https://csoh.org/news.html Latest cloud security news curated by Cloud Security Office Hours. Covers AWS, Azure, GCP, Kubernetes vulnerabilities, breaches, and more. en-us admin@csoh.org (CSOH) admin@csoh.org (CSOH) Wed, 16 Sep 2026 15:13:12 +0000 720 https://csoh.org/favicon.png https://csoh.org/news.html https://www.zscaler.com/blogs/security-research/operation-rapidrust-apt36-deploys-rustyshade-rustymove-psnatch-and IntroductionIn August 2026, Zscaler ThreatLabz observed new activity by the Pakistan-nexus threat actor APT36 in a campaign we’re tracking as Operation RapidRust. Since our last publication about the group’s activity... Zscaler ThreatLabz https://www.zscaler.com/blogs/security-research/operation-rapidrust-apt36-deploys-rustyshade-rustymove-psnatch-and Wed, 16 Sep 2026 15:13:12 +0000 Threat Research https://www.infosecurity-magazine.com/news/woocommerce-wholesale-lead-capture Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells Infosecurity Magazine https://www.infosecurity-magazine.com/news/woocommerce-wholesale-lead-capture Wed, 16 Sep 2026 15:00:00 +0000 Vulnerability Threat Research https://cyberscoop.com/coast-guard-fbi-investigate-tanker-cyberattacks The agencies issued a joint statement saying the “joint security boardings” came in response to “indications that the networks of both vessels were compromised.” The post Coast Guard, FBI board US-bound foreign ships... CyberScoop https://cyberscoop.com/coast-guard-fbi-investigate-tanker-cyberattacks Wed, 16 Sep 2026 14:48:07 +0000 Cloud Security https://www.securityweek.com/virtual-event-today-attack-surface-management-summit-2 Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces. The post Virtual Event Today: Attack Surface Mana... SecurityWeek https://www.securityweek.com/virtual-event-today-attack-surface-management-summit-2 Wed, 16 Sep 2026 14:35:04 +0000 Cloud Security https://www.securityweek.com/eu-chief-warns-of-ai-powered-hacking-moves-to-rein-in-social-media Ursula von der Leyen warns that advanced AI could unleash hacking on an unprecedented scale as Europe prepares new protections against social media’s “capture” of children. The post EU Chief Warns of AI-Powered Hackin... SecurityWeek https://www.securityweek.com/eu-chief-warns-of-ai-powered-hacking-moves-to-rein-in-social-media Wed, 16 Sep 2026 14:15:18 +0000 AI https://blog.qualys.com/vulnerabilities-threat-research/2026/09/16/oracle-critical-security-patch-update-september-2026-review Oracle released its September edition of Critical Security Patch Update. The update received patches for 673 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product.... Qualys Blog https://blog.qualys.com/vulnerabilities-threat-research/2026/09/16/oracle-critical-security-patch-update-september-2026-review Wed, 16 Sep 2026 14:15:08 +0000 Cloud Security https://fedscoop.com/treasury-scott-bessent-ai-labs-liability-exemptions The secretary told House Financial Services Committee lawmakers that the “best way to guarantee safety” is for AI creators to be held “liable for what they build and generate.” The post Treasury’s Scott Bessent says n... CyberScoop https://fedscoop.com/treasury-scott-bessent-ai-labs-liability-exemptions Wed, 16 Sep 2026 14:10:19 +0000 AI https://www.bleepingcomputer.com/news/security/the-true-cost-of-a-ransomware-attack-with-and-without-bcdr The ransom itself can be only a fraction of the total cost of a ransomware attack, with downtime, recovery, remediation, and legal obligations adding millions to the bill. Datto explains how a mature BCDR strategy can... BleepingComputer https://www.bleepingcomputer.com/news/security/the-true-cost-of-a-ransomware-attack-with-and-without-bcdr Wed, 16 Sep 2026 10:00:10 -0400 Ransomware https://www.infosecurity-magazine.com/news/cisa-nist-cloud-identity-token CISA and NIST issued final guidance to help protect cloud identity tokens and assertions Infosecurity Magazine https://www.infosecurity-magazine.com/news/cisa-nist-cloud-identity-token Wed, 16 Sep 2026 14:00:00 +0000 CISA Identity https://www.securityweek.com/aiuc-raises-40-million-to-certify-enterprise-ai-agents The company provides a standard for AI systems, testing them against risks such as jailbreaks, prompt injections, and unauthorized actions. The post AIUC Raises $40 Million to Certify Enterprise AI Agents appeared fir... SecurityWeek https://www.securityweek.com/aiuc-raises-40-million-to-certify-enterprise-ai-agents Wed, 16 Sep 2026 13:38:36 +0000 AI https://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.html Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. Before the repository spre... The Hacker News https://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.html Wed, 16 Sep 2026 19:07:07 +0530 AI https://therecord.media/eu-chief-wants-joint-response-to-cyberattacks Delivering her annual State of the Union address in Strasbourg, Ursula von der Leyen said threats were “mounting on our soil,” pointing to recent incidents in Denmark, Lithuania and Poland and an attempted drone attac... The Record https://therecord.media/eu-chief-wants-joint-response-to-cyberattacks Wed, 16 Sep 2026 13:14:00 +0000 Cloud Security https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15. The post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek . SecurityWeek https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks Wed, 16 Sep 2026 13:10:54 +0000 Vulnerability https://securityaffairs.com/199180/data-breach/revolut-data-leak-may-trace-back-to-compromised-italian-government-accounts.html A suspected compromise of an Italian government PEC account may have allowed threat actors to impersonate law enforcement and obtain sensitive data from hundreds of Revolut customers. The Revolut data exposure may be... Security Affairs https://securityaffairs.com/199180/data-breach/revolut-data-leak-may-trace-back-to-compromised-italian-government-accounts.html Wed, 16 Sep 2026 13:09:22 +0000 Breach Threat Research