FOE
SecurityWeek
FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers
FRIEND
EFF Deeplinks
Victory! California Appeals Court Refuses to Revive Surveillance Tech CEO’s Meritless Lawsuit Against Journalist
FOE
The Register (Security)
Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else
FOE
Dark Reading
Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
FOE
Dark Reading
Trump, Tech Giants Strike Voluntary AI Safety Accord
FOE
Ars Technica (Security)
Attackers have been exploiting critical Zimbra flaw to steal emails
FOE
Bleeping Computer
Russian state hackers use new RedFlick technique to push malware
FOE
Bleeping Computer
DIVD says Zammad zero-days enabled AI-driven network breach
FRIEND
Dark Reading
As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half
FOE
The Register (Security)
16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows
FOE
Bleeping Computer
Over 543,000 valid credentials exposed in public GitHub repositories
FRIEND
EPIC
Senator Markey Introduces Bill to Stop the Government’s Use of Face Surveillance and Other Biometric Surveillance Tech
FOE
The Hacker News
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
FOE
EFF Deeplinks
📱 Hey Siri, How Do I Limit AI Data Access? | EFFector 38.17
FOE
The Hacker News
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
FOE
BrightTALK InfoSec
AI Incident Response in Critical Infrastructure: Who Takes Command?
FRIEND
BrightTALK InfoSec
Reducing Outage Impact: Resilience-by-Design for Critical Services
FOE
Bleeping Computer
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
FOE
The Hacker News
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
FOE
Dark Reading
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
FOE
The Hacker News
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
FOE
Bleeping Computer
Cisco warns of new SD-WAN zero-day exploited in attacks
FOE
Pen Test Partners
Safe, but sailing nowhere. Can you stop a fleet of ships?
FOE
SecurityWeek
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery
FOE
Bleeping Computer
AI's Third Wave: Coworkers Break the Security Model That Worked for Agents
FOE
CSO Online
Unsloth’s model picker had a code-execution problem
FRIEND
Bleeping Computer
Microsoft to block Entra ID script injection attacks starting October
FOE
SecurityWeek
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability
FOE
SecurityWeek
Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks
FOE
Bleeping Computer
TeamViewer urges users to patch severe flaws “as soon as possible”
FOE
SecurityWeek
Chrome, Firefox Updates Patch Over 100 Vulnerabilities
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: I’m watching you
FOE
CISA Alerts
CISA Adds One Known Exploited Vulnerability to Catalog
FOE
The Hacker News
Know Your Enemy: Browser-Based Attack Techniques in 2026
FRIEND
SpecterOps
Introducing Adversary Intelligence: LLM Tradecraft
FOE
The Hacker News
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
FOE
SecurityWeek
Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit
FRIEND
Ars Technica (Security)
Cloudflare plans to issue quantum-safe TLS certificates
FOE
Bleeping Computer
Bitget hacked via zero-day in third-party security products
FOE
Schneier on Security
I Want Better Reporting on AI Genie Behavior
FOE
SecurityWeek
Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks
FOE
The Hacker News
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
FOE
SecurityWeek
ShinyHunters Defiant After FBI Calls on Members to Come Forward
FOE
The Register (Security)
More than half of UK businesses lack confidence in basic cyber skills
FOE
CSO Online
The MFA you have isn’t the MFA you think you have
FOE
CSO Online
Can we jail a superintelligence?
FOE
The Register (Security)
UK rail cops' £320K face-scanning spree nets zero matches
FOE
CSO Online
Whatever happened to the 36-month IT security roadmap?
FOE
The Hacker News
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
FOE
The Hacker News
OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
FOE
The Register (Security)
Spectre bug is back, this time to haunt JIT engines
FOE
Dark Reading
South Africa Seeks Help After Cyberattack Targets Air Traffic Control
FOE
SecurityWeek
High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL
FOE
The Hacker News
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
FOE
Risky Business News
Risky Bulletin: Sanctions force CAs to revoke TLS certs in Iran, Russia
FRIEND
SecurityWeek
Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development
FOE
Sophos News
TerminalFix and Lorem Ipsum Loader enable covert tunneling
FOE
CISA KEV
CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
FRIEND
Sophos News
Sophos Firewall v23 is now in early access
FOE
The Register (Security)
Add one more AI worry to the nightmare scenario: self-replicating prompt injections
FOE
Dark Reading
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
FOE
EFF Deeplinks
While the Country Rejects ALPR Mass Surveillance, SF Settles for Weak Safeguards
FRIEND
Bleeping Computer
Signal adds encypted local backup support to iOS, desktop apps
FOE
Dark Reading
Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution
FOE
Bleeping Computer
Custom ChatGPTs push ClickFix attacks to deploy RAT malware
FOE
SecurityWeek
OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference
FOE
Bleeping Computer
FBI tells ShinyHunters members to turn themselves in after recent arrest
FOE
The Register (Security)
FBI to ShinyHunters: 'We know how to find you'
FOE
Bleeping Computer
Hackers exploit Citrix NetScaler zero-day to deploy web shells
FOE
Bleeping Computer
Former US Air Force members sent to prison over BEC attacks
FOE
The Register (Security)
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
FOE
The Hacker News
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
FRIEND
SecurityWeek
DARPA Selects Xint to Use AI in Securing Military Messaging Apps
FOE
The Hacker News
Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
FOE
Bleeping Computer
New Spectre v2 attack variant leaks Linux root password hash in minutes
FRIEND
Dark Reading
Cloudflare Announces Public Certificate Authority for the Post-Quantum Web
FOE
The Hacker News
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
FOE
SecurityWeek
New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks
FOE
The Register (Security)
AI models keep posting screenshots showing sensitive data from inside tech companies
FOE
Bleeping Computer
Automated AI agent used to breach cybersecurity nonprofit DIVD
FOE
Dark Reading
'NeedyMantis' Provides Long-Term Access to Compromised Networks
FRIEND
Professor Messer
Today’s N10-009 CompTIA Network+ Pop Quiz: Let’s pack some for later
FRIEND
EFF Deeplinks
Privacy’s Defenders Podcast: Cowboys, Cypherpunks and Visionaries
FOE
CSO Online
OpenAI pulls the plug on GPT 6.1 Astra as agents keep crossing lines
FOE
SecurityWeek
RemoteThreat Launches With $7 Million for Offensive Operations Platform
FOE
The Register (Security)
Apple patches CoreGraphics zero-day already exploited in targeted attacks
FOE
Dark Reading
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
FOE
The Hacker News
Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
FRIEND
Bleeping Computer
Catch threats before they escalate with real-time Identity Telemetry
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: That’s not a bird
FOE
The Hacker News
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
FOE
The Register (Security)
OpenAI benches GPT-6.1 Astra for overstepping the mark
FOE
SANS Internet Storm Center
Scans for Wordfence Protected Websites, (Tue, Sep 29th)
FRIEND
SecurityWeek
Reco Raises $55 Million for Agentic Security
FOE
SecurityWeek
Hackers Use ChatGPT Custom GPTs in ClickFix Attacks
FOE
SecurityWeek
Pentagon Personnel Agency Data Breach Impacts 3 Million People
FOE
CISA Alerts
CISA Adds One Known Exploited Vulnerability to Catalog
FOE
CISA Alerts
MikroTik RouterOS
FOE
CISA Alerts
Baicells Nova 430H
FOE
CISA Alerts
Viidure Dashcam Android Application
FOE
CISA Alerts
VIVOTEK Camera Firmware
FOE
CISA Alerts
Lantronix G520 Series Cellular Gateway
FOE
CISA Alerts
Anjvision YSSD-RTMP-H5
FOE
CISA Alerts
Toptech TMS7 and TopHAT
FRIEND
SecurityWeek
Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks
FOE
Bleeping Computer
Vietnamese man charged in $16 million 'pig butchering' crypto scam
FOE
The Register (Security)
Former X-Force hackers chase the offensive cyber gold rush
FOE
SecurityWeek
Four Cyber Threats Harboring Big Plans for the Future
FOE
SecurityWeek
OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training
FOE
Schneier on Security
Using Device Linking to Eavesdrop on WhatsApp and Signal
FOE
SecurityWeek
Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation
FOE
SecurityWeek
Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft
FOE
Bleeping Computer
Kiteworks patches critical flaw, brings customer systems online
FOE
The Hacker News
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
FOE
Bleeping Computer
Apple patches CoreGraphics zero-day flaw exploited in attacks
FOE
SecurityWeek
Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’
FOE
The Hacker News
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
FOE
The Hacker News
OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
FOE
The Hacker News
OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
FOE
The Register (Security)
OpenAI’s dirty deeds Down Under included security bypass attempts, using exposed keys, source code siphon
FRIEND
CSO Online
Nvidia releases Open Agent Safety Platform to monitor and govern agentic AI
FOE
CISA KEV
CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability
FOE
Sophos News
Jev’s Paradox: The hidden cost of cheap AI decisions
FRIEND
Intigriti
10 years of Intigriti
FOE
SANS Internet Storm Center
Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th)
FRIEND
Dark Reading
Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities
FOE
Dark Reading
One Packet Can Crash OT Servers in Industrial Sectors
FOE
Bleeping Computer
Japan's Keio confirms ransomware attack disrupted business systems
FOE
Bleeping Computer
Times Car confirms data breach affecting 6.6 million user accounts
FOE
EFF Deeplinks
EFF to San Francisco Police: Drones are Powerful Surveillance Tools That Require a Robust Policy
FOE
The Register (Security)
JadePuffer crims hijacked Azure identities and used them to blow up cloud resources
FOE
Dark Reading
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
FOE
Bleeping Computer
Dutch police confirm arrest in ShinyHunters hacking investigation
FOE
The Hacker News
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
FOE
Bleeping Computer
Misconfigured Supabase apps expose data in over 16,000 databases
FOE
Dark Reading
AI Agents Are Privileged Users; Who Is Auditing Their Access?
FOE
The Hacker News
Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
FRIEND
The Hacker News
IAM for AI agents: A Practical Enterprise Framework
FOE
The Hacker News
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
FOE
The Hacker News
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
FRIEND
SecurityWeek
Modulate Raises $25 Million to Advance Deepfake Detection
FOE
CSO Online
OpenAI pauses AI model training after another agent bypasses network restrictions
FOE
The Intercept (Privacy)
AI Almost Started a U.S.–China War — and No One Seems to Care
FOE
Dark Reading
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
FOE
Bleeping Computer
JadePuffer agentic AI attacks target Azure, destroy cloud resources
FOE
Dark Reading
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
FRIEND
SecurityWeek
Call for Presentations Open for 2026 CISO Forum Virtual Summit
FOE
Krebs on Security
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
FOE
CSO Online
Autonomous agents attack Azure using compromised identities, destroying resources
FOE
EPIC
EPIC and Consumer Groups Urge FTC to Treat Surveillance Pricing as an Unfair Practice
FOE
The Hacker News
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
FOE
Bleeping Computer
80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking
FOE
SecurityWeek
Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon
FOE
The Register (Security)
Ex-soldier's telecom hacking spree earns him 70 months
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: That was easy
FOE
The Hacker News
Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
FOE
The Hacker News
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
FOE
SecurityWeek
DC Health Agency Exposes 400,000 Beneficiary Records
FOE
Schneier on Security
New Attack Against RSA
FOE
SecurityWeek
Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign
FOE
SecurityWeek
New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections
FRIEND
SecurityWeek
Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog
FOE
CSO Online
NetScaler admins told to patch critical zero-days in ADC and Gateway now
FOE
SecurityWeek
Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability
FOE
Bleeping Computer
Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist
FOE
The Hacker News
JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
FOE
CSO Online
Stolen AI credentials feed growing LLM proxy economy
FOE
Bleeping Computer
US soldier gets 70 months in prison for extorting 10 tech, telecom firms
FOE
SecurityWeek
Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug
FOE
The Hacker News
CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
FOE
The Register (Security)
Certainties in life: Death, taxes, and critical Citrix vulns under attack
FOE
Bleeping Computer
CISA orders feds to patch exploited Citrix flaws by Wednesday
FOE
The Register (Security)
OpenAI pauses some training amid allegations its rogue agents behaved more badly than first thought
FOE
Risky Business News
Risky Bulletin: Intel ends paid bug bounties
FOE
Sophos News
Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation
FOE
Bleeping Computer
OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email
FOE
Bleeping Computer
Citrix confirms two NetScaler RCE zero-days exploited in attacks
FRIEND
SANS Internet Storm Center
Wireshark 4.6.9 Released, (Sun, Sep 27th)
FOE
Bleeping Computer
Cloudflare fixes Containers cross-tenant flaw exposing customer data
FRIEND
Bleeping Computer
Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors
FOE
CISA Alerts
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
FOE
CISA Alerts
CISA Adds Two Known Exploited Vulnerabilities to Catalog
FOE
SecurityWeek
Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks
FOE
The Hacker News
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
FOE
CISA KEV
CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability
FOE
CISA KEV
CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
FOE
Bleeping Computer
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
FOE
The Hacker News
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
FRIEND
SecurityWeek
China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks
FOE
Bleeping Computer
GitHub Actions re-enabled with Mini Shai-Hulud payload still active
FOE
Bleeping Computer
OpenAI's AI agents accidentally uploaded user-provided images to third-party sites
FOE
SecurityWeek
New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining
FOE
The Hacker News
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
FOE
The Hacker News
Zero Trust for AI Agents Starts With Fixing Zero Visibility
FOE
SecurityWeek
OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure
FOE
The Hacker News
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
FOE
The Hacker News
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
FOE
The Hacker News
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
FOE
Krebs on Security
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
FOE
Bleeping Computer
Kiteworks urges 6-hour server shutdown over potential zero-day attacks
FOE
Bleeping Computer
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
FRIEND
Dark Reading
How the CISO CFO Relationship is a Key to Cybersecurity Success
FOE
BrightTALK InfoSec
Cyber Threat Intelligence and AI: Are We Ready?
