Campaigners protest massive data centre project over environmental impacts, after more than 42,000 people sign petition
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active…
JADEPUFFER Evolves Agentic Ransomware to Target AI Models and Training Data
JADEPUFFER, the agentic threat actor first linked to an autonomous ransomware operation against exposed Langflow infrastructure, has evolved its tooling…
Two-week Europol task force identifies 18 sexually abused children worldwide
The Victim Identification Task Force brings together experts from across the globe to combat child sexual exploitation. During the VIDTF, specialists…
CISA Warns Attackers Are Exploiting Acronis Backup Flaw on Linux Servers
CISA added CVE-2026-87886 to its KEV catalog after confirmed exploitation of an Acronis Backup flaw affecting Linux hosting environments.
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability,…
23 Million User Records Compromised in Gyazo Data Breach
Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access.
IT Security News Hourly Summary 2026-09-18 14h : 15 posts
15 posts published in the last hour 11:31Mythos has made 2026 patching hell. It might make 2027 a breeze 11:31Are AIs Still Struggling with CAPTCHAs? 11:31Health Group Issues Alerts Over 2025 Data Breach 11:31Apple Security Advisory – Patches 100+ Vulnerabilities…
Mythos has made 2026 patching hell. It might make 2027 a breeze
Gartner sees huge amounts of technical debt paid down, and better scanning that could make software safer sooner
Are AIs Still Struggling with CAPTCHAs?
Anthropic’s recent security-incident document contains a bit about how CAPTCHAs are still frustrating Claude. In the transcript, the Claude model that is…
Health Group Issues Alerts Over 2025 Data Breach
HCRG Care Group warns patients over theft of their data by Medusa ransomware hackers, 18 months after incident occurred
Apple Security Advisory – Patches 100+ Vulnerabilities Across iOS, macOS and Other Devices
HOC Shorts Apple security advisory has releases cataloged on its official security portal. The major updates address over…
RatHat Turns Android Accessibility Into an Attack Weapon
RatHat combines AI-driven screen control, Android debugging abuse and advanced credential theft to give attackers deep control of infected phones. RatHat…
ISC Stormcast For Wednesday, September 16th, 2026 https://isc.sans.edu/podcastdetail/10096, (Wed, Sep 16th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, September 16th, 2026 https://isc.sans.edu/podcastdetail/10096,…
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer…
Microsoft Patches 18 Vulnerabilities in AI, Cloud Products
Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.
Google Chrome 153 Update Fixes 16 Security Flaws, Including Two Critical Vulnerabilities
Google has released Chrome version 153 to the Stable desktop channel, addressing 16 security vulnerabilities, including two critical-severity flaws…
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs andrew.gertz@t… Wed, 09/16/2026 – 01:04 In July 2026, an OpenAI research model…
CrowdStrike Announces Agentic Identity Provider
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Announces Agentic Identity Provider
Revolut hands customer data to criminals, Microsoft patches break Remote Desktop, Conti developer gets four years
Revolut Fooled by Fake Govt Data Requests, Microsoft RDP Patch Fallout, and Conti Dev Sentenced David Shipley covers multiple cybersecurity headlines:…
CrowdStrike Delivers the Next Evolution of the Agentic SOC
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Delivers the Next Evolution of the Agentic SOC
IT Security News Hourly Summary 2026-09-18 13h : 23 posts
23 posts published in the last hour 10:32Filigran Backs Security Serious Unsung Heroes Awards as New Sponsor 10:32NightmareStresser DDoS Service Disrupted in International Operation 10:32A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity 10:32Bots with good…
Filigran Backs Security Serious Unsung Heroes Awards as New Sponsor
Nominations are open for the 2026 Security Serious Unsung Heroes Awards, celebrating the people working behind the scenes to make the UK safer and better…