-overpass-kernel-vulnerability/ also interesting: SAP Security Patch Day Fixes 15 Flaws, Including 3 Injection Vulnerabilities December Patch Tuesday: Windows Cloud Files Mini Filter Driver…
-
Chrome is now shipping updates every 2 weeks as AI changes the security landscape
Google is speeding up Chrome’s release schedule to ship security patches and new features faster. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/08/chrome-is-now-shipping-updates-every-2-weeks-as-ai-changes-the-security-landscape/ also interesting: Privacy Roundup: Week 1 of Year 2025 Chrome 137 Integrates Gemini Nano AI to Combat Tech Support Scams 2025 Year of Browser Bugs Recap: Google Tests Twice-Weekly Chrome Security Updates…
-
The Cat in the Feed: AI Scares, Real Risks and Children in the Crosshairs
A familiar children’s character became an AI-generated social-media threat. The Cat may be fiction, but the capability behind it is not. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-cat-in-the-feed-ai-scares-real-risks-and-children-in-the-crosshairs/ also interesting: Availity eyes GitLab Duo with Amazon Q for code refactoring CISOs rethink the security organization for the AI era Flaws in Claude Code Put…
-
Ermittlungen seit 2017 Botnetz nach mehr als zwei Jahrzehnten
Tags: botnetFirst seen on security-insider.de Jump to article: www.security-insider.de/sality-botnetz-p2p-sinkholing-steuerungskanal-lahmgelegt-a-36e8ccaf8837740ebee3c1aad65e699c/ also interesting: Chinese Botnet AsService Bypasses Cloudflare Other DDoS Protection Services Hacker nutzen 100.000 IPAngriffe Hacker nutzen 100.000 IPAngriffe Gameover gang uses Cutwail botnet to swell its own
-
Hackers Impersonate IT Support on Microsoft Teams to Take Control of Employee PCs
A human-operated intrusion campaign in which attackers abuse Microsoft Teams external collaboration to impersonate internal IT or helpdesk staff, persuade employees to grant remote control of their PCs, and then move toward critical enterprise infrastructure. The campaign does not exploit a Microsoft Teams vulnerability. Instead, it weaponizes trust in familiar support workflows, combining Teams chats…
-
Reflectiz Launches Agentic Pentesting for Websites: Up to 10x Coverage vs Conventional Pentests
Boston, MA, USA, September 8th, 2026, CyberNewswire Specialized team of AI agents that discover, attack, and validate web vulnerabilities, leveraging pre-existing site context to eliminate noise and speed remediation. Reflectiz, the continuous web exposure management company, today launched a multi-agent penetration testing platform for websites. Multiple specialized AI agents discover, attack, and validate vulnerabilities across…
-
Adobe fixes critical Magento zero-day exploited to backdoor servers
Adobe has released an emergency fix for CVE-2026-75650, an actively exploited max-severity zero-day vulnerability dubbed StyleSmuggler, that impacts multiple versions of Magento and Adobe Commerce. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/adobe-fixes-critical-magento-zero-day-exploited-to-backdoor-servers/ also interesting: Top 12 ways hackers broke into your systems in 2024 Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and…
-
Sanders, Casar Want to Outlaw AI ‘Superintelligence’ and Pause Advanced AI
Tags: aiBernie Sanders and Greg Casar are preparing legislation to ban AI superintelligence and temporarily pause advanced AI development pending federal rules. The post Sanders, Casar Want to Outlaw AI ‘Superintelligence’ and Pause Advanced AI appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-sanders-casar-ai-superintelligence-ban-2026/ also interesting: Leading CISOs weigh in on AI’s role…
-
AI Could Shrink the Supply of Exploits Governments Rely On
AI could accelerate vulnerability discovery, shrinking the pool of exploits governments rely on while speeding up the race between attackers and defenders. The post AI Could Shrink the Supply of Exploits Governments Rely On appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-government-hackers-vulnerability-discovery/ also interesting: Cybersecurity Snapshot: U.S. Gov’t Urges Adoption of…
-
Before You Paste Anything Into ChatGPT, Check This List
Before pasting passwords, medical records, source code, or company data into ChatGPT, use this checklist to decide what should stay private. The post Before You Paste Anything Into ChatGPT, Check This List appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-what-not-to-share-chatgpt-ai-chatbots/ also interesting: Black Hat 2025 Recap: A look at new offerings…
-
This $30 Tool Helps You Spot Scams Before You Click
IsThisSpam helps you check suspicious emails, texts, links, and websites before you click or respond. The post This $30 Tool Helps You Spot Scams Before You Click appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/isthisspam-lifetime-subscription/ also interesting: Privacy Roundup: Week 3 of Year 2025 AI gives superpowers to BEC attackers The…
-
>>Zero-click<< WeChat worm could hijack accounts and spread via a single call
Researchers with security company Calif have discovered, weaponized, and privately reported to Tencent a critical vulnerability that allowed them to create … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/08/wechat-weworm-vulnerability-exploit-account-hijacking/ also interesting: Threats Actors Use Sophisticated Hacking Tools to Destroy Organizations Critical Infrastructure Cybersecurity Snapshot: CISA Highlights Vulnerability Management Importance in Breach Analysis, as Orgs…