FOE
BrightTALK InfoSec
Open Source + AI: Where Attackers Move Next in 2027
FRIEND
BrightTALK InfoSec
The Governed Hybrid Workforce: Policy and Controls for Human and AI Agents
FOE
Ars Technica (Security)
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
FOE
The Register (Security)
Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
FOE
Dark Reading
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment
FOE
The Register (Security)
ShinyHunters tells The Reg: We hacked the FBI to 'protect our business'
FOE
Bleeping Computer
Elementor WordPress flaw lets attackers create admin accounts
FOE
Dark Reading
What We Missed: Google Gemini Joins the AI Escape Party
FOE
CSO Online
AI tools help hacker break in for $25 per target
FOE
The Register (Security)
Crooks use fake desktop apps to fool HR staff into giving them remote access
FOE
Bleeping Computer
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
FOE
The Register (Security)
Bitget blames North Korea for $387.5M crypto wallet raid
FOE
CSO Online
Documentation placeholder domain used in ClickFix attacks
FRIEND
Bleeping Computer
Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions
FOE
SecurityWeek
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
FOE
CSO Online
GitLab issue email’s only security is obscurity
FOE
Bleeping Computer
With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance
FOE
Dark Reading
Stopping IT Worker Scams Requires Revamped HR Process
FOE
The Hacker News
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
FOE
SecurityWeek
North Korea Suspected in $351 Million Bitget Crypto Heist
FOE
The Hacker News
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
FOE
Bleeping Computer
Microsoft plans to deprecate Windows Deployment Services
FOE
SecurityWeek
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks
FOE
SecurityWeek
Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: Table for one
FOE
CISA Alerts
CISA Adds One Known Exploited Vulnerability to Catalog
FOE
CISA Alerts
CISA Adds Two Known Exploited Vulnerabilities to Catalog
FOE
Bleeping Computer
Rydox marketplace admin pleads guilty, faces 22 years in prison
FOE
The Hacker News
The SOC Doesn't Need to Start Over with Every Alert
FOE
Schneier on Security
On Anthropic’s AI Misuse Report
FOE
SecurityWeek
Windows, Linux, Android File Notification Systems Leak User Activity
FOE
The Hacker News
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
FOE
Bleeping Computer
Microsoft: Recent Windows updates cause desktop loading issues
FOE
The Hacker News
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
FOE
Privacy International
PI’s response to the UK Department for Science, Innovation & Technology on data regulation in the age of AI and other data-intensive technologies
FOE
SecurityWeek
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
FOE
Bleeping Computer
Hackers steal $351.6 million in Bitget crypto exchange hack
FOE
CSO Online
Fixing Flock: The controls needed now that misuse patterns are clear
FOE
Dark Reading
Russia's Hybrid Cyber-Physical War in Europe Heats Up
FOE
SecurityWeek
Roundcube Webmail Vulnerability in Attackers’ Crosshairs
FOE
SANS Internet Storm Center
A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th)
FOE
The Hacker News
Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data
FOE
The Hacker News
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
FOE
Risky Business News
Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol
FOE
Sophos News
Kiteworks recommends server shutdown pending possible attack
FOE
CISA KEV
CVE-2026-87902: WordPress Core Remote File Inclusion Vulnerability
FOE
Intigriti
Intigriti Bug Bytes #240 - September 2026 🚀
FOE
CISA KEV
CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability
FOE
CISA KEV
CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
FOE
The Register (Security)
Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
FOE
The Intercept (Privacy)
Flock Wants The Most Detailed Map of Its Surveillance Cameras Taken Offline
FOE
Dark Reading
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
FOE
Bleeping Computer
MacSync malware uses public iCloud calendars to deliver new payloads
FOE
SecurityWeek
Autonomous AI Hacks Raise Thorny Questions of Legal Accountability
FOE
Dark Reading
SectopRAT Returns, Hiding Inside a Legitimate Application
FOE
CSO Online
WordPress patches a critical severity security vulnerability
FOE
EFF Deeplinks
DraftKings Is Using AI to Supercharge the Harms of Online Behavioral Advertising
FOE
Bleeping Computer
New Carbonato malware uses AI agents to hijack exposed Docker hosts
FOE
The Register (Security)
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
FRIEND
Red Siege
Red Siege at Wild West Hackin’ Fest Deadwood 2026: What to Expect
FOE
The Hacker News
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
FRIEND
BrightTALK InfoSec
Strengthening CNI Continuity Amid Sophisticated Cyber Attacks
FOE
The Hacker News
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
FOE
Bleeping Computer
Exposed GitLab project email addresses let attackers push code
FOE
EPIC
Congressional Hearing Adds Fuel to Flock Fire
FOE
The Register (Security)
Decades-old file security flaws found in Android, Linux, macOS, and Windows
FOE
The Register (Security)
CVE flood pushes Ubuntu onto weekly kernel release cycle
FOE
SpecterOps
AI for Offensive Security: What Works, What Does Not, and How to Adopt It
FRIEND
CSO Online
Microsoft integrates SOC capabilities with Defender for enterprises
FRIEND
SecurityWeek
Kontext Security Emerges With $4 Million for AI Agent Runtime Controls
FOE
The Hacker News
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
FOE
The Register (Security)
Someone went shopping in ASUS's eShop – for customer data
FRIEND
Professor Messer
Today’s SY0-701 CompTIA Security+ Pop Quiz: It won’t stop moving
FOE
Dark Reading
3 Cyber Threats That Defined the Summer of 2026
FOE
SecurityWeek
OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data
FOE
The Hacker News
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
FRIEND
Dark Reading
How to Build A SASE Framework for Modern Cybersecurity
FRIEND
Bleeping Computer
FedRAMP VDR & VER: Daily Scans Are Only the Beginning
FOE
CSO Online
On-prem VeloCloud Orchestrator under attack, only some versions patched
FOE
Dark Reading
Ghost Service Accounts Enable M365 Data Theft in Chile
FOE
Bleeping Computer
Hackers now exploit critical Roundcube flaw in code injection attacks
FRIEND
The Register (Security)
Google to critical infra orgs: Our AI scanners won't be evil, promise
FOE
Dark Reading
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'
FOE
SecurityWeek
AI-Powered Campaign Targets Hundreds of Online Retailers
FOE
The Hacker News
Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: Under oath
FOE
CISA Alerts
CISA Adds Two Known Exploited Vulnerabilities to Catalog
FOE
CISA Alerts
Eufy Omni C20, Omni X10 Pro
FOE
CISA Alerts
Botslab G980H Dashcams
FRIEND
SecurityWeek
Island Raises $400 Million at $6.4 Billion Valuation
FOE
Ars Technica (Security)
There's a new way to break RSA that's faster than anything we've seen before
FOE
Schneier on Security
Malicious npm Packages That Evade Defenses
FRIEND
SecurityWeek
OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators
FOE
The Hacker News
Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
FRIEND
SecurityWeek
Begin at the End: How to Enable Agentic Remediation
FOE
Bleeping Computer
CISA: Ransomware gangs now exploiting critical TeamCity flaw
FOE
SecurityWeek
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
FOE
SecurityWeek
Astrana Health Data Breach Impacts Private, Confidential Information
FOE
Bleeping Computer
OpenAI hacked Australian Medicare govt site, probed data providers
FOE
The Hacker News
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
FOE
CSO Online
Aviation solved the vigilance problem. AI just gave security a worse one
FOE
SecurityWeek
US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks
FOE
The Register (Security)
Government contractor exposed path to immigration records
FOE
CSO Online
58 hardware vulnerabilities: A guide to the threats
FOE
Bleeping Computer
Microsoft fixes bug that broke Windows File History backup feature
FRIEND
Privacy International
Human rights standards and guidelines on the use of digital technologies in electoral processes
FOE
SecurityWeek
Critical WordPress Vulnerability Exploited Immediately After Disclosure
FOE
The Hacker News
OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
FOE
The Hacker News
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
FOE
SANS Internet Storm Center
One URL, Three Different Tricks, (Thu, Sep 24th)
FOE
The Hacker News
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
FOE
Risky Business News
Srsly Risky Biz: Bring On the AI Lawsuits
FOE
TrustedSec
What's New in hate_crack Since 2.0
FOE
CSO Online
Check Point hacked: The security software protecting your network has become a prime attack target
FOE
The Register (Security)
OpenAI agents ‘infiltrated Australian government website’
FOE
CISA KEV
CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability
FOE
CISA KEV
CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability
FOE
Bleeping Computer
Placeholder domain used in dev docs now serves ClickFix attacks
FRIEND
Dark Reading
SASE Converges Network & Security Into One Cloud Solution
FRIEND
EPIC
MediaPost: Paramount Urges SCOTUS To Reject Video Privacy Claim
FOE
EPIC
Democracy Docket: DOJ delay tactics aim to advance Trump’s voter suppression schemes
FRIEND
EPIC
The New Republic: The Supreme Court Digital-Privacy Case That Could Go Either Way
FOE
Ars Technica (Security)
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real
FOE
The Intercept (Privacy)
The Ellisons Could Make a Killing in Big Surveillance With the Paramount Merger
FOE
Bleeping Computer
New RemControl Android banking malware targets users in Europe and Canada
FOE
Dark Reading
EDR Evasion Stack Helps Process Injection Slip Past Defenses
FOE
Dark Reading
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
FOE
CSO Online
F5 fixes actively exploited zero-day flaw in BIG-IP APM
FOE
Bleeping Computer
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
FOE
Bleeping Computer
Hackers start exploiting critical WordPress flaw for code execution
FOE
The Register (Security)
Someone's attacking a critical 0-day RCE in F5 BIG-IP APM
FOE
The Hacker News
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
FOE
SecurityWeek
Worries About an AI Internet Takeover Gain New Urgency Among Doomsday Scenarios
FRIEND
EPIC
EPIC Urges Third Circuit to Uphold Pennsylvania’s Protections Against Posting Voter Data Online
FOE
The Hacker News
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
FOE
Bleeping Computer
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
FOE
The Hacker News
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
FOE
CSO Online
GitHub App keys can still enable takeovers long after they are forgotten
FOE
The Register (Security)
Academic publisher Elsevier hit by LAPSUS$ redirect attack
FRIEND
The Register (Security)
Closing the observability gap for the AI-ready enterprise
FOE
Dark Reading
Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign
FOE
Bleeping Computer
InfraTrust report warns network management systems under attack
FOE
The Hacker News
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
FOE
Bleeping Computer
How One Kubernetes YAML Can Hand Over a GCP Organization
FOE
PortSwigger Research
HTTP/3 in Burp Suite - it’s time to find a bigger wordlist
FOE
The Hacker News
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
FOE
Bleeping Computer
Arista patches actively exploited VeloCloud Orchestrator zero-day
FRIEND
SecurityWeek
Honeywell: OT Security Teams Embrace AI, but Autonomy Still Rare
FOE
The Hacker News
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: That’s a lot of bits
FOE
Dark Reading
UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks
FOE
CISA Alerts
Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators
FRIEND
The Hacker News
545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent
FOE
The Hacker News
Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests
FOE
SecurityWeek
Adobe Patches Critical Flaws in Connect, AEM Forms
FOE
SecurityWeek
AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft
FOE
Bleeping Computer
Microsoft: September Windows updates break Always On VPN connections
FOE
The Hacker News
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
FOE
Schneier on Security
Research on Models Engaging in Genie-Like Behavior
FRIEND
SecurityWeek
Chrome 154 Patches 108 Vulnerabilities
FOE
SecurityWeek
A Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at Risk
FRIEND
SecurityWeek
Outerlimit Raises $16 Million to Stop Rogue AI Agents From Causing Harm
FOE
SecurityWeek
Arista Urges Immediate Patching of Exploited VCO Zero-Day
FOE
The Hacker News
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
FOE
The Hacker News
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
FRIEND
CSO Online
Okta bets on identity to control AI agents, but is identity enough?