https://www.aquasec.com/blog/why-is-detection-and-response-too-slow-for-machine-speed-attacks TLDR: Runtime security built around detecting activity, correlating signals and then responding assumes there is enough time to act after something malicious happens. Machine speed attacks challenge that assumption be... Aqua Security Blog https://www.aquasec.com/blog/why-is-detection-and-response-too-slow-for-machine-speed-attacks Wed, 16 Sep 2026 13:00:09 +0000 Cloud Security https://therecord.media/ukraine-call-center-scam-crackdown Ukraine’s parliament has approved tougher criminal penalties for involvement in fraudulent call centers and the theft of personal data, following a corruption scandal in which prosecutors were accused of taking bribes... The Record https://therecord.media/ukraine-call-center-scam-crackdown Wed, 16 Sep 2026 12:45:00 +0000 Scam https://www.helpnetsecurity.com/2026/09/16/parallels-desktop-cve-2026-90894-parashells-vulnerability A newly disclosed vulnerability in Parallels Desktop, tracked as CVE-2026-90894 and dubbed “ParaShells,” can allow any local user on a Mac to gain root privileges on the host system. ParaShells PoC in action (Source:... Help Net Security https://www.helpnetsecurity.com/2026/09/16/parallels-desktop-cve-2026-90894-parashells-vulnerability Wed, 16 Sep 2026 12:36:30 +0000 Vulnerability https://www.bleepingcomputer.com/news/security/webinar-what-happens-in-the-first-hours-of-a-google-workspace-breach The first hours after discovering a Google Workspace breach can determine how an incident unfolds. This webinar examines real-world breaches to show which early response decisions can limit the impact and which can ma... BleepingComputer https://www.bleepingcomputer.com/news/security/webinar-what-happens-in-the-first-hours-of-a-google-workspace-breach Wed, 16 Sep 2026 08:11:19 -0400 Breach https://www.securityweek.com/us-uk-dutch-agencies-expose-iranian-chosen-brick-surveillance-malware US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C. The post US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware a... SecurityWeek https://www.securityweek.com/us-uk-dutch-agencies-expose-iranian-chosen-brick-surveillance-malware Wed, 16 Sep 2026 12:00:14 +0000 Cloud Security https://www.theregister.com/cyber-crime/2026/09/16/spain-gets-its-first-taste-of-ai-aided-cyber-attack/5296844 Data protection chiefs call for 'immediate review' of data protection models The Register - Security https://www.theregister.com/cyber-crime/2026/09/16/spain-gets-its-first-taste-of-ai-aided-cyber-attack/5296844 Wed, 16 Sep 2026 13:56:55 +0200 AI https://www.securityweek.com/unauthenticated-rce-flaws-could-expose-200000-wordpress-sites-to-takeover Vulnerabilities in The Events Calendar can provide attackers with remote code execution capabilities. The post Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover appeared first on SecurityWeek . SecurityWeek https://www.securityweek.com/unauthenticated-rce-flaws-could-expose-200000-wordpress-sites-to-takeover Wed, 16 Sep 2026 11:32:53 +0000 Vulnerability https://www.helpnetsecurity.com/2026/09/16/eu-ursula-von-der-leyen-ai European Commission President Ursula von der Leyen wants frontier AI development slowed, and said on Wednesday that she will invite the leading AI labs to discuss how the EU can support their own efforts to do that. I... Help Net Security https://www.helpnetsecurity.com/2026/09/16/eu-ursula-von-der-leyen-ai Wed, 16 Sep 2026 11:28:45 +0000 AI https://www.schneier.com/blog/archives/2026/09/fake-captcha-scams.html New variant of an old scam: Use the framing of a CAPTCHA to get an unsuspecting user to download and run a malicious program. Schneier on Security https://www.schneier.com/blog/archives/2026/09/fake-captcha-scams.html Wed, 16 Sep 2026 11:25:26 +0000 Scam https://thehackernews.com/2026/09/threat-intelligence-alone-wont-close.html A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized against a real target before most security teams have triaged the alert. Attacker... The Hacker News https://thehackernews.com/2026/09/threat-intelligence-alone-wont-close.html Wed, 16 Sep 2026 16:45:48 +0530 Vulnerability Scam Threat Research https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-critical-screenconnect-flaw Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). [...] BleepingComputer https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-critical-screenconnect-flaw Wed, 16 Sep 2026 07:14:28 -0400 CISA Vulnerability https://www.securityweek.com/hackuity-raises-19-million-for-ai-powered-vulnerability-management The company will use the new capital to expand its vulnerability operations platform and support international growth. The post Hackuity Raises $19 Million for AI-Powered Vulnerability Management appeared first on Sec... SecurityWeek https://www.securityweek.com/hackuity-raises-19-million-for-ai-powered-vulnerability-management Wed, 16 Sep 2026 11:11:23 +0000 Vulnerability AI https://www.infosecurity-magazine.com/news/cyberattacks-cost-organizations Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000 Infosecurity Magazine https://www.infosecurity-magazine.com/news/cyberattacks-cost-organizations Wed, 16 Sep 2026 11:00:00 +0000 Cloud Security https://www.helpnetsecurity.com/2026/09/16/cohesity-agent-resilience-capability Cohesity has introduced Cohesity Agent Resilience. This new Cohesity Data Cloud capability will discover, protect, and recover the infrastructure behind enterprise AI agents. A unified view of an agent and the state i... Help Net Security https://www.helpnetsecurity.com/2026/09/16/cohesity-agent-resilience-capability Wed, 16 Sep 2026 10:58:56 +0000 AI https://www.infosecurity-magazine.com/news/ncsc-allies-warn-iranian-chosen The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents Infosecurity Magazine https://www.infosecurity-magazine.com/news/ncsc-allies-warn-iranian-chosen Wed, 16 Sep 2026 08:25:00 +0000 Threat Research https://securityaffairs.com/199170/data-breach/texas-utility-centerpoint-energy-confirms-data-breach-after-hacker-claims-7-49m-records-stolen.html