The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was…
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities.…
Hack The Box launches AI Range Enterprise Edition
Hack The Box has launched AI Range Enterprise Edition, a new platform designed to help enterprise security teams test and evaluate AI security agents…
Self-described “cybersecurity engineer” arrested after computer case reopened
Natalie Dreier reports: A Florida man who calls himself a “cybersecurity engineer” on TikTok and Twitch was arrested after police reopened an…
AI Spam Surge Forces Google to Pause Open Source Bug Bounty Program
OSS VRP (Open Source Software Vulnerability Rewards Program) has temporarily been suspended after a sharp increase in automated reports that were found to…
IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
The tech giant’s announcement underscores the insufficiency of companies’ existing software supply chain security practices.
Micron Workers In Taiwan Vote To Approve Strike Action
Vast majority of union-represented workers at Micron’s Taoyuan plant in Taiwan vote in favour of strike, amid profit-driven discontent
Critical Medical Devices Unable to Support PQC Transition
Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cryptography
IT Security News Hourly Summary 2026-10-08 09h : 18 posts
18 posts published in the last hour 06:31Pricing your bad days and how to build an economic model for security decisions 06:31FBI Blames Contractor’s Missed Patch for ShinyHunters Breach 06:31Goldman Sachs Client Data Affected By EY Hack 06:31Linux Backdoors Impersonate…
Pricing your bad days and how to build an economic model for security decisions
Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He…
FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
Eduard Kovacs reports: The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees,…
Goldman Sachs Client Data Affected By EY Hack
Data on clients of Goldman Sachs caught up in hack earlier this year involving international accountancy firm EY
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly…
Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens
Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security checks. The…
Meta’s AI Agent Read 187,000 Private Messages. Now Apple Is Changing the Rules
Apple has announced plans to overhaul one of macOS’s most powerful privacy settings, citing security risks posed by AI agents that have been using it to…
‘BigDiskBuster’ Leaves Microsoft Defender Running While Blocking Updates
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.
Former NSA chief Nakasone says agency overhaul is ‘probably needed’
Paul Nakasone said the reported reorganization is likely necessary to meet faster-moving cyberthreats and competition in AI, but warned its success will…
ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach
British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…
Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities
The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers
Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use
Anthropic has released Claude Haiku 5.5, its newest small AI model. The company says it is the cheapest, fastest, and most capable small model it has ever…
Cyber Briefing: 2026.10.06
Malicious packages, critical software flaws, customer-targeted compromise, and extortion activity remain key risks, while security teams are developing…
Inside a brand deal scam targeting YouTube creators
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account
Engineer sentenced for locking over 3,000 devices on employer’s network
Sergiu Gatlan has an update on a case previously noted on this site. A former core infrastructure engineer at an industrial company headquartered in New…
Who watches the AI watching your street?
Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera…