By his own admission, David Robinson is “something of a cliché”: an employee at a leading AI company who issues a dire warning while resigning from their…
MI5 warns UK academics their research may have helped Chinese spies
Institutions told to trace who is really financing their work or risk falling foul of national security law
Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation
Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges
China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders
TA419 posed as AI policymakers and economists to phish US AI policy experts’ Microsoft 365 accounts
Fake Zoom installer hides macOS backdoor CloudSyncD
Jamf Threat Labs details CloudSyncD, a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters. Jamf Threat…
RMM abuse behind 45% of endpoint incidents as Huntress publishes inaugural Tragic Quadrant
Huntress has published the Huntress Tragic Quadrant, a ranking of the cyber tactics its Security Operations Center (SOC) is detecting and shutting down…
Microsoft Pushes New Exchange V2 Update After Discovering New Security Flaw
Microsoft has released September 2026 V2 security updates to fix an Exchange Server flaw that lets authenticated attackers access other users’ mailboxes…
Threats Making WAVs – Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report…
Seven arrests in Brazil during crackdown on South America-Europe cocaine pipeline
Europol has supported law enforcement agencies from Italy and Brazil in dismantling a major drug trafficking and money laundering network linked to the…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
IT Security News Hourly Summary 2026-10-03 18h : 12 posts
12 posts published in the last hour 15:31Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware 15:31Mayor Confirms Ransomware Incident Disrupted Mississippi City Systems 15:31Anthropic’s super bug-hunting model Mythos is hardcore good at math, as latest vuln under…
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new,…
Mayor Confirms Ransomware Incident Disrupted Mississippi City Systems
The city of Vicksburg, Mississippi, has taken its computer systems offline after a ransomware attack disrupted several city functions. Mayor Willis…
Anthropic’s super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows
Exploitation attempts came from China-hosted IP, VulnCheck researcher says
Your Cloud Diagram Is Already Out of Date: An Operating Model for Continuous Security Architecture
The Diagram-to-Deployment Gap Cloud security architecture often begins with a strong design, account boundaries are defined, identity federation and…
LLM Pen Testing: Harness Matters More Than Model
Ridge Security released the first public benchmark comparing eight leading large language models in autonomous penetration testing workflows, revealing…
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on…
CISO thought he had a ‘r3@lg00dp@$$w0rd’ but forgot to patch
Replacing letters with symbols still doesn’t make it good.
YARA-X 1.21.0 Release, (Sat, Oct 3rd)
YARA-X&#;x26;#;39;s 1.21.0 release brings 5 improvements and 4 bugfixes.
Pentagon breach exposes 2.76M SSNs, military records
The Pentagon has confirmed a major data breach at the Defense Manpower Data Center (DMDC) that exposed sensitive personal information belonging to…
CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer
CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor
Danish university DTU breach exposes data of up to 200,000 people
The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and…
IT Security News Hourly Summary 2026-10-03 17h : 5 posts
5 posts published in the last hour 14:31DeepKeep’s AI Lens flags coding agent data leaks and routes destructive commands for approval 14:31Microsoft enables Windows settings backup by default 14:0116-year-old suspected leader of KillSec ransomware group arrested 14:01Treasury Blacklists ATM Malware…
DeepKeep’s AI Lens flags coding agent data leaks and routes destructive commands for approval
DeepKeep has announced AI Lens for Developers, a new extension to the company’s AI usage control and runtime protection modules to secure software…