CenterPoint Energy confirmed a customer data breach after a hacker claimed to leak 7.49M records, including personal and billing information. CenterPoint Energy admitted on Monday that an intruder stole personal infor... Security Affairs https://securityaffairs.com/199170/data-breach/texas-utility-centerpoint-energy-confirms-data-breach-after-hacker-claims-7-49m-records-stolen.html Wed, 16 Sep 2026 08:19:03 +0000 Breach https://www.crowdstrike.com/en-us/blog/crowdstrike-accelerates-real-time-data-classification-with-on-device-ai CrowdStrike Blog https://www.crowdstrike.com/en-us/blog/crowdstrike-accelerates-real-time-data-classification-with-on-device-ai Wed, 16 Sep 2026 00:00:00 -0500 AI https://www.securityweek.com/280000-impacted-by-premier-medical-group-data-breach/ In June 2026, hackers accessed files containing patients’ names, contact information, diagnosis details, and health insurance information. The post 280,000 Impacted by Premier Medical Group Data Breach appeared first... SecurityWeek https://www.securityweek.com/280000-impacted-by-premier-medical-group-data-breach/ Wed, 16 Sep 2026 00:00:00 +0000 Breach https://www.helpnetsecurity.com/2026/09/16/rubrik-mcp/ Rubrik has announced Rubrik MCP (Model Context Protocol), giving an organization’s AI agents a secure, programmable path to Rubrik’s data, identity, and application intelligence. Support for MCP expands Rubrik AI, whi... Help Net Security https://www.helpnetsecurity.com/2026/09/16/rubrik-mcp/ Wed, 16 Sep 2026 00:00:00 +0000 Identity AI https://www.securityweek.com/chrome-firefox-updates-patch-115-vulnerabilities/ Google resolved 42 security defects in Chrome, and Mozilla fixed 73 bugs in Firefox. The post Chrome, Firefox Updates Patch 115 Vulnerabilities appeared first on SecurityWeek . SecurityWeek https://www.securityweek.com/chrome-firefox-updates-patch-115-vulnerabilities/ Wed, 16 Sep 2026 00:00:00 +0000 Cloud Security https://www.helpnetsecurity.com/2026/09/16/nozomi-networks-compass/ Nozomi Networks announced Nozomi Compass, an OT asset and service management platform designed to help organizations manage industrial assets, vulnerabilities, and exposures. The platform brings asset data, remediatio... Help Net Security https://www.helpnetsecurity.com/2026/09/16/nozomi-networks-compass/ Wed, 16 Sep 2026 00:00:00 +0000 Cloud Security https://www.helpnetsecurity.com/2026/09/16/citrix-session-insights-capability/ Citrix has announced Citrix Session Insights, a new AI-powered capability for Citrix SecurAccess with Chrome Enterprise that helps organizations capture, analyze and understand browser activity from users and autonomo... Help Net Security https://www.helpnetsecurity.com/2026/09/16/citrix-session-insights-capability/ Wed, 16 Sep 2026 00:00:00 +0000 AI https://blog.talosintelligence.com/securing-the-unpatchable-in-an-age-of-ai-driven-vulnerabilities/ Advances in AI technology will continue to identify vulnerabilities that in some circumstances are difficult, or effectively impossible, to patch. Appropriate network segmentation, rigorous visibility, and the deploym... Cisco Talos https://blog.talosintelligence.com/securing-the-unpatchable-in-an-age-of-ai-driven-vulnerabilities/ Wed, 16 Sep 2026 00:00:00 +0000 AI https://unit42.paloaltonetworks.com/atomic-macos-amos-stealer-activity/ Modern macOS malware uses deceptive setup guides to steal credentials and sensitive user data. Learn how to identify and block these threats. The post Atomic macOS (AMOS) Stealer Activity appeared first on Unit 42 . Palo Alto Networks Unit 42 https://unit42.paloaltonetworks.com/atomic-macos-amos-stealer-activity/ Wed, 16 Sep 2026 00:00:00 +0000 Scam https://www.infosecurity-magazine.com/news/zeroday-tplink-cameras/ OPSWAT researchers find two zero-days in TP-Link cameras Infosecurity Magazine https://www.infosecurity-magazine.com/news/zeroday-tplink-cameras/ Wed, 16 Sep 2026 00:00:00 +0000 Vulnerability https://www.helpnetsecurity.com/2026/09/16/google-mandiant-enterprise-ai-security-risks-report/ Organizations are deploying autonomous AI systems that execute API calls, optimize production configurations, and analyze telemetry across hybrid cloud environments. At the same time, attacks are expanding from direct... Help Net Security https://www.helpnetsecurity.com/2026/09/16/google-mandiant-enterprise-ai-security-risks-report/ Wed, 16 Sep 2026 00:00:00 +0000 AI https://www.infosecurity-magazine.com/news/cyber-vendors-mitre-uk-testing/ A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program Infosecurity Magazine https://www.infosecurity-magazine.com/news/cyber-vendors-mitre-uk-testing/ Wed, 16 Sep 2026 00:00:00 +0000 Cloud Security https://www.malwarebytes.com/blog/threat-intel/2026/09/ai-helps-scammers-build-convincing-antivirus-renewal-pages A fake Avast renewal page shows how AI is helping scammers create more convincing traps with polished designs and fluent copy. Malwarebytes Labs https://www.malwarebytes.com/blog/threat-intel/2026/09/ai-helps-scammers-build-convincing-antivirus-renewal-pages Wed, 16 Sep 2026 00:00:00 +0000 AI Scam https://www.securityweek.com/enterprises-warned-of-attacks-exploiting-wso2-vulnerability/ The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data. The post Enterprises Warned of Attacks Exploiting WSO2 Vulnerability appeared first on SecurityWeek . SecurityWeek https://www.securityweek.com/enterprises-warned-of-attacks-exploiting-wso2-vulnerability/ Wed, 16 Sep 2026 00:00:00 +0000 Vulnerability https://www.helpnetsecurity.com/2026/09/16/gourab-basu-meshiq-ai-agent-governance/ In this interview with Help Net Security, Gourab Basu, Global Head of Engineering at meshIQ, discusses governance in AI agent systems. He argues that instructions written into a prompt are not enough to control what a... Help Net Security https://www.helpnetsecurity.com/2026/09/16/gourab-basu-meshiq-ai-agent-governance/ Wed, 16 Sep 2026 00:00:00 +0000 AI