FOE
Bleeping Computer
Ryuk ransomware member sentenced to 24 months in prison
FRIEND
The Register (Security)
Why security belongs in the network
FOE
SecurityWeek
Critical F5 BIG-IP Vulnerability Exploited as Zero-Day
FOE
Bleeping Computer
F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks
FOE
SecurityWeek
ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report
FOE
The Hacker News
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input
FOE
SecurityWeek
Check Point Patches Exploited Management Server Zero-Day
FOE
Risky Business News
Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity
FOE
The Hacker News
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
FRIEND
DFIR Diva Blog
Techno Security & Digital Forensics Conference: October 20-22, 2026
FOE
SANS Internet Storm Center
Macfinger ClickFix campaign, (Tue, Sep 22nd)
FOE
CSO Online
AI malware just removed the human from the attack loop
FOE
Sophos News
The Rising Threat of Deepfakes: Why Organizations Must Rethink Trust
FOE
EPIC
WBUR: Is your driver’s license on the dark web?
FOE
Bleeping Computer
Rogue external MFA providers can steal passwords during logins
FOE
Bleeping Computer
Sweden fines Miljödata $183,000 over breach affecting 2.2 million
FOE
EPIC
Syracuse: New York is poised to ban price changes based on income, age and even race. Would it work?
FOE
The Register (Security)
Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions
FOE
Dark Reading
Relays Are Masking Chinese Access to Frontier AI Models in the US
FOE
EPIC
CNN: ‘Turn the cameras off:’ London’s growing privacy pushback against smart glasses
FRIEND
EPIC
Privacy Daily: Eyes on FTC as Agency Recommits to Reviewing Personalized Pricing
FRIEND
Dark Reading
How the CISO-CMO Alliance Builds Trust Before Crisis Strikes
FOE
CSO Online
Microsoft’s EvilTokens takedown sheds light on state of AI-powered cybercrime
FOE
Bleeping Computer
Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
FOE
Dark Reading
Microsoft Disrupts EvilTokens Device Code Phishing Service
FOE
BrightTALK InfoSec
Securing MCP Servers from Agentic AI Attacks
FRIEND
Dark Reading
Deception by Design: CISA's Guide to Tricking Cybercriminals
FOE
Ars Technica (Security)
Microsoft disrupts AI-assisted platform that compromised 12,000
FOE
Bleeping Computer
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
FOE
The Hacker News
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
FOE
Bleeping Computer
New ClosedQuorum Windows malware uses AI for attack decisions
FOE
The Hacker News
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
FOE
The Hacker News
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
FOE
SecurityWeek
BigCommerce Data Stolen via Ribon Apps Hack
FOE
Dark Reading
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
FOE
The Register (Security)
ShinyHunters claims FBI hack: 'This is NOT financially motivated'
FRIEND
Bleeping Computer
Reducing shadow IT visibility gaps with Wazuh
FOE
Dark Reading
Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real
FRIEND
BrightTALK InfoSec
From Connectivity to Control: Building Vendor‑Resilient OT
FOE
BrightTALK InfoSec
Beyond Users and Workloads: The Agentic Shift in Cloud-Native Zero Trust
FOE
The Hacker News
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
FOE
The Hacker News
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
FOE
The Register (Security)
NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past
FOE
Bleeping Computer
Check Point warns of Management Server zero-day exploited in attacks
FOE
The Hacker News
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
FOE
SpecterOps
Introducing Ghostwriter Skills
FOE
The Register (Security)
Z.ai says sorry for slurping up your code, open sources ZCode
FRIEND
Professor Messer
Today’s N10-009 CompTIA Network+ Pop Quiz: So many numbers
FOE
The Register (Security)
UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites
FOE
The Register (Security)
Who signed off on that AI agent? Nobody? Thought so.
FOE
Bleeping Computer
EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts
FOE
CSO Online
Z.ai disables coding assistant feature after flaw exposed enterprise code upload risk
FRIEND
SANS Internet Storm Center
The Truth about GET and HTTP Standards, (Tue, Sep 22nd)
FRIEND
SecurityWeek
Cyera Raises $400 Million at $12+ Billion Valuation
FOE
SecurityWeek
Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity
FOE
CSO Online
Beware these fake websites selling subscriptions to AI assistants
FRIEND
Bleeping Computer
Webinar tomorrow: Inside real-world Google Workspace breaches
FOE
Bleeping Computer
D-Link warns of max severity zero-day bug in DIR-822A routers
FOE
The Hacker News
AI Agents Are Rewriting the Rules of Lateral Movement
FOE
The Hacker News
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups
FOE
SecurityWeek
Only 13% of OT Network Segments Are Fully Isolated: Analysis
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: That’s a lot
FOE
CISA Alerts
CISA Adds Four Known Exploited Vulnerabilities to Catalog
FOE
CISA Alerts
OpenPLC Runtime v3
FOE
CISA Alerts
lwIP TCP/IP Stack MQTT Client Application
FOE
CISA Alerts
lwIP (Lightweight IP)
FOE
CISA Alerts
Siemens WTV676 and WTV776
FOE
CISA Alerts
Siemens Siveillance Control
FOE
CISA Alerts
Siemens Desigo CC family
FOE
CISA Alerts
Siemens SIMOVE Fleetmanager and SIPLANT
FOE
CISA Alerts
Siemens Industrial Edge Management
FOE
CISA Alerts
Siemens SIPLUS and SIMATIC Products
FOE
Dark Reading
More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds
FOE
SecurityWeek
Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers
FRIEND
The Hacker News
DORA Year Two: Can Your SOC Actually See the Attack?
FOE
The Hacker News
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
FOE
SecurityWeek
Malicious B-tree NPM Package Accumulates Millions of Downloads
FOE
The Hacker News
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
FRIEND
Schneier on Security
GPT-6 Astra Breaks an Old Enigma Message
FOE
SecurityWeek
WordPress Patches ‘Click2Shell’ Vulnerability
FOE
Bleeping Computer
New Windows Defender zero-day blocks Microsoft antivirus updates
FOE
The Hacker News
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
FOE
CSO Online
The cyber AI parity window now has a deadline
FOE
Bleeping Computer
CISA orders feds to patch Zyxel flaw exploited for data theft
FOE
SecurityWeek
Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme
FOE
CSO Online
CISOs can no longer ignore the nation-state threat
FOE
The Hacker News
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
FOE
The Hacker News
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
FOE
The Hacker News
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
FOE
The Hacker News
Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
FRIEND
SecurityWeek
US Proposes AI Incident Alert System in Talks With China, Bessent Says
FOE
CSO Online
Gemini broke into 3 companies, but Google kept it quiet because ‘no damage was done’
FOE
CISA KEV
CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
FOE
CISA KEV
CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability
FOE
CISA KEV
CVE-2026-93952: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
FOE
The Register (Security)
Anthropic-linked CVEs pile up, attackers mostly shrug
FOE
Ars Technica (Security)
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
FOE
Dark Reading
How AI Agents Can Trigger Runaway Costs for Enterprises
FOE
Bleeping Computer
BigCommerce alerts merchants of data breach linked to Ribon apps
FOE
Bleeping Computer
CISA alerts of active exploitation of three Linux kernel flaws
FOE
Dark Reading
ShinyHunters Hacked Clop. Now What About Clop's Victims?
FOE
The Register (Security)
Meta Muse AI app flaw lets local malware redirect dictation traffic
FOE
Dark Reading
Cybercriminals Are Hiding New Malware in Torrents for Popular Films
FOE
The Register (Security)
Treasury chief says AI bosses, not their bots, will carry the can for criminal acts
FOE
Bleeping Computer
WordPress Click2Shell flaw lets hackers execute PHP on the server
FOE
Bleeping Computer
Microsoft to retire Microsoft 365 Companion apps in December
FOE
The Hacker News
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
FOE
SecurityWeek
Google Hit With $463 Million Fine for EU Location Data Rule Breach
FOE
The Hacker News
Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
FOE
The Hacker News
Google Fined €403 Million Over GDPR Violations Tied to Location Data
FOE
CSO Online
After spending billions, OpenAI still has gaps in its cybersecurity
FOE
SecurityWeek
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
FOE
Bleeping Computer
Google fined €403 million over location data privacy violations
FOE
Dark Reading
Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents
FOE
Bleeping Computer
Microsoft fixes broken Excel copy and paste for all Office users
FOE
Schneier on Security
Reverse-Engineering Flock Cameras
FRIEND
SecurityWeek
CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast
FOE
CSO Online
New npm malware finds a way around install script defenses
FOE
The Hacker News
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
FOE
The Hacker News
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
FRIEND
Bleeping Computer
FBI's CJIS v6.1: What Security Teams Need to Know.
FRIEND
SecurityWeek
Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal
FRIEND
CSO Online
Orchid Security Introduces AI Agent Readiness Controls Featuring Continuous Identity Monitoring and Kill-Switch Capabilities
FRIEND
Bleeping Computer
Microsoft reminds admins to migrate Entra ID users to passkeys
FOE
SecurityWeek
RatHat Android Trojan Uses AI for Automation
FOE
The Register (Security)
Clop gets a taste of its own medicine after ShinyHunters hijack leak site
FOE
EFF Deeplinks
EU Kids Act Won't Keep the Internet Accountable and Trustworthy
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: Leave a message at the tone
FOE
CISA Alerts
CISA Adds One Known Exploited Vulnerability to Catalog
FOE
SecurityWeek
Rust Team Members and Popular Crate Owners Targeted via Video Calls
FOE
Bleeping Computer
Microsoft: September updates break File History backup feature
FOE
SecurityWeek
CrowdSec Confirms Source Code Stolen in Supply Chain Attack
FOE
SANS Internet Storm Center
TerminalFix: PNG Steganography, (Mon, Sep 21st)
FOE
The Register (Security)
Rustaceans warned of job interviews with a malicious payload
FOE
SecurityWeek
Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems
FOE
SecurityWeek
Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities
FOE
CSO Online
Revoking the token didn’t kill the backdoor
FOE
The Hacker News
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
FOE
CSO Online
5 ways AI is reshaping the cybersecurity job market
FOE
SecurityWeek
Google Confirms Gemini AI Breached Three Firms
FOE
Google Project Zero
Windows Exploitation Techniques: Dangling COM Object Registrations
FOE
The Hacker News
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
FOE
Risky Business News
Risky Bulletin: Gemini hacked three companies too
FRIEND
Intigriti
From sceptic to supercharged. How AI changed my day as a QA Engineer
FOE
CISA KEV
CVE-2026-7273: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
FOE
Bleeping Computer
Malicious npm packages evade install-script defenses at runtime
FOE
Bleeping Computer
Researchers escape OpenAI Codex sandbox to run commands on host
FOE
Ars Technica (Security)
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
FOE
Bleeping Computer
BragJack attacks hijack AI browser agents through malicious extensions
FRIEND
SecurityWeek
TigerByte Cyber Emerges From Stealth With $3 Million in Funding
FOE
The Register (Security)
Agentic security is the billion-dollar challenge for some clever startup to solve
FOE
Bleeping Computer
North Korean WaterPlum hackers infected 30,000 devices worldwide
FOE
Bleeping Computer
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
FRIEND
The Hacker News
Identity Visibility in 2026: The Foundation of Identity Security
FOE
Bleeping Computer
Viral AI actress' hotline face-scans every caller, watches their mood
FOE
Bleeping Computer
Calling viral AI actress Tilly Norwood? Agree to a face scan first
FOE
The Hacker News
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
FOE
The Hacker News
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
FOE
The Hacker News
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
FOE
The Hacker News
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
FOE
The Hacker News
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
FOE
The Hacker News
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
FOE
EFF Deeplinks
EFF Statement on California Governor's Executive Order on AI
FOE
EFF Deeplinks
How to Limit What Apple’s New Siri AI Can Access in iOS 27
FOE
EFF Deeplinks
Secure Messaging and AI Remain In Conflict Despite the Promise of TEEs
FOE
Dark Reading
Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
FOE
Dark Reading
Cisco Zero-Day Highlights API Endpoint Authentication Issues
FOE
Dark Reading
EY Survey Finds Autonomous AI Implementation Outpaces Oversight
FOE
Dark Reading
MFA Won't Save You From OAuth Consent Abuse
FOE
The Hacker News
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
FOE
The Register (Security)
Researchers used Claude to hack OpenAI employees' ChatGPT accounts
FOE
The Hacker News
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
FOE
The Register (Security)
North Korea's fake job interviews infected 30,000 devices
FOE
CSO Online
CISA is ending its monthly vulnerability bulletin
FOE
The Register (Security)
FBI: Fake cop and government impersonation scams cost victims $1.6B
FOE
Bleeping Computer
Gyazo server flaw exploited to steal 23.6 million user records
FOE
CSO Online
A zero-click RCE flaw in AI coding agents could have exposed enterprise systems
FOE
The Hacker News
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
FOE
Bleeping Computer
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
FOE
CSO Online
GhostCode attackers abuse device codes to take over Microsoft 365 accounts
FOE
SecurityWeek
In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
FRIEND
Bleeping Computer
Secure enterprise sharing with access reviews for Microsoft 365
FRIEND
Bleeping Computer
Microsoft Teams will let admins block custom file extensions
FOE
Ars Technica (Security)
Researchers used Claude to hack OpenAI
FRIEND
Bleeping Computer
Webinar: Which Google Workspace security controls actually matter?
FOE
The Hacker News
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
FOE
SecurityWeek
AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code
FRIEND
Bleeping Computer
Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: This might be challenging
FOE
CISA Alerts
CISA Adds One Known Exploited Vulnerability to Catalog
FOE
CISA Alerts
CISA Adds Two Known Exploited Vulnerabilities to Catalog
FOE
SecurityWeek
23 Million User Records Compromised in Gyazo Data Breach
FOE
Pen Test Partners
Is AI toast? Building an AI Talkie Toaster
FOE
Schneier on Security
Are AIs Still Struggling with CAPTCHAs?
FOE
The Hacker News
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
FOE
The Hacker News
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
FOE
SecurityWeek
Microsoft Patches 18 Vulnerabilities in AI, Cloud Products
FOE
The Hacker News
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
FOE
SecurityWeek
NightmareStresser DDoS Service Disrupted in International Operation
FOE
SecurityWeek
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites
FOE
Bleeping Computer
New Check Point flaw lets hackers execute code with root privileges
FOE
The Hacker News
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
FOE
SecurityWeek
Critical Orkes Conductor Vulnerability Exploited in Attacks
FRIEND
CSO Online
Strong fundamentals make next-gen security possible
FRIEND
SecurityWeek
MIND Secures $72 Million for AI-Powered DLP
FOE
SecurityWeek
Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
FOE
Dark Reading
AI Agent Breaches Spanish Organization, Modifies Personal Data
FOE
The Hacker News
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
FOE
The Register (Security)
USA’s Venezuela takeover comes with bonus exposure to Chinese AI surveillance tech
FRIEND
EFF Deeplinks
EFF to Lawmakers: Ground AI Cybersecurity Rules in Best Practices
FOE
CISA KEV
CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
FOE
CISA KEV
CVE-2025-39964: Linux Kernel Race Condition Vulnerability
FOE
CISA KEV
CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability
FOE
The Register (Security)
AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom
FOE
Bleeping Computer
New RatHat Android malware uses AI to automate device control
FRIEND
Dark Reading
CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus
FOE
CSO Online
Cisco patches max-severity ISE flaw, the second critical zero-day this week
FOE
EFF Deeplinks
California’s “Addictive Feeds” Law Violates Teens’ First Amendment Rights
FOE
The Register (Security)
Researchers find way to listen in on headphones from afar
FOE
Dark Reading
China's FamousSparrow APT Spies on US Politics in Latin America
FOE
Bleeping Computer
OpenAI details more cases of AI agents taking unauthorized actions
FOE
Ars Technica (Security)
LLMs respond differently to harmful prompts when AI watermarking is used
FOE
The Hacker News
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
FOE
The Register (Security)
China's Salt Typhoon backdoors Latin American orgs with new snooping malware
FRIEND
Dark Reading
[Virtual Event] Cybersecurity Outlook 2027
FOE
The Hacker News
ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
FOE
Bleeping Computer
Brevo supply-chain attack injected ClickFix scripts on customer sites
FOE
SecurityWeek
Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels
FRIEND
SpecterOps
CiliumHound: Graphing Kubernetes Network Policies
FOE
CSO Online
OpenAI admits six new misalignment incidents under new reporting framework
FRIEND
SecurityWeek
OpenAI Says Its Models Searched GitHub for Leaked API Keys During Training
FOE
The Hacker News
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
FOE
CSO Online
Security spending is growing — except for the typical CISO
FOE
The Register (Security)
London property manager breach may have exposed bank details and lockbox codes
FOE
SANS Internet Storm Center
LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)
FRIEND
Professor Messer
Today’s SY0-701 CompTIA Security+ Pop Quiz: Whisper in the wind
FRIEND
SecurityWeek
CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot
FOE
The Hacker News
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
FOE
Bleeping Computer
What Recent AI-Powered Attacks Mean for Your Identity Security
FOE
SecurityWeek
Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom
FOE
CSO Online
Self-modifying AI agents expose a blind spot in enterprise security
FOE
Bleeping Computer
Windows 11 24H2 Home and Pro reach end of support in October
FRIEND
SecurityWeek
Comp AI Raises $34 Million for AI-Native Compliance and Security
FOE
The Register (Security)
Cisco drops another exploited zero-day, this time a perfect 10
FOE
SecurityWeek
ISC Patches 14 Vulnerabilities in BIND 9 Security Update
FOE
The Hacker News
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
FOE
SecurityWeek
Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows
FOE
SecurityWeek
Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard
FOE
CISA Alerts
Bransys ELD
FOE
CISA Alerts
Mitsubishi Electric GX Works3 and Motion Control Settings
FOE
CISA Alerts
ABB Ability Edgenius
FOE
CISA Alerts
Schneider Electric PowerChute Serial Shutdown
FOE
CISA Alerts
Schneider Electric NetBotz 5 750/755
FOE
CISA Alerts
Schneider Electric Modicon M340 Controller and Communication Modules
FOE
CISA Alerts
Hitachi Energy FACTS Control Platform (FCP)
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: Can’t audit what you can’t see
FRIEND
The Hacker News
Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
FRIEND
Bleeping Computer
US takes down NightmareStresser DDoS-for-hire platform
FOE
The Register (Security)
Test environment let anyone access live customer data
FOE
Schneier on Security
How Candidates Could Use AI for Good
FOE
The Hacker News
CISO's Expert Guide to Agentic Pentesting for Websites
FOE
The Register (Security)
Ofcom discovers issuing Online Safety Act fines is easier than collecting them
FOE
The Hacker News
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
FOE
The Hacker News
OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
FOE
Ars Technica (Security)
Hackers reveal how Flock cameras really track cars and people
FOE
The Intercept (Privacy)
Facing Outraged Residents, Flock Got Help From Group That Uses AI to Rally Public Support
FOE
Bleeping Computer
Chinese hackers use SparroWocky malware in govt espionage attacks
FRIEND
CSO Online
16 governance tools for securing your AI fleet
FOE
Bleeping Computer
Microsoft shares workaround for Windows domain login issues
FOE
The Hacker News
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
FRIEND
SecurityWeek
CISA Releases Guidance on Deploying Cyber Decoys
FOE
SecurityWeek
AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals
FOE
The Hacker News
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
FOE
Bleeping Computer
Cisco warns of max severity ISE zero-day exploited in attacks
FOE
The Hacker News
Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
FOE
SecurityWeek
Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day
FOE
The Hacker News
U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks
FOE
TrustedSec
Unpacking a laZzzy Donut
FOE
Bleeping Computer
Anthropic wants Claude to analyze your bank account and financial data
FRIEND
Sophos News
The answer to AI uncertainty is adaptability, not paralysis
FRIEND
EFF Deeplinks
Victory! Appeals Court Rejects Expansive New Copyright Claim
FOE
EPIC
Cronkite News: Supreme Court ruling clears way for mail ballots, used by 75% of Arizona voters, to proceed as usual
FOE
EPIC
CalMatters: Who’s buying your personal data: Disney, GM, your insurer and bank. Here’s what they get
FOE
EPIC
Consumer Reports: Companies Make It Hard to Access Your Personal Data Under State Privacy Laws, CR Finds
FOE
The Register (Security)
AI agents can modify themselves without humans telling them to do so
FRIEND
Professor Messer
Professor Messer’s SY0-701 Security+ Study Group – September 2026
FOE
Dark Reading
AI Security Spending Jumps as Fear Outpaces Proof of Value
FOE
Ars Technica (Security)
Nonprofit that tracks meteors taken down by "critical blow" from a cyberattack
FOE
Bleeping Computer
Windows 11 KB5124008 update breaks domain trust for some users
FOE
The Register (Security)
CISA decides weekly vulnerability bulletin isn't necessary anymore
FOE
Bleeping Computer
Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
FRIEND
CSO Online
LinkedIn fights for the right to tell customers when the feds want their data
FOE
Bleeping Computer
Malware bypasses browser checks to force install Chrome, Edge extensions
FOE
SANS Internet Storm Center
Scans Targeting Hospitality Applications, (Wed, Sep 16th)
FOE
Krebs on Security
Data Broker Radaris Loses Domains in Privacy Fight
FRIEND
Dark Reading
Fighting Your Dragons Through Tough Tech Times
FOE
The Register (Security)
Google Pixel phones pwned in zero-click attacks
FOE
Bleeping Computer
Spain's data agency gets first report of AI-powered data breach
FOE
Dark Reading
BragJack Attack Can Turn a Browser's Agentic AI Against It
FOE
SecurityWeek
First Agentic AI Data Breach Reported to Spanish Regulator
FRIEND
EFF Deeplinks
EFF Welcomes Alexander Macgillivray to its Board of Directors
FOE
EFF Deeplinks
👮 Flock Searches for the LOLs | EFFector 38.16
FOE
CSO Online
Big Tech’s AI safety rift signals disruption and disparity for enterprises
FOE
EFF Deeplinks
How the Meta Settlement Silences Youth Activism
FOE
EFF Deeplinks
How the Meta Settlement Silences Youth Activism
FRIEND
SpecterOps
Ghostwriter v7.3.0: A Fresh New Look
FOE
CSO Online
Oracle’s September patches put Fusion Middleware back in the hot seat
FOE
The Hacker News
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
FOE
CSO Online
AI agent authorization risks remain a gap in new NIST-CISA token security guidance
FOE
The Hacker News
Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
FOE
The Hacker News
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
FRIEND
SecurityWeek
Virtual Event Today: Attack Surface Management Summit
FOE
SecurityWeek
EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media
FOE
Bleeping Computer
The true cost of a ransomware attack, with and without BCDR
FRIEND
SecurityWeek
AIUC Raises $40 Million to Certify Enterprise AI Agents
FOE
The Hacker News
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
FOE
The Hacker News
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix
FOE
SecurityWeek
Pixel Modem Zero-Day Exploited in Targeted Attacks
FOE
Bleeping Computer
Microsoft says Copilot buttons still missing in classic Outlook
FRIEND
Bleeping Computer
Webinar: What happens in the first hours of a Google Workspace breach
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: You really only need one size
FOE
SecurityWeek
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
FOE
CISA Alerts
CISA Adds Two Known Exploited Vulnerabilities to Catalog
FRIEND
CISA Alerts
Using Cyber Decoys to Strengthen Detection and Response
FOE
CISA Alerts
CISA Adds One Known Exploited Vulnerability to Catalog
FOE
The Hacker News
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
FOE
The Register (Security)
Spain gets its first taste of AI-aided cyber attack
FOE
SecurityWeek
Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover
FOE
Schneier on Security
Fake CAPTCHA Scams
FOE
The Hacker News
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
FOE
The Hacker News
Threat Intelligence Alone Won't Close the Exploitation Gap
FOE
Bleeping Computer
Critical ScreenConnect flaw now actively exploited in attacks
FRIEND
SecurityWeek
Hackuity Raises $19 Million for AI-Powered Vulnerability Management
FOE
The Hacker News
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
FOE
SecurityWeek
280,000 Impacted by Premier Medical Group Data Breach
FOE
The Register (Security)
Ministry of Justice apologizes after court staff accessed Southport victims' files
FRIEND
SecurityWeek
Chrome, Firefox Updates Patch 115 Vulnerabilities
FOE
SecurityWeek
Acronis Patches Exploited Vulnerability in cPanel Backup Plugin
FOE
Bleeping Computer
Windows Server 2022 reaches end of mainstream support next month
FOE
CSO Online
You don’t have to join the hack-back program to inherit its risk
FOE
SecurityWeek
Enterprises Warned of Attacks Exploiting WSO2 Vulnerability
FOE
CSO Online
AI made software development unrecognizable. Is cybersecurity next?
FRIEND
SecurityWeek
Oracle Patches 800+ Vulnerabilities in September 2026 Security Update
FOE
Bleeping Computer
Google fixes actively exploited Android zero-day on Pixel devices
FRIEND
The Register (Security)
Mythos has made 2026 patching hell. It might make 2027 a breeze
FOE
The Hacker News
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
FOE
The Hacker News
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
FOE
CSO Online
Hundreds of OpenAI agents attack RubyGems platform
FOE
Dark Reading
Cyber Op Targets South Korean Media & Automotive Sectors
FOE
Sophos News
September Patch Tuesday haul includes 973 CVEs
FOE
CISA KEV
CVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability
FOE
CISA KEV
CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
FOE
CISA KEV
CVE-2026-58704: Google Pixel Improper Authorization Vulnerability
FOE
EPIC
Washington Post: Health Brief: Three key issues for the No. 2 at HHS
FOE
EPIC
Democracy Docket: DOJ partially confirms DHS whistleblower allegations in new notice to federal court
FOE
EPIC
Bloomberg Law: Google’s Spirit Air AI Data Bid Reveals Worker Protection Void
FOE
The Register (Security)
The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
FOE
Bleeping Computer
Acronis warns of actively exploited flaw in its cPanel backup plugin
FRIEND
Professor Messer
Professor Messer’s N10-009 Network+ Study Group – September 2026
FOE
Bleeping Computer
Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites
FRIEND
SecurityWeek
Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?
