Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.
Former NSA chief Nakasone says agency overhaul is ‘probably needed’
Paul Nakasone said the reported reorganization is likely necessary to meet faster-moving cyberthreats and competition in AI, but warned its success will…
ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach
British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…
Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities
The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers
Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use
Anthropic has released Claude Haiku 5.5, its newest small AI model. The company says it is the cheapest, fastest, and most capable small model it has ever…
Cyber Briefing: 2026.10.06
Malicious packages, critical software flaws, customer-targeted compromise, and extortion activity remain key risks, while security teams are developing…
Inside a brand deal scam targeting YouTube creators
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account
Engineer sentenced for locking over 3,000 devices on employer’s network
Sergiu Gatlan has an update on a case previously noted on this site. A former core infrastructure engineer at an industrial company headquartered in New…
Who watches the AI watching your street?
Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera…
Anthropic reconfigures its cool kids security program
Company’s Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32…
IT Security News Hourly Summary 2026-10-08 08h : 9 posts
9 posts published in the last hour 05:31LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings 05:31How AI can fix cybersecurity compliance: From dashboards to continuous execution 05:31Google’s PageBreak AI Agent Finds 500 Flaws in Its Web…
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker’s code as soon as the file is opened, security researchers have shown.…
How AI can fix cybersecurity compliance: From dashboards to continuous execution
Most compliance work goes into proving security, not improving it. That isn’t because the rules are unreasonable. Regulators, customers, and cyber…
Google’s PageBreak AI Agent Finds 500 Flaws in Its Web Apps
The situation illustrates a trend toward using AI and deterministic validation to identify flaws and exploitability, and provide a risk assessment.
PoeLLM Malware Hijacks 3,400+ Servers for Crypto Mining and Botnet Expansion
A cryptocurrency mining campaign dubbed PoeLLM has compromised more than 3,400 servers by targeting exposed AI infrastructure and other internet-facing…
South Korea Orders Financial Sector Probe After Series of Data Breaches
South Korea is gearing up to respond to a string of cyber disruptions that targeted financial institutions, with the President demanding a thorough…
Malicious npm Packages Steal Browser Passwords, Discord Tokens and Crypto Wallets.
MALFEX, a persistent npm supply-chain campaign distributing Windows malware through eight malicious packages. Linked to an apparent single operator active…
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
Torrance, Californina, 6th October 2026, CyberNewswire
The people who know passkeys best are still typing passwords
Yubico and Okta asked 1,890 technology and security professionals across nine countries how they sign in to work accounts. The most common answer was a…
IT Security News Hourly Summary 2026-10-08 07h : 5 posts
5 posts published in the last hour 04:31U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research 04:31Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws 04:31Elastic Fixes 14 Security Flaws Including One…
U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research
The U.S. Department of State is offering up to $10 million for information on Zhang Yu, a Chinese national accused of helping hackers target American…
Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
IBM and Red Hat have found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through Lightwell, their program for…
Elastic Fixes 14 Security Flaws Including One That Lets Attackers Intercept Other Users’ Data
Elastic published 14 security advisories covering Elasticsearch, Kibana, and Elastic Agent/Endpoint, including a high-severity Kibana flaw that lets…