https://www.theregister.com/security/2026/09/16/mythos-has-made-2026-patching-hell-it-might-make-2027-a-breeze/5296747 Gartner sees huge amounts of technical debt paid down, and better scanning that could make software safer sooner The Register - Security https://www.theregister.com/security/2026/09/16/mythos-has-made-2026-patching-hell-it-might-make-2027-a-breeze/5296747 Wed, 16 Sep 2026 00:00:00 +0000 Cloud Security https://www.helpnetsecurity.com/2026/09/16/vulnerable-windows-drivers-deepzero-open-source/ DeepZero is an open-source engine that automates the search for exploitable Windows kernel drivers. You point it at a folder of binaries and it parses them, pulls them apart, scans them, throws most of them away, and... Help Net Security https://www.helpnetsecurity.com/2026/09/16/vulnerable-windows-drivers-deepzero-open-source/ Wed, 16 Sep 2026 00:00:00 +0000 Vulnerability https://thehackernews.com/2026/09/active-exploitation-attempts-target.html A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of impro... The Hacker News https://thehackernews.com/2026/09/active-exploitation-attempts-target.html Wed, 16 Sep 2026 00:00:00 +0000 Vulnerability https://isc.sans.edu/diary/rss/33342 SANS ISC https://isc.sans.edu/diary/rss/33342 Wed, 16 Sep 2026 00:00:00 +0000 Cloud Security https://www.darkreading.com/cyberattacks-data-breaches/cyber-south-korean-media-automotive A likely North Korean advanced persistent threat (APT) group used a previously undocumented Linux espionage toolkit to compromise load balancers, gain access to communications, and further exploit networks. Dark Reading https://www.darkreading.com/cyberattacks-data-breaches/cyber-south-korean-media-automotive Wed, 16 Sep 2026 00:00:00 +0000 Vulnerability Threat Research https://securitylabs.datadoghq.com/articles/mapping-out-your-unknown-threat-hunters-guide-to-github In this post, we walk through different threats to GitHub and how to detect them. Datadog Security Labs https://securitylabs.datadoghq.com/articles/mapping-out-your-unknown-threat-hunters-guide-to-github Wed, 16 Sep 2026 00:00:00 +0000 Cloud Security https://blog.qualys.com/product-tech/2026/09/15/before-you-patch-why-patch-reliability-matters-for-confident-deployment Executive Summary Microsoft’s September 2026 security updates, KB5124008 and KB5124012, have been linked to USB audio failures on some Windows systems, highlighting the operational risk that can accompany security pat... Qualys Blog https://blog.qualys.com/product-tech/2026/09/15/before-you-patch-why-patch-reliability-matters-for-confident-deployment Tue, 15 Sep 2026 18:00:53 +0000 Azure https://thehackernews.com/2026/09/iranian-hackers-use-telegram-controlled.html Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists arou... The Hacker News https://thehackernews.com/2026/09/iranian-hackers-use-telegram-controlled.html Tue, 15 Sep 2026 21:59:51 +0530 Cloud Security https://www.theregister.com/security/2026/09/15/cisco-email-security-boxes-can-be-rooted-by-an-email/5296604 Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they're in The Register - Security https://www.theregister.com/security/2026/09/15/cisco-email-security-boxes-can-be-rooted-by-an-email/5296604 Tue, 15 Sep 2026 18:01:00 +0200 Vulnerability https://cyberscoop.com/cisco-secure-email-gateway-zero-day-exploited The company confirmed the defect was exploited before it was disclosed and patched, but it did not describe the nature of the attacks or the scope of impact across its customer base. The post Cisco warns customers of... CyberScoop https://cyberscoop.com/cisco-secure-email-gateway-zero-day-exploited Tue, 15 Sep 2026 15:44:41 +0000 Vulnerability https://www.bleepingcomputer.com/news/security/bambootoken-malware-controls-windows-and-linux-systems-via-mqtt A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems. [...] BleepingComputer https://www.bleepingcomputer.com/news/security/bambootoken-malware-controls-windows-and-linux-systems-via-mqtt Tue, 15 Sep 2026 11:00:00 -0400 Cloud Security https://thehackernews.com/2026/09/human-attacker-exploits-marimo-rce.html With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can... The Hacker News https://thehackernews.com/2026/09/human-attacker-exploits-marimo-rce.html Tue, 15 Sep 2026 17:22:28 +0530 Vulnerability AI https://thehackernews.com/2026/09/mass-scanning-campaign-exploits-vite.html Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development server... The Hacker News https://thehackernews.com/2026/09/mass-scanning-campaign-exploits-vite.html Tue, 15 Sep 2026 16:42:32 +0530 Vulnerability Breach Scam https://securityaffairs.com/199104/apt/one-exploit-chain-two-espionage-campaigns-chrome-and-windows-under-fire.html Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, before Chrome’s patch shipped, deploying different backdoors each. Two China-linked threat actors used the same Chrome/Windows zero-... Security Affairs https://securityaffairs.com/199104/apt/one-exploit-chain-two-espionage-campaigns-chrome-and-windows-under-fire.html Tue, 15 Sep 2026 10:17:40 +0000 Vulnerability Threat Research https://www.bleepingcomputer.com/news/security/black-axe-gang-members-extradited-to-us-face-cybercrime-charges Five alleged leaders of the Black Axe cybercrime syndicate, known for its involvement in global-scale cyber-enabled financial fraud, have been extradited to the United States to face wire fraud and money laundering ch... BleepingComputer https://www.bleepingcomputer.com/news/security/black-axe-gang-members-extradited-to-us-face-cybercrime-charges Tue, 15 Sep 2026 05:50:25 -0400 Scam https://thehackernews.com/2026/09/litespeed-enterprise-flaw-could-let-one.html A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an advisory published on September 14. On such servers,... The Hacker News https://thehackernews.com/2026/09/litespeed-enterprise-flaw-could-let-one.html Tue, 15 Sep 2026 12:22:16 +0530 Vulnerability https://cloud.google.com/blog/products/identity-security/introducing-new-session-management-tools-with-native-granular-controls