FOE
Dark Reading
Microsoft Issues Emergency Fixes After Massive Patch Tuesday
FOE
CSO Online
Critical Cisco Secure Email Gateway zero-day gives attackers root access
FOE
The Register (Security)
Low-quality casino sites conceal highly dangerous threat actors
FRIEND
SecurityWeek
“We Think the Security Control Is Working” Is No Longer Good Enough
FOE
Dark Reading
Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face Incident
FOE
The Hacker News
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
FOE
The Register (Security)
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
FOE
Dark Reading
VectraRAT Can Hack Windows Enterprises for $250 per Month
FOE
Bleeping Computer
CenterPoint Energy confirms customer data stolen in cyberattack
FOE
The Hacker News
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
FOE
The Register (Security)
Cisco email security boxes can be rooted by... an email
FOE
SecurityWeek
$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws
FRIEND
SecurityWeek
Exein Secures $270M at $1.7B Valuation for Physical AI Security
FOE
SecurityWeek
Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data
FRIEND
SANS Internet Storm Center
MacOS 27 - First Boot, (Tue, Sep 15th)
FOE
The Hacker News
BambooToken Malware Uses MQTT to Control Windows and Linux Systems
FRIEND
Professor Messer
Today’s N10-009 CompTIA Network+ Pop Quiz: Gridiron fundamentals
FOE
Bleeping Computer
BambooToken malware controls Windows and Linux systems via MQTT
FRIEND
The Register (Security)
Who's governing your AI? A trust framework for enterprise agents and models
FOE
Bleeping Computer
Hackers target WordPress sites via third-party WooCommerce plugin
FOE
CSO Online
Exposed Vite servers are being probed for AWS and Azure credentials
FRIEND
Privacy International
Building a Rights-Respecting Digital Future in Pakistan
FOE
Bleeping Computer
What Zero-Day Response Should Be in the Post-Mythos Era
FOE
SecurityWeek
Thai Broadband Provider Hacked via Fortinet Vulnerability
FOE
The Register (Security)
Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler
FRIEND
CSO Online
Exaforce extends its AI security tool to monitor more than just Claude
FOE
SecurityWeek
OpenAI Investigates Report Linking AI Agents to RubyGems Attack
FOE
Bleeping Computer
CISA: Critical VMware RCE flaw now exploited by ransomware gangs
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: What could go wrong
FRIEND
CISA Alerts
Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers
FOE
CISA Alerts
Siemens Mendix SAML
FOE
CISA Alerts
Wärtsilä FOS-Onboard
FOE
CISA Alerts
mySCADA myPRO Manager
FOE
CISA Alerts
Siemens Teamcenter
FOE
CISA Alerts
Schneider Electric SCADAPack x70 Products
FOE
CISA Alerts
Digital Watchdog VMAX DVR and NVR Product Lineups
FOE
CISA Alerts
CareCam CM2507
FOE
CISA Alerts
Siemens Reyrolle 7SR5
FOE
The Hacker News
Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds
FOE
SecurityWeek
240,000 Hit by Data Breach at Japan’s Digital Agency
FRIEND
The Hacker News
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
FOE
The Hacker News
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
FRIEND
SecurityWeek
Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases
FOE
Schneier on Security
25 Years of Mass Surveillance Is Enough
FOE
Bleeping Computer
Suspected Black Axe gang leaders face cybercrime charges in the US
FRIEND
SecurityWeek
Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints
FOE
SecurityWeek
Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack
FOE
CSO Online
AI is exposing a security structure built for yesterday’s threats
FOE
Bleeping Computer
Microsoft confirms KB5002914 Excel update breaks copy and paste
FOE
CSO Online
Threat actors are coming for your AI assets to operationalize their use of AI
FOE
Bleeping Computer
Cisco patches Secure Email Gateway zero-day exploited in attacks
FOE
The Hacker News
LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server
FOE
The Hacker News
Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution
FOE
The Hacker News
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
FOE
SecurityWeek
Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation
FOE
The Register (Security)
The latest AI doomsayer is China’s intelligence boss
FOE
CSO Online
A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove
FOE
PentesterLab
Research Worth Reading - Week 37, 2026
FRIEND
Sophos News
The industry turned XDR and SIEM into categories. Sophos turned them into outcomes.
FOE
Sophos News
Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation
FRIEND
Sophos News
MSP Perspectives 2026: The evolution of the MSP cybersecurity value proposition
FOE
The Register (Security)
HBO Max Reddit account compromised to serve ClickFix attacks
FOE
Dark Reading
'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink
FOE
Bleeping Computer
Microsoft releases emergency Windows updates to fix RDS failures
FOE
Bleeping Computer
Japan's Digital Agency says VPN flaw exposed 246,000 personnel records
FOE
Dark Reading
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
FRIEND
Bleeping Computer
Homebrew 7.0.0 gets built-in GUI, better security controls
FOE
The Intercept (Privacy)
Tech CEOs’ Doomsaying Is a Distraction from Real, Existing Harms of AI
FOE
Bleeping Computer
Twitch extension with 30K installs exposes users’ OAuth tokens
FRIEND
Schneier on Security
Upcoming Speaking Engagements
FOE
Bleeping Computer
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
FRIEND
SANS Internet Storm Center
Apple Updates Everything, (Mon, Sep 14th)
FOE
The Register (Security)
New hardware device can RAM into encrypted memory, expose your data
FOE
The Register (Security)
OpenAI's malicious bot swarm attacked RubyGems
FOE
The Hacker News
3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
FOE
The Hacker News
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
FOE
The Hacker News
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
FOE
The Hacker News
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
FOE
Dark Reading
Anthropic CEO: Time to Shift From Improving to Controlling AI
FOE
Bleeping Computer
Hackers target exposed Vite dev servers to steal AWS, Azure secrets
FOE
Schneier on Security
Using AI for Weapons Development
FRIEND
The Hacker News
WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution
FOE
EFF Deeplinks
The High Crime of “LMAO”: How Cops Are Treating Mass Surveillance As a Joke
FOE
The Hacker News
⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
FOE
The Register (Security)
Perfect-10 GitLab bug under attack days after patch lands
FOE
SecurityWeek
Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development
FRIEND
Bleeping Computer
Why Patch Automation Needs Brakes, Not Just an Accelerator
FOE
SecurityWeek
New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate
FOE
SecurityWeek
Personal, Financial Info Exposed in Revolut Data Breach
FOE
SecurityWeek
The Race to Control AI and Protect What Makes Us Human
FOE
Bleeping Computer
Webinar: How malicious OAuth apps can lead to Google Workspace breaches
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: Rooting for the home server
FOE
CISA Alerts
CISA Adds One Known Exploited Vulnerability to Catalog
FOE
The Hacker News
AI Changed the Exposure Problem. Validation Needs to Change With It.
FOE
SecurityWeek
Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution
FOE
Schneier on Security
Microsoft’s Patching
FOE
The Intercept (Privacy)
The AI Doomsday Future Is Not Inevitable
FOE
SecurityWeek
CISOs Race to Control AI Agents Without Destroying Their Value
FOE
SecurityWeek
Telus Warns Customers of Account Breaches
FOE
Bleeping Computer
Microsoft: September updates cause RDS failures on Windows Server
FOE
SecurityWeek
Three JFrog Artifactory Flaws Exploited for Backdoor Deployment
FRIEND
The Register (Security)
UK.gov begins killing off passwords for 23 million users
FOE
CSO Online
What the 3M ChatGPT case reveals about AI governance
FOE
Bleeping Computer
Revolut discloses data breach exposing financial info, passports
FOE
SecurityWeek
ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks
FRIEND
CSO Online
How to level up from security pro to security leader
FOE
Bleeping Computer
Microsoft: September updates break audio on some Windows PCs
FOE
The Hacker News
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
FOE
Bleeping Computer
CISA: Hackers now exploit max severity GitLab flaw in attacks
FOE
Sophos News
Devil’s advocate? Uncensored Luciferus AI service advertised underground
FOE
CISA KEV
CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability
FRIEND
Sophos News
ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split
FOE
Bleeping Computer
Hackers exploit Tencent app flaw to deploy GrayRabbit malware
FOE
SecurityWeek
Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up
FOE
The Register (Security)
Security through obscurity is dead, and AI delivered the fatal blow
FOE
The Hacker News
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
FOE
The Hacker News
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
FOE
Bleeping Computer
Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent
FOE
SecurityWeek
BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days
FOE
The Hacker News
When the Whole Company Adopts AI: What It Does to Your SOC
FOE
The Hacker News
OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
FOE
SecurityWeek
Users in Houthi-Held Yemen Tried to Develop Advanced Weapons With AI, Anthropic Says
FOE
CSO Online
Why AI raises the stakes for exposure validation
FRIEND
DFIR Diva Blog
Introducing DFIR, OSINT, & Cybersecurity Community Listings
FRIEND
EFF Deeplinks
Governor Newsom Signs Student-Backed Digital Literacy Bills Alongside Misguided Bans
FOE
Bleeping Computer
Hackers abused Claude to extract secrets from 1.8M Android apps
FOE
Dark Reading
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days
FOE
Bleeping Computer
Florida confirms DMV database breached via stolen police account
FOE
Dark Reading
CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate
FOE
Dark Reading
SpiderSilk Hunts External Threats With AI-Based Scanner
FOE
Dark Reading
Why AI Is So Good at Scamming Humans
FOE
Schneier on Security
My Talk at DEF CON
FOE
The Register (Security)
More JFrog Artifactory bugs under attack, and all 3 have patches
FOE
Bleeping Computer
Passkey-themed phishing attacks lead to Microsoft 365 data theft
FOE
SecurityWeek
Phishing Research Challenges Conventional Security Awareness Testing
FOE
Dark Reading
AI Governance Can't Wait
FRIEND
CSO Online
Update your firewall rules: Teams and Copilot are changing address
FOE
EFF Deeplinks
Cold TAKE: Amazon's New Encryption Method Still Doesn't Deliver Real Privacy
FOE
The Hacker News
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
FOE
Bleeping Computer
Artifactory flaws chained in attacks deploying backdoor malware
FOE
CSO Online
ConnectWise patches critical ScreenConnect authentication failure after five days
FOE
The Hacker News
Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
FOE
SecurityWeek
GitLab Vulnerability Exploited One Day After Disclosure
FOE
Dark Reading
Papercut AI Swarm Attack Heralds Changes for Cyber Kill Chain
FOE
EPIC
Morristown Green: Cameras catch alleged camera vandal in Morristown SafetyStick pilot
FOE
CSO Online
India’s STPI serves TerminalFix-style attack via fake Cloudflare check
FRIEND
EPIC
Communications Daily: State AGs Clash With Industry on FCC’s Proposed Know-Your-Upstream-Provider Rules
FOE
EPIC
The Atlantic: Rules Designed to Create Chaos
FOE
SANS Internet Storm Center
The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)
FOE
The Hacker News
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
FOE
SecurityWeek
In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review
FOE
CSO Online
Anthropic finds evidence of a fourth AI escaping from containment
FOE
The Hacker News
Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
FOE
Bleeping Computer
How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface
FOE
SecurityWeek
Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack
FOE
The Register (Security)
Ukrainian lawyer's second career as a Conti coder earns him 4 years behind bars
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: Try to sound it out
FOE
CISA Alerts
CISA Adds One Known Exploited Vulnerability to Catalog
FOE
CISA Alerts
CISA Adds Three Known Exploited Vulnerabilities to Catalog
FRIEND
The Register (Security)
EU's Cyber Resilience Act starts the 24-hour vulnerability clock
FOE
Ars Technica (Security)
ClickFix attacks infecting PCs and Macs are going viral
FRIEND
The Hacker News
Your Critical Vulnerabilities Might Not Be Your Biggest Risk
FOE
SecurityWeek
Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison
FOE
Bleeping Computer
GitLab urges users to patch max severity path traversal flaw
FOE
SecurityWeek
Check Point Patches Critical VPN Vulnerabilities
FRIEND
Schneier on Security
Cliff Stoll’s DEF CON Talk
FRIEND
SecurityWeek
Kiteworks Acquires Bonfy.AI to Fill the AI Gap in Data Governance
FRIEND
CSO Online
How AI and cybersecurity are reshaping ServiceNow
FOE
CSO Online
