Researchers linked OpenAI agents to RubyGems abuse and alleged RubyDoc RCE, highlighting risks around autonomous AI, build systems, and credentials.
IT Security News Hourly Summary 2026-09-14 18h : 11 posts
11 posts published in the last hour 15:31Android Simplifies Secure Migration of Saved Logins 15:31Malicious Twitch Extension Exposes 31,000 Users’ OAuth Tokens 15:31South Korean Startup Suffers Breach Due to Encryption Management Failure 15:31⚡ Weekly Recap: Rogue AI Agents, WeChat Worm,…
Android Simplifies Secure Migration of Saved Logins
With the advent of Android’s new credential transfer feature, passwords and passkeys can be transferred directly between supported password managers…
Malicious Twitch Extension Exposes 31,000 Users’ OAuth Tokens
Socket has discovered a Twitch browser extension forwarding users’ OAuth tokens to a Russian bot service
South Korean Startup Suffers Breach Due to Encryption Management Failure
Modu-ui, a South Korean government backed startup support platform, suffered a data breach in July. The breach later disclosed a critical encoding key…
⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also…
Study Warns Enterprise AI Rollouts Are Outpacing Data Security Checks
Companies are adopting AI tools faster than they are testing whether their underlying data is appropriately secure, a new report from governance firm…
Malicious actors already using critical GitLab flaw, CISA and others warn
The vulnerability could let unauthenticated users access sensitive files from software-development environments.
Google’s new search redirects make links harder to check before you click
Google says its new opaque redirects tackle evolving abuse, but they also prevent users from checking a result’s destination by hovering over it.
U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited…
Growing number of data requests and complex legal landscape among key challenges for accessing electronic evidence
Over half of all criminal investigations today include a request for cross-border access to electronic evidence such as texts, e-mails or messages in…
Benchmaxxing: When the Benchmark Becomes the Target
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Benchmaxxing: When the Benchmark Becomes the Target
IT Security News Hourly Summary 2026-09-14 17h : 12 posts
12 posts published in the last hour 14:31LG Pushes Back on Claims That Its Smart TVs Are Spying on Users 14:31Human Attacker Hits Machine-Speed Exploitation of Marimo RCE 14:31A Firewall for AI Agents: Enforce Authority at Every Tool Call 14:31Perfect-10…
LG Pushes Back on Claims That Its Smart TVs Are Spying on Users
Researchers allege LG smart TVs can capture ambient audio and scan home networks, while LG disputes the findings and explains its privacy controls.
Human Attacker Hits Machine-Speed Exploitation of Marimo RCE
A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds
A Firewall for AI Agents: Enforce Authority at Every Tool Call
The right firewall for an AI agent goes between the model and every tool that can cause a side effect. Not a prompt filter, an action firewall. An AI…
Perfect-10 GitLab bug under attack days after patch lands
CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers
Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development
China’s Ministry of Foreign Affairs responded to a question about Amodei’s essay by saying that all parties should work together on AI.
Cyber Briefing: 2026.09.14
Software exploitation, vulnerabilities and trusted communication channels to execute code or obtain sensitive data, while new controls and standards are…
Bitsight connects threat intelligence and exposure monitoring across the supply chain
Bitsight access to a broad risk dataset, combining threat intelligence and continuous exposure monitoring to help teams mitigate risk across the supply…
Tencent Input Method Editor RCE Flaw
Chinese threat actors are actively exploiting a critical vulnerability in Tencent’s input method editor (IME) for Windows, allowing them to execute…
Wordfence Bug Bounty Program Monthly Report – May 2026
In May 2026, the Wordfence Bug Bounty Program received 1095 vulnerability submissions from our growing community of security researchers working to…
New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate
Concerns over the potential risks of the technology are rising as new AI models become more powerful, heightening both the potential for misuse by people…
Entrust turns cryptographic inventory data into security action
Entrust has unveiled new capabilities for its Cryptographic Security Platform (CSP) that help organizations turn Cryptographic Bill of Materials (CBOMs)…