Google Cloud session management provides flexible options for setting up session controls based on your organization’s security policy needs. To help you improve your security posture and mitigate credential theft and... Google Cloud Blog https://cloud.google.com/blog/products/identity-security/introducing-new-session-management-tools-with-native-granular-controls Tue, 15 Sep 2026 00:00:00 +0000 GCP Scam https://www.crowdstrike.com/en-us/blog/phantomraven-llm-generated-information-stealer-for-bug-bounty-hunting/ CrowdStrike Blog https://www.crowdstrike.com/en-us/blog/phantomraven-llm-generated-information-stealer-for-bug-bounty-hunting/ Tue, 15 Sep 2026 00:00:00 +0000 AI https://www.bleepingcomputer.com/news/security/malcious-admin-menu-editor-pro-plugin-backdoors-1-500-wordpress-sites Malicious versions of the Admin Menu Editor Pro plugin for WordPress have been distributed to more than 200 customers after a threat actor compromised the maintainer's website and pushed updates that created a hidden... BleepingComputer https://www.bleepingcomputer.com/news/security/malcious-admin-menu-editor-pro-plugin-backdoors-1-500-wordpress-sites Tue, 15 Sep 2026 00:00:00 +0000 Threat Research https://www.securityweek.com/microsoft-ai-code-of-conduct-sets-cyberattack-boundaries-chain-of-command-safety-constraints/ The Humanist AI Code of Conduct draws a line between defensive cyber research and operational attack capability. The post Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints... SecurityWeek https://www.securityweek.com/microsoft-ai-code-of-conduct-sets-cyberattack-boundaries-chain-of-command-safety-constraints/ Tue, 15 Sep 2026 00:00:00 +0000 Azure AI https://aws.amazon.com/blogs/security/aws-sts-simplifies-session-token-size-limits-and-adds-session-token-size-monitoring/ AWS Security Token Service (AWS STS) has simplified session token size limits, giving you more room for your session policies and session tags. STS has replaced the packed policy size and the overall session token siz... AWS Security Blog https://aws.amazon.com/blogs/security/aws-sts-simplifies-session-token-size-limits-and-adds-session-token-size-monitoring/ Tue, 15 Sep 2026 00:00:00 +0000 AWS https://www.theregister.com/security/2026/09/15/the-vulnpocalypse-rains-ibugs-down-on-apple-with-record-setting-number-of-patches/5296679 September Patch Tuesday part 2? The Register - Security https://www.theregister.com/security/2026/09/15/the-vulnpocalypse-rains-ibugs-down-on-apple-with-record-setting-number-of-patches/5296679 Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://www.theregister.com/security/2026/09/15/low-quality-casino-sites-conceal-highly-dangerous-threat-actors/5296652 Security firm Infoblox shines light on malicious infrastructure lurking beneath illegal gambling sites The Register - Security https://www.theregister.com/security/2026/09/15/low-quality-casino-sites-conceal-highly-dangerous-threat-actors/5296652 Tue, 15 Sep 2026 00:00:00 +0000 Threat Research https://www.theregister.com/security/2026/09/15/sponsored-whos-governing-your-ai-a-trust-framework-for-enterprise-agents-and-models/5294237 SPONSORED FEATURE: DigiCert wants to hand every agent a passport, complete with an expiry date and a named human owner The Register - Security https://www.theregister.com/security/2026/09/15/sponsored-whos-governing-your-ai-a-trust-framework-for-enterprise-agents-and-models/5294237 Tue, 15 Sep 2026 00:00:00 +0000 AI https://www.theregister.com/security/2026/09/15/swiss-court-sentences-52-year-old-ukrainian-ransomware-dev-to-nearly-13-years-in-the-cooler/5296482 The man allegedly wrote the code that powered the Lockergoga, MegaCortex, and Nefilim operations The Register - Security https://www.theregister.com/security/2026/09/15/swiss-court-sentences-52-year-old-ukrainian-ransomware-dev-to-nearly-13-years-in-the-cooler/5296482 Tue, 15 Sep 2026 00:00:00 +0000 Ransomware https://www.huntress.com/blog/google-doc-sidebar-malware-mac-windows A single X DM split into two malware chains: AMOS stealer on Mac, NetSupport Manager on Windows, see the Huntress SOC analyst breakdown. Huntress Blog https://www.huntress.com/blog/google-doc-sidebar-malware-mac-windows Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://www.theregister.com/ai-and-ml/2026/09/15/the-latest-ai-doomsayer-is-chinas-intelligence-boss/5296451 Beijing’s response is to ‘firmly grasp technological sovereignty’ and broad regulations The Register - Security https://www.theregister.com/ai-and-ml/2026/09/15/the-latest-ai-doomsayer-is-chinas-intelligence-boss/5296451 Tue, 15 Sep 2026 00:00:00 +0000 AI https://www.securityweek.com/microsoft-commits-to-sweeping-ai-privacy-rules-for-students-will-other-tech-giants-follow/ Microsoft agreed to adopt guardrails and privacy standards for its AI in schools, as negotiated with the American Federation of Teachers. The post Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Othe... SecurityWeek https://www.securityweek.com/microsoft-commits-to-sweeping-ai-privacy-rules-for-students-will-other-tech-giants-follow/ Tue, 15 Sep 2026 00:00:00 +0000 Azure AI https://www.darkreading.com/application-security/microsoft-emergency-fixes-patch-tuesday You can't make an omelet without breaking a few eggs, and you can't patch nearly 1,000 CVEs without a few glitches. Dark Reading https://www.darkreading.com/application-security/microsoft-emergency-fixes-patch-tuesday Tue, 15 Sep 2026 00:00:00 +0000 Azure https://cyberscoop.com/whats-next-for-cisas-cdm-program-that-gives-cybersecurity-tools-to-federal-agencies/ Three feds spoke about future plans for the Continuous Diagnostics and Mitigation program, and lessons they’ve learned. The post What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies ap... CyberScoop https://cyberscoop.com/whats-next-for-cisas-cdm-program-that-gives-cybersecurity-tools-to-federal-agencies/ Tue, 15 Sep 2026 00:00:00 +0000 CISA