IT Security News: today roundup N-able patched a critical N-central zero-day vulnerability after attackers created unrecognized user accounts on compromised systems. A market review evaluated FWaaS providers, highlighting Cloudflare for affordability, Cato Networks for simplicity, and Prisma Access. Palo Alto…
IT Security News Hourly Summary 2026-09-11 13h : 15 posts
15 posts published in the last hour 10:32Critical GitLab Flaws Let Attackers Read Arbitrary Files, Steal Credentials and Execute Code 10:32U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok 10:31The AI Energy Paradox: Can Data Centres…
Critical GitLab Flaws Let Attackers Read Arbitrary Files, Steal Credentials and Execute Code
GitLab has issued an emergency security update to address two critical vulnerabilities that could lead to unauthenticated file disclosure and…
U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok
U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence (AI) companies of conducting “systematic extraction” of…
The AI Energy Paradox: Can Data Centres Scale Without Derailing Sustainability?
Can AI data centres scale sustainably? Explore how smarter cooling, cleaner power and tighter governance can curb their growing energy and water demands.
AI agents exploited PaperCut flaws to breach 395 organizations
A threat actor built a working exploit for PaperCut print management software, then handed the job of breaking into hundreds of organizations to AI agents…
Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets
Bitcoin wallet company Alby has warned of a critical flaw in Alby Hub that could have let an attacker take over a wallet and send its funds, but only…
The AI Energy Paradox: Head-to-Head
Can AI data centres scale sustainably? Explore how smarter cooling, cleaner power and tighter governance can curb their growing energy and water demands.
DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval
A flaw in DeepSeek Harness, DeepSeek’s open-source tool for running AI coding agents on a developer’s machine, let a sandboxed agent turn off its own…
Most Organizations Skip Permissions Reviews Before Deploying AI Tools
A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a permission review before…
Teaching AI to Reason Through Detection Triage
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Teaching AI to Reason Through Detection Triage
Hack of the Berlin Senate Administration Will Have Consequences for Decades
A phishing email sets a consequential attack by a ransomware group in motion: In August 2026, data from the Berlin Senate Administration was leaked. The…
Hackers Exploit JFrog Artifactory Flaws to Bypass Authentication and Gain Admin Access
Threat actors are actively exploiting three vulnerabilities in JFrog Artifactory, CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329, to bypass…
Surfshark Systems Targeted by Hackers
A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors.
Claude Fable Solves a Historical Cipher
Claude Fable 5.1 solved a 370-year-old cipher in forty-four minutes. This tracks with what I wrote about AIs doing mathematics: It’s good at things that…
Okta Patches Auth0 and Access Gateway Vulnerabilities Let Attackers Enable XSS, Authentication Bypass and SQL Injection
Okta has released security updates for three high-severity vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta Access Gateway. These…
IT Security News Hourly Summary 2026-09-11 12h : 16 posts
16 posts published in the last hour 09:32Microsoft fixes record 964 flaws, including 2 exploited zero-days 09:32The US and Mexico Announce They’re Teaming Up Against Drones 09:32IDScan confirms breach after 153 million driver’s licenses leak on dark web 09:3178 arrests…
Microsoft fixes record 964 flaws, including 2 exploited zero-days
Microsoft’s September 2026 Patch Tuesday fixes a record 964 vulnerabilities, including two actively exploited zero-days.
The US and Mexico Announce They’re Teaming Up Against Drones
The new joint operation uses laser-based technology capable of detecting, tracking, and disabling commercial drones linked to human and drug trafficking.
IDScan confirms breach after 153 million driver’s licenses leak on dark web
Days after reports linked IDScan to a dark web database holding more than 153 million driver’s license scans, the identity verification company has…
78 arrests in bust of major Western Mediterranean smuggling network in Spain
The operation, conducted under a newly established Europol Taskforce within Europol’s European Centre Against Migrant Smuggling, brought together officers…
Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth Bypass, and SQL Injection
Okta has released security fixes for three vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta Access Gateway. The flaws could enable stored…
Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure
An investigation into how cybercriminals used YouTube gaming lures and SEO poisoning to deliver multi-payload malware to enterprise networks.
GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution
GitLab has released security updates for Community Edition and Enterprise Edition to fix multiple vulnerabilities, including two critical flaws that could…
New IoT Malware Uses Public Linux Exploits to Gain Root and Launch DDoS Attacks
A newly observed IoT malware family dubbed KATARU targets internet-exposed devices through Telnet credential brute-forcing, then attempts to gain root…