12 posts published in the last hour 05:31Microsoft Pushes Enterprises to Test Post-Quantum Certificates Before Large-Scale Migration 05:31PCI SSC calls for human approval of AI agent actions involving cardholder data 05:31Critical Sungrow Authentication Bypass Flaw Lets Hackers Take Control of…
Microsoft Pushes Enterprises to Test Post-Quantum Certificates Before Large-Scale Migration
Microsoft is urging enterprises to prepare for post-quantum authentication by testing certificate dependencies before attempting broad infrastructure…
PCI SSC calls for human approval of AI agent actions involving cardholder data
The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI…
Critical Sungrow Authentication Bypass Flaw Lets Hackers Take Control of Solar Power Plants
A critical authentication bypass vulnerability in Sungrow’s iSolarCloud management platform allowed researchers to access user and administrator accounts…
Smashing Security podcast #487: Clippy’s crypto comeback
Microsoft’s Twitter account, with its 13 million followers, was hijacked by a paperclip. There was no ransomware or data theft, just Clippy, a dodgy…
Microsoft Teams to Introduce Deepfake Detection to Identify AI-Generated Audio and Video in Meetings
Microsoft Teams will support third-party detection of synthetic audio and video, allowing organizations to identify potentially AI-generated or…
FBI Warns Chinese Hackers Use Automated Tools and Botnets to Steal Sensitive Data
The FBI and international cybersecurity agencies have warned about hackers linked to the Chinese government who use automated vulnerability scanning,…
Companies want autonomous IT operations but hesitate to let AI act alone
Ninety percent of companies want to move toward autonomous IT operations over the next two years, with agentic AI, software that plans and carries out…
Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability
Citrix has urged customers to patch a critical security flaw in NetScaler ADC and NetScaler Gateway that could allow remote code execution or cause a…
ICE Agent at NYC Shooting Has History of Alleged Violence and Illegal Arrests
Brenden Cuni, an ICE supervisor, has been accused of excessive force and tackling a pregnant woman to the ground. Several of his arrests were later found…
Anthropic Cyber Mission to Support Defenders with Tools, Research, and Resources
Anthropic launched its Anthropic Cyber Mission on October 8, 2026, to help security teams protect critical infrastructure and open-source software. The…
Formula Predicts When AI Chatbots Are at Risk of Turning Bad
Researchers from George Washington University have published a paper examining whether the time and cause of AI going rogue can be predicted.
FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers
The FBI and U.S. Justice Department have seized seven domains tied to Microscan and FishHub, two hacking tools allegedly operated by China-based Integrity…
IT Security News Hourly Summary 2026-10-09 06h : 4 posts
4 posts published in the last hour 03:31MATCHBOIL: New tricks, same old evil intentions 03:31Australian Gov’t Weighs Mandatory AI Incident Reporting 03:01How Hackers Exploit AI agents Claude Code Enterprise Network Intrusions 03:00IT Security News Hourly Summary 2026-10-09 05h : 4…
MATCHBOIL: New tricks, same old evil intentions
ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026
Australian Gov’t Weighs Mandatory AI Incident Reporting
In the wake of an agentic attack against its own Medicare systems, Australia’s government is feeling out what regulations might look like for frontier AI…
How Hackers Exploit AI agents Claude Code Enterprise Network Intrusions
HOC Shorts Adversaries are transitioning from using Large Language Models (LLMs) as passive reference tools to actively exploit…
IT Security News Hourly Summary 2026-10-09 05h : 4 posts
4 posts published in the last hour 02:31Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys (Updated) 02:01OWASP Top 10 For LLM Applications: Complete Guide 02:01Evolution of Web3 in Cloud Supply Chain Attacks 02:00IT Security News Hourly Summary…
Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys (Updated)
Dread dark web forum appears hijacked after a pinned post claimed control of the project and domain keys, while denying plans to leak user data.
OWASP Top 10 For LLM Applications: Complete Guide
By HOC Team | Updated: October 2026 | Read time: ~18 min Large Language Models (LLMs) have fundamentally…
Evolution of Web3 in Cloud Supply Chain Attacks
Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environments
IT Security News Hourly Summary 2026-10-09 04h : 4 posts
4 posts published in the last hour 01:31Shaq Got Hacked. Now He’s Pitching for a VPN 01:01AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI 01:01CVE-2026-21589: Critical Pre-Authentication File Read Affects Atlassian Data Center Products…
Shaq Got Hacked. Now He’s Pitching for a VPN
At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public about the need to “have…
AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI
AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI in Cybersecurity Host David Shipley interviews Dave Lewis of 1Password about…