https://www.darkreading.com/vulnerabilities-threats/bhusa26huggingfacetalk The 'Breaking' News: The OpenAI-Hugging Face Incident - A Technical Reconstruction and Its Implications for AI At this Black Hat USA 2026 talk, OpenAI security engineers and researchers will reconstruct the OpenAI-Hug... Dark Reading https://www.darkreading.com/vulnerabilities-threats/bhusa26huggingfacetalk Tue, 15 Sep 2026 00:00:00 +0000 AI https://aws.amazon.com/blogs/security/architecting-resilient-authentication-with-amazon-cognito-multi-region-replication/ Your consumer identity and access management (CIAM) system is the foundation of your customer experience. It’s how users sign in, access services, and engage with your applications. As your business scales across geog... AWS Security Blog https://aws.amazon.com/blogs/security/architecting-resilient-authentication-with-amazon-cognito-multi-region-replication/ Tue, 15 Sep 2026 00:00:00 +0000 AWS Identity https://thehackernews.com/2026/09/kremlin-banking-malware-hijacks-chrome.html Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF93... The Hacker News https://thehackernews.com/2026/09/kremlin-banking-malware-hijacks-chrome.html Tue, 15 Sep 2026 00:00:00 +0000 Scam https://www.darkreading.com/endpoint-security/vectrarat-hack-windows-enterprises The full-service malware-as-a-service (MaaS) platform offers a Windows implant, command-and-control (C2) infrastructure, and an operator panel for comprehensive remote access. Dark Reading https://www.darkreading.com/endpoint-security/vectrarat-hack-windows-enterprises Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://www.theregister.com/on-prem/2026/09/15/septembers-windows-11-patch-needs-an-emergency-patch-of-its-own/5296567 Microsoft fixes RDP and Hyper-V fallout, but some USB audio stays silent The Register - On-Prem https://www.theregister.com/on-prem/2026/09/15/septembers-windows-11-patch-needs-an-emergency-patch-of-its-own/5296567 Tue, 15 Sep 2026 00:00:00 +0000 Azure https://aws.amazon.com/blogs/security/operationalizing-least-privilege-automate-iam-remediation-through-your-ci-cd-pipeline/ The principle of least privilege is straightforward to articulate but challenging to maintain at scale. When teams first deploy applications to AWS, they often grant broader permissions than strictly necessary; it’s f... AWS Security Blog https://aws.amazon.com/blogs/security/operationalizing-least-privilege-automate-iam-remediation-through-your-ci-cd-pipeline/ Tue, 15 Sep 2026 00:00:00 +0000 AWS Identity https://www.malwarebytes.com/blog/how-to/2026/09/how-to-opt-out-of-ai-chatbot-training ChatGPT contractors are reviewing real users' conversations. Here’s how to stop AI companies using your chats for model training. Malwarebytes Labs https://www.malwarebytes.com/blog/how-to/2026/09/how-to-opt-out-of-ai-chatbot-training Tue, 15 Sep 2026 00:00:00 +0000 AI https://www.infosecurity-magazine.com/news/fraudulent-hires-credentials/ A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations Infosecurity Magazine https://www.infosecurity-magazine.com/news/fraudulent-hires-credentials/ Tue, 15 Sep 2026 00:00:00 +0000 Scam https://therecord.media/ukraine-cyber-coordination-center-ihor-klymenko Ihor Klymenko, who has experience in law enforcement and as interior minister, will run Ukraine's National Cybersecurity Coordination Center. The Record https://therecord.media/ukraine-cyber-coordination-center-ihor-klymenko Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://blog.gitguardian.com/ai-autonomy/ AI agents are only as autonomous as the credentials behind them. This article talks about the Cloud Security Alliance's autonomy framework, why an agent's intended boundaries rarely match its actual access, and how Gi... GitGuardian Blog https://blog.gitguardian.com/ai-autonomy/ Tue, 15 Sep 2026 00:00:00 +0000 AI Scam https://www.reversinglabs.com/blog/ai-secure-by-design-spotlight The software industry is entering the AI era burdened by legacy flaws and weaknesses, making Secure by Design essential. ReversingLabs Blog https://www.reversinglabs.com/blog/ai-secure-by-design-spotlight Tue, 15 Sep 2026 00:00:00 +0000 AI https://blog.qualys.com/product-tech/2026/09/15/automate-asset-isolation-cisa-kev-deadlines Executive Summary Remediation deadlines slip for reasons outside your control: a patch does not exist yet, a patch is delayed, or a remediation attempt fails. The outcome is the same either way: the host stays unpatch... Qualys Blog https://blog.qualys.com/product-tech/2026/09/15/automate-asset-isolation-cisa-kev-deadlines Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://www.infosecurity-magazine.com/news/four-of-800-clients-hit-ransomware/ Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours Infosecurity Magazine https://www.infosecurity-magazine.com/news/four-of-800-clients-hit-ransomware/ Tue, 15 Sep 2026 00:00:00 +0000 Ransomware https://www.huntress.com/blog/operational-resilience-reduced-staffing-risks Reduced staffing during holidays changes more than headcount. Learn how operational resilience should shape your IT and security change decisions Huntress Blog https://www.huntress.com/blog/operational-resilience-reduced-staffing-risks Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://www.helpnetsecurity.com/2026/09/15/f5-distributed-cloud-bot-defense-enhancements/ F5 has announced enhancements to F5 Distributed Cloud Bot Defense, introducing new device intelligence capabilities and specialized agentic AI protections. These capabilities bring persistent device context and contin... Help Net Security https://www.helpnetsecurity.com/2026/09/15/f5-distributed-cloud-bot-defense-enhancements/ Tue, 15 Sep 2026 00:00:00 +0000 AI Scam https://www.helpnetsecurity.com/2026/09/15/postman-passport/ Postman has announced the general availability of Passport by Postman, marking the company’s expansion into API security with a standalone product that gives organizations a secure way to consume APIs as human and non... Help Net Security