Attackers use passkey-themed scams to hijack Microsoft 365 accounts
FOE
SecurityWeek
Surfshark Systems Targeted by Hackers
FOE
SecurityWeek
Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion
FOE
CSO Online
Google’s Early Access is creating a blind spot for malicious apps
FOE
SecurityWeek
PaperCut Flaws Exploited in AI-Powered Attacks
FOE
Bleeping Computer
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
FOE
The Hacker News
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
FOE
The Hacker News
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
FOE
Bleeping Computer
Conti ransomware gang member sentenced to 4 years in prison
FOE
The Hacker News
PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws
FOE
The Hacker News
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
FOE
Risky Business News
Risky Bulletin: Anthropic agents went hacking again
FOE
CSO Online
Attackers are weaponizing the gap between Chromium fixes and Chrome patches
FOE
Dark Reading
Indonesia Hit by Android Banking App-Cloning Campaign
FOE
CISA KEV
CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability
FOE
CISA KEV
CVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
FOE
CISA KEV
CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
FOE
Sophos News
“Eye” spy: Cyclops Blink returns with extended capabilities
FOE
The Register (Security)
Latest Anthropic horror story chills with tales of kamikaze drone swarms and bioweapons research
FOE
Bleeping Computer
New Android malware encrypts files, steals data, and harasses victims
FOE
Dark Reading
Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data
FOE
Bleeping Computer
September Windows Server updates break Remote Desktop Services
FRIEND
SecurityWeek
Mandiant Founder Kevin Mandia Joins Amazon Board
FRIEND
EPIC
Consumer Groups File Comments in Support of Robocall Mitigation Rule
FRIEND
EPIC
PRESS RELEASE: EPIC Applauds Gov. Newsom For Signing Prohibition on Addictive Features, Changes to California’s Age-Appropriate Design Code
FOE
The Register (Security)
Watch out: Apple timepiece can grab snippets of conversation without both speakers' consent
FOE
Bleeping Computer
Surfshark VPN says hackers breached internal testing, proxy servers
FOE
EFF Deeplinks
We All Deserve a Better Internet, Not A Smaller One
FOE
Bleeping Computer
Microsoft Excel KB5002914 update breaks copy and paste for some users
FOE
The Register (Security)
Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script
FOE
The Hacker News
ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
FOE
EPIC
EPIC, Restore the Fourth File Amicus Brief in Chatrie v. United States Urging the Fourth Circuit to Rule Geofence Warrant Unconstitutional
FRIEND
SecurityWeek
Cybersecurity M&A Roundup: 33 Deals Announced in August 2026
FOE
SpecterOps
Unmasking SCCM Application Execution
FOE
Bleeping Computer
AI-powered attack exploited PaperCut flaws to hack 395 organizations
FOE
Bleeping Computer
Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers
FOE
EPIC
Bloomberg Law: Government Data Buys Put at Risk by High Court’s Geofence Ruling
FOE
Dark Reading
Nightmare-Eclipse Strikes Again with 'ShieldCrash' Windows Exploit
FRIEND
Professor Messer
Today’s SY0-701 CompTIA Security+ Pop Quiz: It works every time
FOE
Bleeping Computer
IDScan confirms breach tied to 153 million stolen driver’s licenses
FOE
SecurityWeek
Anthropic Researcher Resigns With Warning About the Dangers of AI Development
FOE
The Hacker News
Google Play Early Access Abused to Push Thousands of Deceptive Android Apps
FRIEND
SecurityWeek
Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster
FOE
Bleeping Computer
New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
FOE
Bleeping Computer
The Top 4 Threats We Found by Investigating Every Alert for a Quarter
FOE
SecurityWeek
Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews
FRIEND
SecurityWeek
Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation
FOE
SpecterOps
Beyond Tier Zero
FOE
The Register (Security)
ShinyHunters expose 6.4M in attack on medical supplier McKesson
FOE
SANS Internet Storm Center
Redtail Payload Analysis [Guest Diary], (Wed, Sep 9th)
FOE
SecurityWeek
Critical NetScaler Vulnerability Exploited in Attacks
FOE
CSO Online
AI workflows may be creating a dangerous new authorization blind spot
FOE
Detectify Labs
How to hack APIs in 2026
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: It’s all about the fundamentals
FOE
CISA Alerts
CISA Adds Two Known Exploited Vulnerabilities to Catalog
FOE
CISA Alerts
Orthanc DICOM Server
FOE
CISA Alerts
NextGen Healthcare Mirth Connect
FOE
CISA Alerts
AVEVA Pipeline Integrity Monitor
FOE
SecurityWeek
Widened Scan Turns Up Fourth Rogue Claude Cyber Incident
FOE
CSO Online
Stealth rootkit targeting F5 BIG-IP could expose enterprise identity gateways
FOE
The Hacker News
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
FOE
The Hacker News
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
FOE
The Hacker News
Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks
FOE
SecurityWeek
4.1 Million Impacted by AdaptHealth Data Breach
FOE
Schneier on Security
AIs Compress Exploit Timeline
FOE
The Hacker News
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
FOE
SecurityWeek
Organizations Warned of Cisco Secure FMC Exploitation
FRIEND
Privacy International
Interoperability, Privacy, and the Limits of the Digital Markets Act
FRIEND
CSO Online
The longitude problem: In the AI era, detection is won on facts, not guesses
FOE
Bleeping Computer
CISA: WatchGuard RCE flaw now exploited in ransomware attacks
FOE
CSO Online
Getting ahead of ‘harvest-now-decrypt-later’: Post-quantum cryptography planning
FOE
CSO Online
10 most critical LLM vulnerabilities
FOE
Bleeping Computer
Microsoft fixes bug that wiped Windows desktop settings
FOE
The Intercept (Privacy)
Far-Right Hacker Touting Cyber Attacks on Leftist Sites Has Close Ties to Pentagon Influencer
FOE
The Hacker News
Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key
FOE
SecurityWeek
New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender
FOE
The Hacker News
Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6
FOE
The Register (Security)
Dental contractor set up secret account with access to 4,000 patient records then left the company
FRIEND
Dark Reading
EU Cyber Resilience Act to Enforce New Reporting Requirements
FOE
Bleeping Computer
Trezor warns users of email provider breach, phishing attacks
FOE
SecurityWeek
Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks
FOE
TrustedSec
So… You Found AWS Access Keys (Part 1)
FOE
Risky Business News
Srsly Risky Biz: America's Drivers Licence Breach is a National Security Disaster
FOE
CISA KEV
CVE-2026-67277: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
FOE
CISA KEV
CVE-2026-86060: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
FOE
The Register (Security)
Anthropic reveals fourth likely crime committed by its AI
FOE
The Register (Security)
Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits
FOE
Bleeping Computer
Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks
FOE
Bleeping Computer
AdaptHealth confirms 4.1 million people exposed in July cyberattack
FOE
Dark Reading
Mythos Vulnerability Firehose Hits a Human Bottleneck
FOE
Bleeping Computer
Skullcandy Dime 3 earbuds expose users to Bluetooth hijacking
FOE
Ars Technica (Security)
4 groups caught using the same Chrome and Windows exploit kit
FOE
CSO Online
MikroTik patches flaws currently being exploited to take over routers
FOE
Dark Reading
US Government Accuses Chinese AI Firms of Distilling Frontier Models
FOE
The Hacker News
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto
FRIEND
EFF Deeplinks
Digital Sovereignty: What It Is, What It Could Be
FOE
SANS Internet Storm Center
Scans for Proxmox Servers, (Wed, Sep 9th)
FRIEND
SecurityWeek
HelmGuard Raises $7.3 Million for Agentic GRC and Security
FOE
The Register (Security)
Serial Microsoft 0-day hunter drops yet another Defender exploit
FOE
SecurityWeek
AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
FOE
Bleeping Computer
US says Chinese firms extracted billions of tokens from frontier AI models
FOE
The Hacker News
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
FRIEND
SecurityWeek
Android’s September 2026 Updates Patch 180 Vulnerabilities
FOE
SecurityWeek
Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories
FOE
Schneier on Security
Driver’s License Data for Sale
FRIEND
EFF Deeplinks
2026 EFF Award Winners: Access Now, 7amleh – The Arab Center for the Advancement of Social Media, DeFlock, and New Media Rights
FOE
EFF Deeplinks
Cops Play Hide and Seek About Using Spy Tech to Avoid Scrutiny and Bad PR
FOE
Bleeping Computer
Veradigm warns of patient data breach after ransomware gang claims attack
FOE
EPIC
LawNews: Protester Surveillance DHS Lawsuit: What a San Diego Parking Lot Reveals About Federal Power
FOE
Dark Reading
Identity-Based AI Attack Threatens Security of Enterprise Data
FOE
SecurityWeek
Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension
FOE
Pen Test Partners
Passing the bucks $$$: Passback attacks explained
FOE
The Hacker News
Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA
FOE
Bleeping Computer
MFA's Weakest Link: Account Recovery Is the New Attack Path
FOE
The Register (Security)
WeChat worm could pwn a friend before they even answered the call
FOE
SecurityWeek
US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: It fixes most things
FOE
CISA Alerts
CISA Adds Four Known Exploited Vulnerabilities to Catalog
FOE
SecurityWeek
Meta Launches Personal AI Agent, Muse, Emphasizes Safety and Privacy
FOE
CSO Online
SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise
FRIEND
The Hacker News
Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE
FOE
CSO Online
ChatGPT flaw lets attackers pull Gmail data across accounts via a hidden channel
FOE
CSO Online
ShinyHunters claims Florida DMV breach, puts data on the clock
FOE
The Hacker News
DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval
FOE
Schneier on Security
Claude Fable Solves a Historical Cipher
FOE
SecurityWeek
ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws
FOE
The Hacker News
Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets
FOE
SecurityWeek
Ivanti Patches Critical Flaws Across Enterprise Security Products
FOE
Bleeping Computer
Over 36,000 exposed Plex servers vulnerable to recent flaws
FOE
The Intercept (Privacy)
Cops Are Using Flock to Spy on People for the Crime of Standing Around
FRIEND
SecurityWeek
This Key Will Self-Destruct: An Open Standard for Revocable API Keys
FOE
CSO Online
When the prompt becomes the payload: A practical pen-testing guide for GenAI, LLM and RAG applications
FOE
SecurityWeek
New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser
FOE
SecurityWeek
Chrome 153 Patches Seventh Zero-Day of 2026
FOE
The Hacker News
U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok
FOE
The Hacker News
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
FOE
CSO Online
Post-quantum cryptography adoption and the national security implications
FOE
Bleeping Computer
Man gets 15 years for extorting women with AI-generated porn videos
FOE
CSO Online
50% of CISOs see Mythos as a sign to exit the profession
FOE
The Hacker News
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
FOE
The Hacker News
F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans
FOE
Bleeping Computer
New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access
FOE
The Hacker News
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
FOE
Bleeping Computer
Google warns of new Chrome zero-day bug exploited in attacks
FOE
The Hacker News
SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution
FOE
Risky Business News
Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal
FOE
The Hacker News
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
FOE
The Hacker News
N-able N-central Pre-Auth RCE Flaw Exploited in the Wild
FOE
CSO Online
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
FOE
CSO Online
Cisco bundles fixes for multiple vulnerabilities, some critical, into one patch
FRIEND
Bleeping Computer
Microsoft adds age-awareness APIs that can tell if users are children, teens, or adults
FOE
The Register (Security)
Microsoft breaks Patch Tuesday record with 974-CVE deluge
FOE
CISA KEV
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
FOE
CISA KEV
CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability
FOE
CISA KEV
CVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
FOE
Krebs on Security
Microsoft Plugs Nearly 1,000 Security Holes
FOE
Dark Reading
Patch Tuesday Sets Another Record With 974 CVEs
FOE
The Register (Security)
OpenAI's Artifactory opened covert data-stealing channel alongside Hugging Face attack
FOE
Ars Technica (Security)
Why this month's Microsoft patch release is a doozy
FOE
Dark Reading
Attackers Use Multi-Hop Google Redirects for Phishing Campaign
FOE
Dark Reading
OpenAI Agents Took Over Wiki Site Before Hugging Face Attack
FOE
Bleeping Computer
DoppelCart fraud network uses 119,000 fake shops to steal credit cards
FRIEND
Bleeping Computer
The EU CRA's Real Question: What Shipped, and When Did You Know?
