On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
Employees using personal ChatGPT at work? Here’s what IT admins need to do
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise…
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
FBI warns of election scams using voice cloning
The FBI has issued a public service announcement warning Americans about sophisticated fraud schemes targeting the 2026 midterm elections.
When Your Ransomware Negotiator Works for the Other Side
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
IT Security News Hourly Summary 2026-10-16 16h : 27 posts
27 posts published in the last hour 13:34KR: NHIS Employee Sold Data, Victims Uninformed for Three Months 13:34ChatGPT Chrome Extension Gets Tab Access 13:34FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack 13:33Bank of America spent millions…
KR: NHIS Employee Sold Data, Victims Uninformed for Three Months
In today’s reminder of the insider threat, Kim Ji-won reports: A National Health Insurance Service (NHIS) employee was dismissed for illegally selling…
ChatGPT Chrome Extension Gets Tab Access
OpenAI has rolled out significant updates to its ChatGPT Chrome extension, enabling the AI assistant to access and analyze content from users’ open…
FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack
FBI shuts down North Korean laptop farms…
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
Bank of America has had to spend big on IT in response to an AI security audit and findings that its anti-money-laundering (AML) controls were lacking.…
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee…
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks, enabling financial fraud.…
A quantum highway just one atom high could transform superconductors
Scientists discovered that atomic steps just one atom high can guide quantum vortices through superconductors, making them move more than 1,000 times more…
Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide
A cybercrime campaign used hundreds of AI agents to target internet-facing PaperCut NG and MF print-management servers, compromising at least 440…
Microsoft Defender Releases For Linux Too
HOC Shorts | Microsoft officially expanded Microsoft Defender for Endpoint to support Linux desktops and workstations, extending enterprise-grade…
Attack on BAE-managed system disrupts US bankruptcy courts
Legal eagles still plodding along with some operations, but paper and e-notices delayed until further notice
Microsoft Defender for Linux Workstations
Microsoft has launched a public preview of Defender for Linux Workstations, bringing its enterprise endpoint security platform to Linux desktop…
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The…
NCSC Cyber Security Guidance for SMEs
The National Cyber Security Centre has released comprehensive guidance aimed at helping UK small and medium-sized businesses, charities, clubs, and…
Hackers Abuse 20,000 Cloudflare Pages Domains to Push Fake Microsoft Security Alerts
Hackers have abused more than 20,000 Cloudflare Pages domains over six months to spread fake Microsoft security alerts and steer users toward scam call…
Job application scams exploit AI spray-and-pray strategy
Threat actors are targeting job seekers with fraudulent recruitment offers, taking advantage of applicants who use AI-powered tools to submit large…
iOS 27.0.1 Untethered Jailbreak Demonstrated on iPhone 18 Pro
Security researchers from the cybersecurity firm Calif demonstrated a working untethered jailbreak for iOS 27.0.1 on Apple’s newest iPhone 18 Pro. The…
BAE Systems Cyber Incident Disrupts US Bankruptcy Courts
A cybersecurity incident at defense contractor BAE Systems has caused significant disruption to the U.S.
MDR vs EDR vs SOC: What You’re Actually Buying in 2026
MDR vs EDR vs SOC explained for 2026, covering tools, monitoring, incident response, staffing and how each option supports CMMC compliance.