HCRG Care Group warns patients over theft of their data by Medusa ransomware hackers, 18 months after incident occurred
KREMLIN Banking Malware Bypasses Chrome Security to Steal Banking Sessions
A Brazilian banking malware operation, dubbed KREMLIN, that can silently implant malicious extensions in Google Chrome and Microsoft Edge, bypassing…
DeepZero: Open-source hunting for vulnerable Windows drivers
DeepZero is an open-source engine that automates the search for exploitable Windows kernel drivers. You point it at a folder of binaries and it parses…
Mythos has made 2026 patching hell. It might make 2027 a breeze
Gartner sees huge amounts of technical debt paid down, and better scanning that could make software safer sooner
Apple Releases iOS 27 Security Update to Fix Over 120 Vulnerabilities
Apple has released iOS 27 and iPadOS 27, delivering one of its largest mobile security update batches to date. The release addresses approximately 126…
IT Security News Hourly Summary 2026-09-16 08h : 7 posts
7 posts published in the last hour 05:31Google Chrome 153 Released With Fixes for 42 Security Vulnerabilities 05:31Apple Security Advisory – Patches 100+ Vulnerabilities Across iOS, macOS and Other Devices 05:31OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in…
Google Chrome 153 Released With Fixes for 42 Security Vulnerabilities
Google has released Chrome version 153 to the Stable channel for desktop, addressing 42 security vulnerabilities, including three critical-severity flaws…
Apple Security Advisory – Patches 100+ Vulnerabilities Across iOS, macOS and Other Devices
HOC Shorts Apple security advisory has releases cataloged on its official security portal. The major updates address over…
OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in GemStuffer Campaign
3,022 RubyGems packages associated with the GemStuffer campaign, expanding the known scope of an incident that researchers have linked to an alleged…
The modern attack chain: Rethinking Google Workspace security in the age of AI
Over the past two months, I’ve written about the Vercel breach and the Composio breach separately. Both offer lessons to learn on their own. But reading…
Luciferus Uncensored AI Service Lets Cybercriminals Generate RAT Malware
Cybercriminals are promoting a new “uncensored” artificial intelligence service called Luciferus that allegedly generates malicious code, including…
MSPs say nearly half their customers rely on them for CISO services
MSPs estimate that 46% of their customers, on average, look to them to act as CISOs, according to Sophos. Most of those providers do that job without the…
CrowdStrike Delivers the Next Evolution of the Agentic SOC
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Delivers the Next Evolution of the Agentic SOC
Google Chrome 153 Update Fixes 42 Security Flaws, Including 3 Critical Ones
Google has released an important Chrome 153 security update that fixes 42 vulnerabilities across the browser, including three bugs rated Critical. The…
ISC Stormcast For Wednesday, September 16th, 2026 https://isc.sans.edu/podcastdetail/10096, (Wed, Sep 16th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, September 16th, 2026 https://isc.sans.edu/podcastdetail/10096,…
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs andrew.gertz@t… Wed, 09/16/2026 – 01:04 Data Breach Data Security Encryption…
Revolut hands customer data to criminals, Microsoft patches break Remote Desktop, Conti developer gets four years
Revolut Fooled by Fake Govt Data Requests, Microsoft RDP Patch Fallout, and Conti Dev Sentenced David Shipley covers multiple cybersecurity headlines:…
OpenAI Reportedly Pays Contractors $50+ an Hour to Review ChatGPT Chats
Leaked materials suggest OpenAI contractors review some ChatGPT conversations, raising new questions about human review, training settings, and user…
IT Security News Hourly Summary 2026-09-16 01h : 6 posts
6 posts published in the last hour 22:31CrowdStrike Announces Agentic Identity Provider 22:31AWS STS simplifies session token size limits and adds session token size monitoring 22:02CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks 22:02U.S. CISA adds Cisco Secure…
CrowdStrike Announces Agentic Identity Provider
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Announces Agentic Identity Provider
AWS STS simplifies session token size limits and adds session token size monitoring
AWS Security Token Service (AWS STS) has simplified session token size limits, giving you more room for your session policies and session tags. STS has…
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog. The U.S.…
The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
September Patch Tuesday part 2?