Every function in a security operations center, from alert triage to incident response, depends on how well threats are monitored. Yet many SOCs and…
Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks
The FBI and Secret Service warned Fortinet users that FortiBleed, uncovered this summer, is a continuing threat.
AI Spam Surge Forces Google to Pause Open Source Bug Bounty Program
OSS VRP (Open Source Software Vulnerability Rewards Program) has temporarily been suspended after a sharp increase in automated reports that were found to…
IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
The tech giant’s announcement underscores the insufficiency of companies’ existing software supply-chain security practices.
AppViewX targets shadow AI risks with agent discovery and runtime enforcement
AppViewX has expanded capabilities for Agent Identity Security, a solution enabling enterprises to discover every agent, whether sanctioned or shadow;…
Critical Medical Devices Unable to Support PQC Transition
Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cryptography
Hack The Box launches AI Range Enterprise Edition
Hack The Box has launched AI Range Enterprise Edition, a new platform designed to help enterprise security teams test and evaluate AI security agents…
Microsoft extends the Outlook naughty step with two more file types
You didn’t really want to be sending around .msix and .msixbundle files, did you?
Self-described “cybersecurity engineer” arrested after computer case reopened
Natalie Dreier reports: A Florida man who calls himself a “cybersecurity engineer” on TikTok and Twitch was arrested after police reopened an…
Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor…
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly…
ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach
British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…
FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees.
‘BigDiskBuster’ Leaves Microsoft Defender Running While Blocking Updates
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.
Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks
A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions, turning an AI coding…
Former Infrastructure Engineer Sentenced for Sabotaging Employer’s Windows Network
A former infrastructure engineer has been sentenced to 32 months in federal prison for sabotaging his employer’s Windows network and demanding a…
Former NSA chief Nakasone says agency overhaul is ‘probably needed’
Paul Nakasone said the reported reorganization is likely necessary to meet faster-moving cyberthreats and competition in AI, but warned its success will…
Meta’s AI Agent Read 187,000 Private Messages. Now Apple Is Changing the Rules
Apple has announced plans to overhaul one of macOS’s most powerful privacy settings, citing security risks posed by AI agents that have been using it to…
New Relic adds terminal-based investigation and recovery checks with Ground Truth CLI
New Relic has announced New Relic Ground Truth CLI augmented with New Relic Autopilot API, bringing headless observability straight to developers and AI…
Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities
The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers
Cyber Briefing: 2026.10.06
Malicious packages, critical software flaws, customer-targeted compromise, and extortion activity remain key risks, while security teams are developing…
Anthropic reconfigures its cool kids security program
Company’s Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club
Engineer sentenced for locking over 3,000 devices on employer’s network
Sergiu Gatlan has an update on a case previously noted on this site. A former core infrastructure engineer at an industrial company headquartered in New…
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32…