-
Threat actors are giving AI agents a bigger role in cyberattacks
AI agents are automating parts of cyberattacks with less human involvement, including vulnerability scanning, credential harvesting, and troubleshooting, according to Google … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/08/ai-agents-cyberattacks-automation-google-research/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems 13 ways attackers use generative AI to exploit…
-
OnDemand |Law Enforcement in the Public Sector: Breaking Data Silos for Faster, Smarter Policing
A Public Sector Session from Elastic. Watch this session with Elastic and public sector leaders to explore how the Elasticsearch Platform is transforming law enforcement operations by unifying diverse data sources, enhancing collaboration, and enabling mission-critical insights at scale. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ondemand-law-enforcement-in-public-sector-breaking-data-silos-for-faster-a-32767 also interesting: E.U. Commission Fined for Transferring User…
-
A hacker stole $340M in a crypto heist, then returned most of it
The latest heist is one of the largest thefts of cryptocurrency to date. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/08/a-hacker-stole-340m-in-a-crypto-heist-then-returned-most-of-it/ also interesting: Hackers Leaking Taylor Swift Tickets? Don’t Get Your Hopes Up US seizes $23 million in crypto linked to LastPass breaches How defenders use the dark web North Korean hackers use new macOS…
-
Where the backlash against Flock Safety is having the biggest impact
Tags: unclassifiedTwo populous states and two large cities are among the U.S. jurisdictions where leaders have taken direct action to address criticisms of automated license plate readers (ALPRs). First seen on therecord.media Jump to article: therecord.media/flock-safety-backlash-places-with-biggest-impact also interesting: Liquidmatrix Security Digest Podcast Episode 7D Die IT-Organisationsstruktur hat Einfluss auf die Sicherheit im Cyberspace Frohe Weihnachten: Wir…
-
PolarProxy 2.0.2 Released
Tags: softwareA few more handy features have been added to PolarProxy, our TLS inspection proxy. PolarProxy can now tunnel outgoing connections through SOCKS proxies and supports environment variables as an alternative to command-line arguments. PolarProxy also ships with a software bill… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/polarproxy-2-0-2-released/ also interesting: Check Point Software stellt Quantum…
-
Daily OT Security News: September 08, 2026
Daily OT Security News, September 08, 2026. Concise operational summaries of the latest OT/ICS cybersecurity developments. MikroTik patches actively exploited RouterOS attack chain MikroTik released fixes for six RouterOS vulnerabilities after CERT Poland confirmed two flaws, collectively dubbed MikroTrick,… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-08-2026-2/ also interesting: Getting the Most Value Out of…
-
Daily OT Security News: September 08, 2026
Today’s verified developments cover critical vulnerabilities, exploit chains, AI-assisted PLC research, federal incident-reporting fragmentation, and a major mobile security release, items that affect IoT, OT, ICS, CPS, industrial and critical”‘infrastructure operations, and connected devices. N-able Patches Critical Zero-Day in… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-08-2026/ also interesting: Cybersecurity Snapshot: Tenable Highlights Risks of…
-
AI Is the Star of the Show. Identity Security Is Still the Stage.
Services Services Tailored consulting, engineering and managed security services to meet your unique needs. Application Security Ensure all software releases are secure Ensure all software releases are secure — www.guidepointsecurity.com/application-security/ Application Security Confidently use AI to fuel organizational success. –… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/ai-is-the-star-of-the-show-identity-security-is-still-the-stage/ also interesting: Smarter Threats Need Smarter Defenses:…
-
Using AI, Calif Creates Demo WeChat Exploit that Spreads Through Phone Calls
Researchers with Calif used AI to detect a security flaw in the WeChat app and then create a demo worm exploit that can be spread quickly through mobile phones. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/using-ai-calif-creates-demo-wechat-exploit-that-spreads-through-phone-calls/ also interesting: The 2024 cyberwar playbook: Tricks used by nation-state actors Why API Security is Essential for the…
-
Grindr Settles UK Data Privacy Claims for £26m
Grindr settled UK claims over alleged unlawful processing of sensitive user data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/grindr-settles-uk-data-privacy/ also interesting: Zero Data. Zero Risk. Full BYOD Secured by the Cloud 7 signs your cybersecurity framework needs rebuilding How to know you’re a real-deal CSO, and whether that job opening truly seeks one AI…
-
What It Took to Reach 1 Billion Build Manifests
Tags: containerIn the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also surpassed 3,000 unique container images and 675,000 image versions in our catalog. Those are the headline numbers, but I want to share what’s actually behind them. The number itself is less interesting than…