A malicious file could trigger the vulnerability. Apple says it may already have been used against iPhone users.
IT Security News Hourly Summary 2026-10-01 20h : 16 posts
16 posts published in the last hour 17:31Fake xStocks, Pendle, and other sites bait crypto users with rewards votes 17:31EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank 17:31OperTraitors: How Kubernetes Operators Betray Your Security Posture…
Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
More than 70 fake crypto sites promise extra rewards for casting a vote, then prompt visitors to connect their wallets.
EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank
RUSI wants procurement rethink that could put US suppliers under scrutiny too
OperTraitors: How Kubernetes Operators Betray Your Security Posture
We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities.
Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains
Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures.
CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
Cyber Resilience Act Single Reporting Platform (CRA-SRP) obligations for software companies selling globally
I wrote here about the CRA and the deployment plan: https://www.sorinmustaca.com/eu-cyber-resilience-act-cra-overview/ We are past September 11th and the…
Japanese Railway Operators Hit with Weekend Cyber Attacks
Tokyo Metro and Keio have revealed separate cyber-attacks
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from…
Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing
Your invite to a fake AI policy advisory committee has strings attached
Hackers Built a Windows Backdoor Whose Entire C2 Lives Inside Microsoft 365
Hackers have built a Windows backdoor that uses Microsoft 365 for all its native command and control communications. Named Antino, the malware turns…
California governor vetoes bill banning use of ‘pervert glasses’ to secretly record people
The California state bill would have penalized people who secretly recorded people in public with wearables equipped with cameras and microphones.
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. “It is true that this…
16-year-old Alleged KillSec Ransomware Group Leader Arrested, Servers Dismantled
Authorities have identified a 16-year-old as the suspected main operator of the KillSec ransomware group after an international law-enforcement operation…
ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system…
Fake Zoom Installer Tricks Mac Users Into Installing New CloudSyncD Backdoor
A fake Zoom installer is tricking Mac users into handing over their login passwords and launching CloudSyncD, a newly identified backdoor. The malware…
IT Security News Hourly Summary 2026-10-01 19h : 12 posts
12 posts published in the last hour 16:31Humans are reviewing Copilot users’ bizarre and abusive image-editing requests 16:31Kiteworks Urges Customers to Restart Systems After Shutdown Notice 16:31The 6 Best VPN for Streaming Compared: Key Features + Pricing 16:31Securing the keys…
Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
Copilot users asked for upskirt images and sexualized edits of people in uploaded photos. Human contractors were asked to judge the results.
Kiteworks Urges Customers to Restart Systems After Shutdown Notice
Kiteworks has lifted a temporary shutdown recommendation which was issued on the back of federal intelligence
The 6 Best VPN for Streaming Compared: Key Features + Pricing
Key takeaways: The right VPN for streaming depends on what you need most, such as access to regional content or support for multiple devices. VPNs…
Securing the keys to the kingdom: Announcing Executive Threat Detection
This new proactive service joins the suite of retainer offerings to provide dedicated, intelligence-led hunting specifically for your organization’s most…
New CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal Passwords
CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers.
September 2026 Cyber Attacks Timeline
A live, continuously updated timeline of the cyber attacks reported in September 2026 — tracking threat actors, attack techniques, targeted sectors and…