FOE
Bleeping Computer
Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit
FOE
SANS Internet Storm Center
September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)
FOE
SecurityWeek
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
FOE
EFF Deeplinks
New Records Reveal Problems with Medicare’s AI Prior Authorization Experiment
FRIEND
Bleeping Computer
Microsoft releases Windows 10 KB5122878 extended security update
FOE
SecurityWeek
Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day
FOE
Bleeping Computer
Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days
FRIEND
Bleeping Computer
Windows 11 cumulative updates KB5124008 & KB5122880 released
FRIEND
SpecterOps
Token Analysis and Tracking System (TATS)
FOE
Dark Reading
ClickFix Campaigns Abuse Legitimate Services for Persistent Access
FOE
CSO Online
CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting production
FOE
Schneier on Security
AIs as Modern Genies
FRIEND
SpecterOps
From Findings to Fixes: Getting Value from Red Team Results
FOE
SecurityWeek
The Hidden Instructions That Can Hijack AI Agents
FOE
SecurityWeek
Hackers Return $263 Million Stolen From Liquid Network
FOE
Bleeping Computer
ShinyHunters hackers claim breach of Florida "DAVID" DMV database
FOE
Bleeping Computer
OpenAI says ChatGPT outage causes image generation errors
FOE
The Hacker News
Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution
FOE
The Register (Security)
Boston Scientific left nursing its bottom line after cyberattack
FOE
Bleeping Computer
August updates trigger 0xc0000409 errors on Windows Server 2016
FRIEND
SecurityWeek
Cylake Raises $245 Million Ahead of Cybersecurity Platform Beta
FRIEND
CSO Online
Mars Security Debuts Automated Threat Engine Processing Live Cyber Intelligence Into Validated Rules Within Minutes
FRIEND
Professor Messer
Today’s N10-009 CompTIA Network+ Pop Quiz: I think yellow is faster
FRIEND
The Register (Security)
How to secure hybrid meeting rooms without sacrificing user experience
FOE
Bleeping Computer
SAP warns of maximum severity 'OVERPASS' kernel vulnerability
FOE
SecurityWeek
SAP Patches Critical Extended Passport Processing Vulnerability
FOE
The Hacker News
Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC
FRIEND
CSO Online
Reflectiz Launches Agentic Pentesting for Websites: Up to 10x Coverage vs Conventional Pentests
FOE
Bleeping Computer
OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor
FOE
The Hacker News
ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account
FOE
The Register (Security)
LG accused of 'egregious invasion of privacy' over TV data collection
FOE
The Hacker News
Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours
FOE
Bleeping Computer
Adobe fixes critical Magento zero-day exploited to backdoor servers
FOE
The Register (Security)
BigBear phishing crew nets thousands of Microsoft 365 credentials
FOE
SecurityWeek
Party’s Over for Crypto Scammers Who Went on a Spending Spree After a $240 Million Bitcoin Theft
FRIEND
Bleeping Computer
Webinar: The forgotten Google Workspace access that can lead to a breach
FOE
Bleeping Computer
Hackers build AI frameworks for widescale credential theft
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: It’s the season for those
FOE
Dark Reading
Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites
FOE
CISA Alerts
CISA Adds Four Known Exploited Vulnerabilities to Catalog
FOE
CISA Alerts
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
FOE
CISA Alerts
CareCam Pro IP Cameras
FOE
The Register (Security)
Extortion crews have their eyes on high-value AI data, Google warns
FOE
Bleeping Computer
Microsoft: Windows Server 2025 changes causing app crashes
FOE
The Hacker News
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
FRIEND
The Hacker News
What It Took to Reach 1 Billion Build Manifests
FOE
CSO Online
Adobe Commerce max-severity bug comes under active attack
FOE
The Hacker News
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
FOE
SecurityWeek
MikroTik Patches Critical Flaws Chained to Hack Routers
FOE
CSO Online
BigBear 2.0 phishing campaign hijacks Microsoft 365 sessions after MFA
FOE
SecurityWeek
Mathspace Data Breach Exposes Over 1 Million People
FOE
SecurityWeek
N-able Patches Critical Zero-Day in N-central
FOE
Schneier on Security
Stealing AI Reasoning Traces
FOE
The Intercept (Privacy)
The Pentagon Asked OpenAI for Artificial Intelligence Designed to Rarely Say No
FOE
The Hacker News
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
FOE
The Intercept (Privacy)
AI Giants Work Hand-in-Hand With the Pentagon, Contracts Reveal
FOE
CSO Online
Security leaders must prepare for likely threats, not sensationalized agentic attacks
FOE
The Hacker News
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
FOE
CSO Online
Securing AI agents: Key controls and best practices
FOE
Bleeping Computer
220 million traveler records exposed in Vietnam-linked APIS leak
FOE
The Hacker News
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
FOE
Google Project Zero
Testing race conditions with memory access tracing and stack-based delay injection
FRIEND
Intigriti
How AI has changed the way I think, build, and work. A day in the life of an Intigriti Engineer
FOE
PentesterLab
JWT Security: How to Secure JWTs and Avoid Common Vulnerabilities
FOE
CISA KEV
CVE-2026-86218: N-able N-central Static Code Injection Vulnerability
FOE
CISA KEV
CVE-2026-81963: Microsoft Windows Link Following Vulnerability
FOE
CISA KEV
CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
FOE
CISA KEV
CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
FOE
The Hacker News
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
FRIEND
Professor Messer
Professor Messer’s CompTIA A+ 220-1202 Study Group – September 2026
FOE
Bleeping Computer
Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
FOE
The Hacker News
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
FOE
Bleeping Computer
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
FRIEND
The Register (Security)
Nightwing CEO has a Labor Day message for staff – and apparently The Register
FOE
The Hacker News
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
FOE
The Register (Security)
Hackers drain $320M in Bitcoin from Liquid Network, claim they're the good guys
FOE
Bleeping Computer
Mathspace discloses data breach affecting over 1 million people
FOE
Bleeping Computer
Trezor data breach impact now reaches 81,000 customers
FOE
SecurityWeek
Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
FOE
CSO Online
Sam Altman calls GPT-6 Astra rollout ‘messy’ as enterprise users wait for access
FOE
SecurityWeek
North Korean Hackers Deploy New Linux Espionage Toolkit
FOE
SecurityWeek
OpenAI Agents Hijack Another Victim Website
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: That describes most things
FOE
SecurityWeek
Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
FOE
CSO Online
Back-to-back N-able bugs send admins on a patching spree
FOE
SecurityWeek
Modified ScreenConnect Clients Used in Worm-Like Campaign
FOE
The Hacker News
Your Cloud Security Checklist Doesn't Work the Way You Think It Does
FOE
The Hacker News
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
FOE
The Hacker News
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
FOE
Schneier on Security
Automobile Camouflage to Hide from Flock Cameras
FOE
The Register (Security)
Welsh environment regulator's FoI blunder exposes diversity data of 2,000 staff
FOE
Bleeping Computer
ChatGPT can now connect to your personal apps to mimic writing style
FOE
Bleeping Computer
Hackers exploit new MikroTik RouterOS flaws to hijack routers
FOE
Bleeping Computer
ConnectWise warns of new ScreenConnect flaw without patch
FOE
The Register (Security)
UK food supply chain at risk from hostile attacks
FOE
The Register (Security)
Peers ask why UK cyber bill leaves execs off the personal liability hook
FOE
The Hacker News
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
FOE
The Register (Security)
OpenAI's rebel agent swarm died young, but its chilling logs live on
FRIEND
CSO Online
What do CISOs need to rest easy about future AI risks?
FOE
The Hacker News
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
FOE
Bleeping Computer
N-able patches max severity N-central flaw amid ongoing attacks
FOE
Risky Business News
Risky Bulletin: BEC campaign steals €35 million from French notaries
FOE
Bleeping Computer
ChatGPT Astra is now rolling out to $20 Plus subscription
FOE
Sophos News
Dissecting a PHP web server rootkit
FOE
SANS Internet Storm Center
Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th)
FOE
Bleeping Computer
Attackers conceal phishing lures using invisible Unicode characters
FOE
The Hacker News
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
FOE
The Hacker News
Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
FOE
PentesterLab
Research Worth Reading - Week 36, 2026
FOE
The Hacker News
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
FOE
The Hacker News
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
FOE
The Hacker News
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
FOE
Bleeping Computer
Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain
FOE
The Hacker News
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
FOE
SecurityWeek
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
FOE
Bleeping Computer
OpenAI admits it didn't disclose rogue AI wiki hijacking incident
FOE
The Hacker News
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel
FOE
The Hacker News
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
FRIEND
SANS Internet Storm Center
numbat - AI agent observability, (Fri, Sep 4th)
FOE
Ars Technica (Security)
OpenAI agents discussed ways to escape their sandbox on public wiki
FOE
The Register (Security)
ASCII smuggling isn't just an AI security risk
FOE
Ars Technica (Security)
Once popular for attacking AI, ASCII smuggling is embraced by spammers
FOE
Bleeping Computer
IDScan sued over alleged data breach affecting 153 million drivers
FOE
Schneier on Security
Using a VM to Contain an AI Agent
FOE
SecurityWeek
In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation
FOE
SecurityWeek
HPE Patches Critical RCE Vulnerabilities in AOS-CX
FRIEND
SecurityWeek
OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders
FOE
The Register (Security)
Rogue OpenAI agents used dead German web site to communicate in May, months before Hugging Face incident
FOE
Dark Reading
Companies Have 6 Months to Prepare for Automated Attacks
FOE
The Hacker News
Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
FOE
Bleeping Computer
Critical Citrix NetScaler auth bypass now leveraged in attacks
FOE
The Hacker News
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
FOE
The Hacker News
New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic
FOE
Bleeping Computer
Microsoft says some users can’t open the Teams desktop client
FOE
Bleeping Computer
39 New Methods That Compromise Passkey Authentication
FOE
CSO Online
FBI investigates breach of 153 million driving license records at IDscan.net
FOE
CSO Online
Bidding war for defunct Spirit Airlines’ employee data will not die
FOE
SecurityWeek
Sangoma Switchvox Vulnerabilities Exploited in the Wild
FOE
Bleeping Computer
New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
FOE
Dark Reading
AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?
FOE
Bleeping Computer
Exchange Online outage causes email delays, 'Server busy' errors
FOE
Dark Reading
Insurers Search for Answers to Rein in Rogue AI
FOE
SecurityWeek
12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: That’s not really an attack
FOE
CISA Alerts
CISA Adds One Known Exploited Vulnerability to Catalog
FRIEND
SecurityWeek
Catch Raises $5 Million for AI Executive Assistant With Guardrails
FOE
Bleeping Computer
Google warns of new Chrome zero-day flaw exploited in attacks
FOE
SecurityWeek
VMware Workstation and Fusion Updates Patch Critical Vulnerability
FOE
SecurityWeek
Google Patches 6th Chrome Zero-Day of 2026
FOE
Schneier on Security
Security Vulnerability in a Voting System
FOE
Schneier on Security
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks
FRIEND
SecurityWeek
Nvidia Is Buying AI Platform Hugging Face for $13 Billion
FOE
CSO Online
OpenAI launches GPT-6 Astra, its first model to cross a critical cybersecurity threshold
FOE
The Intercept (Privacy)
Flock Donations to Local Politicians’ Groups Skyrocket as Protests Against AI Cameras Mount
FOE
CSO Online
The democratization of cyber warfare — and what it means for CISOs
FOE
The Hacker News
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
FOE
The Hacker News
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
FOE
The Hacker News
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
FOE
The Hacker News
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
FOE
Risky Business News
Risky Bulletin: Russia tells data centers to deploy drone defenses
FOE
The Register (Security)
Cisco searched for IOS XR bugs and found so many it rolled them into an update release
FOE
CISA KEV
CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability
FRIEND
The Register (Security)
OpenAI commits $1B in AI credits to frontline cyber defenders
FOE
Bleeping Computer
French hospital fined €500,000 after breach exposes data of 727,000
FRIEND
CSO Online
OpenAI targets small utilities with $1 billion cyber defense initiative
FOE
Dark Reading
Large Enterprises Targeted in Fake Merger & Acquisition Scams
FOE
Bleeping Computer
Coder's registry infrastructure compromised to push malicious modules
FRIEND
Ars Technica (Security)
US senator calls on the NSA to give guidance for use of VPNs
FOE
Dark Reading
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?
FRIEND
EPIC
Protecting Privacy Through Stronger Procurement Policy: How Maine Could Pioneer a Better Approach to Technology Procurement
FOE
Bleeping Computer
HPE patches critical ArubaOS-CX remote code execution flaw
FOE
The Register (Security)
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
FOE
The Hacker News
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
FOE
Dark Reading
What the AI Warning Letter Completely Missed
FOE
The Intercept (Privacy)
ICE Gave New Hires Access to Restricted Info on Palantir App Before They Passed Background Checks
FOE
The Hacker News
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
FOE
SecurityWeek
Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
FOE
The Hacker News
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
FRIEND
SecurityWeek
Capsule Security Launches ‘AI Circuit Breaker’ to Stop Rogue Agents
FOE
Bleeping Computer
OpenAI confirms ChatGPT is down ahead of 'Astra' model launch
FOE
Bleeping Computer
Anthropic confirms Claude is down, multiple models affected
FRIEND
Professor Messer
Today’s SY0-701 CompTIA Security+ Pop Quiz: Keep scrolling
FRIEND
The Register (Security)
Drowning in CVEs and thirsty for answers? Try CTEM
FOE
Bleeping Computer
Critical Elementor Pro flaw exploited to take over WordPress sites
FOE
The Hacker News
Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
FOE
Dark Reading
AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours
FOE
Bleeping Computer
Your Employee’s Password Appeared in an Infostealer Log. Now What?