https://www.helpnetsecurity.com/2026/09/15/postman-passport/ Tue, 15 Sep 2026 00:00:00 +0000 Scam https://www.tenable.com/blog/australia-essential-eight-replacement-compliance-exposure-management Australia’s move from the Essential Eight to an outcomes-based cybersecurity model will push organizations from conducting periodic point-in-time, checklist compliance assessments to having continuous evidence of a so... Tenable Blog https://www.tenable.com/blog/australia-essential-eight-replacement-compliance-exposure-management Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://www.helpnetsecurity.com/2026/09/15/globalgig-expands-managed-security-with-ai-protection/ Globalgig has expanded its managed security portfolio to cover enterprise AI, bringing together services that discover, assess, and protect the AI applications, agents, models, and data enterprises are putting into pr... Help Net Security https://www.helpnetsecurity.com/2026/09/15/globalgig-expands-managed-security-with-ai-protection/ Tue, 15 Sep 2026 00:00:00 +0000 AI https://blog.cloudflare.com/accountable-mixed-use-ai-crawlers/ Cloudflare is giving site owners a way to stay discoverable while disallowing AI training. New controls and an Accountable designation establish a shared model with Apple, Google, and Microsoft. Cloudflare Blog https://blog.cloudflare.com/accountable-mixed-use-ai-crawlers/ Tue, 15 Sep 2026 00:00:00 +0000 Azure AI https://www.infosecurity-magazine.com/news/ai-top-priority-new-spend-cyber/ IANS finds AI is dominating net-new budgets even as overall funding for the function is flat Infosecurity Magazine https://www.infosecurity-magazine.com/news/ai-top-priority-new-spend-cyber/ Tue, 15 Sep 2026 00:00:00 +0000 AI https://therecord.media/china-spy-chief-warns-of-us-ai-models China's spy chief identified Anthropic’s Claude Mythos and OpenAI’s GPT-5.5-Cyber as signs of what he called a “disruptive upgrade” in cyber capabilities, increasing the speed and potential weaponization of vulnerabil... The Record https://therecord.media/china-spy-chief-warns-of-us-ai-models Tue, 15 Sep 2026 00:00:00 +0000 AI https://www.wiz.io/blog/wiz-defend-and-google-security-operations Continuing to deepen the integration between Wiz Defend and Google Security Operations, helping teams work faster wherever they choose to investigate Wiz Blog https://www.wiz.io/blog/wiz-defend-and-google-security-operations Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://therecord.media/manhattan-da-takes-down-12-ai-deepfake-porn-sites Manhattan District Attorney Alvin Bragg held a press conference on Monday touting the takedown of the sites, which hosted AI-generated videos of more than 1,200 people. The sites allowed users to use the faces and bod... The Record https://therecord.media/manhattan-da-takes-down-12-ai-deepfake-porn-sites Tue, 15 Sep 2026 00:00:00 +0000 AI https://www.malwarebytes.com/blog/news/2026/09/hbo-maxs-verified-reddit-account-hijacked-to-spread-malware Cybercriminals used HBO Max’s verified Reddit account to run 108 malicious ads that tricked people into installing information stealers. Malwarebytes Labs https://www.malwarebytes.com/blog/news/2026/09/hbo-maxs-verified-reddit-account-hijacked-to-spread-malware Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://thehackernews.com/2026/09/attack-chains-not-just-attack-surfaces.html Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this par... The Hacker News https://thehackernews.com/2026/09/attack-chains-not-just-attack-surfaces.html Tue, 15 Sep 2026 00:00:00 +0000 Phishing https://snyk.io/blog/ai-hurricane-is-here/ AI is accelerating software creation and cyberattacks alike. Leaders must secure agents and code at inception, enforce controls at runtime, and validate defenses independently. Snyk Blog https://snyk.io/blog/ai-hurricane-is-here/ Tue, 15 Sep 2026 00:00:00 +0000 AI https://www.schneier.com/blog/archives/2026/09/25-years-of-mass-surveillance-is-enough.html This essay was written with Cindy Cohn, and originally appeared in Lawfare . One of the many legacies of the terrorist attacks of Sept. 11 is the government-wide shift from targeted surveillance-such as individual wir... Schneier on Security https://www.schneier.com/blog/archives/2026/09/25-years-of-mass-surveillance-is-enough.html Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://blog.trailofbits.com/2026/09/15/1passwords-ai-patching-benchmark-is-misleading/ 1Password’s FLAWED report , published on August 6, 2026, gives defenders a misleading picture of AI patching. Its headline says models produced clean fixes only 26% of the time. That figure includes experiments that d... Trail of Bits Blog https://blog.trailofbits.com/2026/09/15/1passwords-ai-patching-benchmark-is-misleading/ Tue, 15 Sep 2026 00:00:00 +0000 AI https://www.malwarebytes.com/blog/family-and-parenting/2026/09/meta-ai-builds-detailed-profiles-of-children-from-years-of-family-posts A mother says Meta AI pieced together names, birth details, photos, and location information about her young daughters from years of family posts. Malwarebytes Labs https://www.malwarebytes.com/blog/family-and-parenting/2026/09/meta-ai-builds-detailed-profiles-of-children-from-years-of-family-posts Tue, 15 Sep 2026 00:00:00 +0000 AI https://www.malwarebytes.com/blog/threat-intel/2026/09/search-results-are-sending-people-to-fake-bitrefill-checkouts Fake Bitrefill checkout pages are appearing in search results and tricking people into sending cryptocurrency directly to scammers. Malwarebytes Labs https://www.malwarebytes.com/blog/threat-intel/2026/09/search-results-are-sending-people-to-fake-bitrefill-checkouts Tue, 15 Sep 2026 00:00:00 +0000 Scam https://www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/ Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday Infosecurity Magazine https://www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/ Tue, 15 Sep 2026 00:00:00 +0000 Azure Vulnerability https://securityaffairs.com/199076/security/telegram-desktop-flaw-could-turn-old-chat-exports-into-data-theft-traps.html