FRIEND
Red Siege
Improving Your Simple Windows Domain for Offensive Testing: Installing MS SQL Server Express on Windows Server 2022 Server Core Edition
FOE
The Register (Security)
Cybercrooks trawl Fishbrain to net password hashes
FRIEND
Pen Test Partners
Why your data is safer than you think on public Wi-Fi
FRIEND
SecurityWeek
HiddenLayer Raises $100 Million for AI Runtime Security
FOE
Bleeping Computer
Microsoft says KB5120998 Windows update resets desktop settings
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: These are difficult to pronounce
FOE
CISA Alerts
OPCFoundation OPC UA LocalDiscoveryServer (LDS)
FOE
CISA Alerts
Rockwell Automation 1756-ENBT Module
FOE
CISA Alerts
Rockwell Automation ControlFLASH
FOE
CISA Alerts
IXON VPN Client
FOE
CISA Alerts
Inductive Automation Ignition
FOE
CISA Alerts
Pyramid Solutions NetStaX EtherNet/IP Stack
FOE
CISA Alerts
Rockwell Automation ArmorStart LT
FOE
CISA Alerts
Tycon Systems TPDIN-Monitor-WEB3
FRIEND
CISA Alerts
Preparing for the Post-Quantum Era: A Call to Action
FOE
Dark Reading
'Breeze Comet' Tears Into Brazilian & Global Financial Systems
FRIEND
SecurityWeek
AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million
FOE
The Hacker News
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
FOE
CSO Online
Decade-old PostgreSQL flaw turns backup account into a backdoor
FOE
Schneier on Security
Researching Employment Scams
FOE
CSO Online
Counterfeit installers turn routine software downloads into enterprise breaches
FOE
Bleeping Computer
Plex warns users to patch security vulnerabilities immediately
FOE
SecurityWeek
153 Million Driver License Images Offered on Dark Web
FOE
The Hacker News
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
FOE
SecurityWeek
Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability
FOE
The Hacker News
Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
FOE
SecurityWeek
Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities
FOE
CSO Online
AI agents help compress ransomware intrusion to under 10 hours, raising stakes for CISOs
FOE
The Register (Security)
UK's Online Safety Act has made 'absolutely no difference,' kids say
FOE
CSO Online
Stop playing with the CISO role. Fix cybersecurity leadership
FOE
Bleeping Computer
Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs
FOE
The Hacker News
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
FOE
CSO Online
Zero trust has a big AI agent problem ahead
FOE
The Register (Security)
Terminated employee cost company hundreds of thousands of dollars because nobody revoked access
FOE
The Register (Security)
To keep the AI hacking genie bottled up, try one-way networks
FOE
The Hacker News
Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
FOE
The Hacker News
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
FOE
Risky Business News
Srsly Risky Biz: China's Private Sector Botnets Are Worth Disrupting
FOE
TrustedSec
LLMHaxor Update
FRIEND
SANS Internet Storm Center
Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)
FOE
CSO Online
SonicWall reports two major security holes under active exploit
FOE
The Register (Security)
Claude Mythos only model to complete full cyber kill chain, experts say
FRIEND
EPIC
PRESS RELEASE: EPIC Commends Delaware for Strengthening Privacy Law, Strictly Protecting Sensitive Data
FRIEND
EPIC
PRESS RELEASE: EPIC Commends Delaware for Strengthening Privacy Law, Strictly Protecting Sensitive Data
FOE
Dark Reading
AI’s Vulnerability Surge May Be More Manageable Than First Feared
FOE
Bleeping Computer
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells
FOE
Dark Reading
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
FOE
Ars Technica (Security)
I rented a car, and within hours, my driver's license was for sale
FOE
Dark Reading
AI Gives Cybercriminals a Dangerous Time Advantage
FRIEND
SecurityWeek
OpenLeash Adds a Human Check to Risky AI Agent Actions
FOE
Bleeping Computer
WordPress backup plugin flaw exposes millions of sites to takeover attacks
FOE
The Intercept (Privacy)
Trump Admin Tells Court: Let OpenAI Rip Off The Intercept’s Articles
FRIEND
Schneier on Security
AI Agents Are Now Emailing Me with Their Security Concerns
FOE
The Register (Security)
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
FRIEND
The Hacker News
Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs
FRIEND
SpecterOps
Demystifying Agent Tradecraft: Introducing SpecterOps Skills
FOE
EFF Deeplinks
Texas and Florida Step Back from ALPRs
FOE
Dark Reading
Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users
FOE
The Hacker News
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
FOE
The Register (Security)
SonicWall's SMA1000 boxes under active attack again
FOE
Bleeping Computer
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
FRIEND
SecurityWeek
UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure
FOE
The Intercept (Privacy)
ICE Is Paying a Controversial AI Firm to Hide the Identities of Agents
FOE
The Register (Security)
Legacy Lenovo login opens 5,000 Dropbox accounts to attackers
FOE
The Hacker News
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
FOE
Bleeping Computer
Ransomware protection for MSPs: A 6-point checklist for faster recovery
FOE
The Hacker News
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
FOE
The Hacker News
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
FRIEND
CSO Online
Anthropic introduces zero-retention AI safety monitoring for enterprises
FOE
SecurityWeek
Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products
FOE
Bleeping Computer
Dropbox accounts breached through Lenovo email verification flaw
FOE
CSO Online
Exploited JFrog Artifactory bug puts software supply chain on alert
FOE
The Hacker News
Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control
FOE
SecurityWeek
Exploit Published for Fresh Cleo Harmony Vulnerability
FRIEND
Professor Messer
Today’s 220-1202 CompTIA A+ Pop Quiz: Your wireless network is glowing
FOE
CISA Alerts
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
FRIEND
CISA Alerts
Communicating Under Pressure: Best Practices for Service Providers
FRIEND
SecurityWeek
Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards
FOE
SecurityWeek
Malicious Virtualizor Update Served via BGP Hijacking
FOE
Ars Technica (Security)
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
FOE
The Hacker News
How to Secure Enterprise AI: From Adoption to Incident Readiness
FOE
The Hacker News
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
FOE
SecurityWeek
OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold
FOE
Bleeping Computer
Microsoft Defender flags legitimate Google search links as malicious
FOE
Schneier on Security
Wireless Routers as Motion Detectors
FOE
The Register (Security)
UK cyber bill targets AI users, not the vendors building it
FOE
The Hacker News
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
FRIEND
SecurityWeek
Chrome and Firefox Updates Patch Dozens of Vulnerabilities
FOE
The Hacker News
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
FOE
Bleeping Computer
US charges Russian for infecting 80,000 freelancers with malware
FOE
CSO Online
When the patch tsunami meets the maintenance window
FOE
SecurityWeek
23-Year-Old Sality P2P Botnet Disrupted
FOE
CSO Online
How China industrialized the infrastructure behind state hacking
FOE
Bleeping Computer
Sality botnet infrastructure dismantled in joint global takedown
FOE
The Hacker News
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
FOE
The Hacker News
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
FOE
The Hacker News
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
FOE
Bleeping Computer
SonicWall warns of actively exploited SMA1000 zero-day flaws
FOE
SecurityWeek
SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks
FOE
Risky Business News
Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates
FOE
CSO Online
Anthropic makes changes to stop AI agents running amok again
FRIEND
EFF Deeplinks
Judge Rules DOD Unlawfully Retaliated Against Anthropic
FOE
Dark Reading
Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency
FOE
Intigriti
Hacking AI customer service agents
FOE
CISA KEV
CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability
FOE
CISA KEV
CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability
FOE
CISA KEV
CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability
FOE
CISA KEV
CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
FOE
CISA KEV
CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability
FOE
CISA KEV
CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability
FOE
Sophos News
SonicWall SMA1000 vulnerabilities (CVE-2026-83548, CVE-2026-83549) in active exploitation
FOE
The Register (Security)
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
FOE
CSO Online
What happens when AI models take aim at ICS exploits
FOE
Krebs on Security
FBI Probes Service Selling 153M+ Drivers Licenses
FRIEND
Professor Messer
Professor Messer’s CompTIA A+ 220-1201 Study Group – September 2026
FOE
The Register (Security)
Another Artifactory CVE under attack by AI agents or humans
FOE
Dark Reading
Attackers Pounce on Critical Artifactory Flaw Following Disclosure
FOE
Dark Reading
Stronger Security Drives Ransomware Groups to Recruit From Within
FOE
Bleeping Computer
Hackers abuse Faronics Deploy admin tool to install ScreenConnect
FOE
EFF Deeplinks
Meta's $17 Billion Settlement is a Bad Deal for Teens and All Social Media Users
FOE
Dark Reading
Critical Langflow Flaw Exploited as Attacks on AI Platform Rise
FOE
The Register (Security)
Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks
FRIEND
SecurityWeek
Palo Alto Networks Acquires AI Agent Platform Console
FOE
Dark Reading
AI Model Evaluator METR Hit by Credential Theft, Probing
FOE
Bleeping Computer
Aesto Health says data breach affects over 9.5 million patients
FOE
The Register (Security)
Anthropic pledges to try harder to keep models under control, asks partners to chip in
FRIEND
CSO Online
CrowdStrike launches cyber frontier AI models, agentic security system
FRIEND
SecurityWeek
Sevii Targets AI-Speed Attacks With Preemptive Autonomous Defense
FRIEND
SecurityWeek
Coast Guard Establishes Office of Maritime Cybersecurity Policy
FOE
Bleeping Computer
Critical Langflow flaw exploited to steal OpenAI and AWS keys
FOE
The Hacker News
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
FOE
Schneier on Security
What’s the Scam?
FOE
The Hacker News
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
FOE
Schneier on Security
Leaked Russian Cyber-Operations Training Materials
FRIEND
BrightTALK InfoSec
Incident Response: Why Organizations Repeat the Same Critical Mistakes
FRIEND
Professor Messer
Today’s N10-009 CompTIA Network+ Pop Quiz: I wondered where I had left that
FOE
Bleeping Computer
Hackers push malicious Virtualizor update in BGP hijacking attack
FRIEND
EPIC
EPIC Commends California Legislature for Regulating Addictive Social Media Design Instead of Banning Minors’ Access
FOE
Bleeping Computer
Novocure data breach affects more than 1,400 cancer patients
FOE
The Hacker News
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
FOE
Bleeping Computer
Why Even the Best Edge Security Still Misses High-Risk Sessions
FOE
Dark Reading
ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain
FOE
EPIC
PRESS RELEASE: EPIC Sues To Block Illegal Trump Administration Plan To Build Master Database of U.S. Citizens That Threatens Privacy and Risks Chaos Ahead of Midterms
FOE
The Hacker News
Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests
FOE
Bleeping Computer
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks
FOE
SecurityWeek
Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars
FRIEND
CSO Online
OpenClaw rolls out system-wide overhaul, updates security controls across agent platform
FOE
SecurityWeek
Hackers Start Exploiting Critical Langflow Vulnerability
FOE
The Register (Security)
33-hour BGP hijack of Softaculous traffic prompts security scramble
FRIEND
Professor Messer
Today’s 220-1201 CompTIA A+ Pop Quiz: It sounded pretty serious
FOE
CISA Alerts
Rockwell Automation Logix Platform
FOE
CISA Alerts
Rockwell Automation FactoryTalk Activation Manager
FOE
CISA Alerts
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
FOE
CISA Alerts
Rockwell Automation Historian ME
FOE
CISA Alerts
Rockwell Automation Redundancy Module Configuration Tool
FOE
CISA Alerts
Rockwell Automation RSLinx Classic
FOE
The Hacker News
Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones
FOE
SecurityWeek
Five Venezuelans Plead Guilty in US Court to ATM Jackpotting
FOE
CSO Online
Fake Cloudflare CAPTCHA tricks victims into opening a tunnel for attackers
FOE
SecurityWeek
Ransomware Gang Claims Nutex Health Data Breach
FOE
SecurityWeek
Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild
FRIEND
Schneier on Security
Rewiring Democracy Series on The Renovator
FOE
CSO Online
China-linked hackers turn Cisco routers into covert attack infrastructure
FOE
Bleeping Computer
Five Venezuelans plead guilty to ATM jackpotting attacks in US
FOE
SecurityWeek
9.5 Million Impacted by Aesto Health Data Breach
FOE
The Hacker News
Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
FOE
SecurityWeek
WatchGuard Patches Critical Vulnerabilities
FOE
The Hacker News
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
FRIEND
CSO Online
Microsoft nudges enterprise security closer to its passwordless future. But ‘123456’ will survive.
FOE
Bleeping Computer
Recently patched PaperCut zero-days used in data theft attacks
FOE
The Hacker News
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
FOE
SecurityWeek
PaperCut Exploitation Escalates to Active Intrusions
FRIEND
TrustedSec
waf-fu, or Some Log Replay Nonsense
FOE
SANS Internet Storm Center
Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st)
FRIEND
Intigriti
Reconnaissance unleashed: Meet CrowdRecon
FRIEND
PentesterLab
What Has Always Been the Moat in Pentesting?
FOE
Sophos News
Ungentlemanly behavior: Insights into a ransomware operation