A Telegram Desktop flaw let bots inject JavaScript into exported chats, enabling data theft and page manipulation. Old HTML exports remain unsafe. A vulnerability in Telegram Desktop could have turned an ordinary chat... Security Affairs https://securityaffairs.com/199076/security/telegram-desktop-flaw-could-turn-old-chat-exports-into-data-theft-traps.html Tue, 15 Sep 2026 00:00:00 +0000 Vulnerability https://securityaffairs.com/199090/security/non-zero-day-vpn-flaw-left-japan-government-shared-network-platform-exposed-246000-records-at-risk.html Japan ‘s Digital Agency disclosed a VPN breach exposing 246,000 government employee records across 23 ministries. Detected June 25, publicly disclosed September 11. Japan ‘s Digital Agency disclosed that attackers exp... Security Affairs https://securityaffairs.com/199090/security/non-zero-day-vpn-flaw-left-japan-government-shared-network-platform-exposed-246000-records-at-risk.html Tue, 15 Sep 2026 00:00:00 +0000 Vulnerability Breach https://cyberscoop.com/supreme-court-denies-trump-usps-mail-ballot-changes/ One justice said the attempt to change the rules ahead of the 2026 elections would be "arbitrary and capricious” and violated the Administrative Procedures Act. The post Supreme Court denies Trump request to allow USP... CyberScoop https://cyberscoop.com/supreme-court-denies-trump-usps-mail-ballot-changes/ Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://www.recordedfuture.com/research/tajin-group-gurantee-marketplace Analyze Tajin Group's role in phishing and Chinese money laundering. Discover how this Telegram-based vendor exploits payment gateways and adapts its financial fraud operations. Recorded Future https://www.recordedfuture.com/research/tajin-group-gurantee-marketplace Tue, 15 Sep 2026 00:00:00 +0000 Vulnerability Phishing Scam https://www.chainguard.dev/unchained/announcing-the-sovereign-artifacts-beta Chainguard launches Sovereign Artifacts in beta, giving global organizations an EU-local option for secure container and library artifacts. Chainguard Unchained https://www.chainguard.dev/unchained/announcing-the-sovereign-artifacts-beta Tue, 15 Sep 2026 00:00:00 +0000 Cloud Security https://www.chainguard.dev/unchained/the-flood-is-coming-and-the-pipes-were-already-full Frontier AI is finding zero-days faster than the industry can fix them. See how Chainguard and Athena are preparing for what comes next. Chainguard Unchained https://www.chainguard.dev/unchained/the-flood-is-coming-and-the-pipes-were-already-full Tue, 15 Sep 2026 00:00:00 +0000 Vulnerability AI https://www.theregister.com/cyber-crime/2026/09/14/hbo-max-reddit-account-compromised-to-serve-clickfix-attacks/5296408 Part of a 'massive 48-hour malvertising blitz' targeting macOS and Windows machines with malware The Register - Security https://www.theregister.com/cyber-crime/2026/09/14/hbo-max-reddit-account-compromised-to-serve-clickfix-attacks/5296408 Tue, 15 Sep 2026 00:43:01 +0200 Cloud Security https://www.darkreading.com/cyberattacks-data-breaches/maximum-severity-gitlab-flaw-supply-chains-risk CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances. Dark Reading https://www.darkreading.com/cyberattacks-data-breaches/maximum-severity-gitlab-flaw-supply-chains-risk Mon, 14 Sep 2026 20:19:22 +0000 Vulnerability Supply Chain https://cyberscoop.com/black-axe-south-africa-leaders-extradited Officials said the five individuals concocted various long-running romance scams to trick U.S.-based victims into sending them money. The post Five alleged leaders of Black Axe’s operations in South Africa extradited... CyberScoop https://cyberscoop.com/black-axe-south-africa-leaders-extradited Mon, 14 Sep 2026 18:37:44 +0000 Scam https://thehackernews.com/2026/09/ai-changed-exposure-problem-validation.html There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a much greater scale, whi... The Hacker News https://thehackernews.com/2026/09/ai-changed-exposure-problem-validation.html Mon, 14 Sep 2026 17:28:00 +0530 Vulnerability AI https://thehackernews.com/2026/09/malicious-twitch-browser-extension.html A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. The extension, named "Twitch Enhanced Viewer... The Hacker News https://thehackernews.com/2026/09/malicious-twitch-browser-extension.html Mon, 14 Sep 2026 12:54:39 +0530 Cloud Security https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild/ Overview On September 10, 2026, GitLab published a critical patch release for GitLab Community Edition (CE) and Enterprise Edition (EE). The release addresses CVE-2026-85706 , a critical path traversal vulnerability (... Rapid7 Blog https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild/ Mon, 14 Sep 2026 00:00:00 +0000 Vulnerability https://www.darkreading.com/cyberattacks-data-breaches/sandworm-chains-cisco-vulnerabilities-cyclops-blink The notorious Russian threat group is spreading an upgraded version of the botnet malware, which the FBI disrupted in 2022. Dark Reading https://www.darkreading.com/cyberattacks-data-breaches/sandworm-chains-cisco-vulnerabilities-cyclops-blink Mon, 14 Sep 2026 00:00:00 +0000 Cloud Security https://www.bleepingcomputer.com/news/security/homebrew-700-gets-built-in-gui-better-security-controls Homebrew package manager version 7.0.0 has been released with a built-in vulnerability scanner, stronger security controls, and the full release of its native BrewUI graphical interface. [...] BleepingComputer https://www.bleepingcomputer.com/news/security/homebrew-700-gets-built-in-gui-better-security-controls Mon, 14 Sep 2026 00:00:00 +0000 Vulnerability https://isc.sans.edu/diary/rss/33336 Today, Apple released its annual update across all its operating systems. With that, Apple not only released new features but also patched 261 different vulnerabilities. This is the most vulnerabilities Apple has ever... SANS ISC https://isc.sans.edu/diary/rss/33336 Mon, 14 Sep 2026 00:00:00 +0000 Cloud Security