Russian state-linked threat actor Star Blizzard has expanded its cyberespionage operations in 2026 with a phishing and malware-delivery technique tracked…
IT Security News Hourly Summary 2026-09-30 16h : 14 posts
14 posts published in the last hour 13:31Signal adds encrypted backups, cross-platform restore 13:31AI Coding Agents Leak 13K Internal Images on GitHub 13:31EU CRA requirements for containers and Kubernetes 13:31WatchGuard Patches Critical Fireware OS Code Injection Vulnerability 13:31US CSuite Phishing…
Signal adds encrypted backups, cross-platform restore
Signal has finished rolling out cross-platform encrypted backup capabilities with iOS version 8.30, enabling users to transfer their complete message…
AI Coding Agents Leak 13K Internal Images on GitHub
Security firm Glow has uncovered a widespread data exposure incident involving AI coding assistants that inadvertently published thousands of sensitive…
EU CRA requirements for containers and Kubernetes
The European Union’s Cyber Resilience Act (CRA), formally designated as regulation EU 2024/2847, entered its initial phase on December 10, 2024,…
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability
WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS.
US CSuite Phishing Campaign Steals M365 Sessions
Security researchers at ANY.RUN have identified an active phishing campaign targeting C-suite executives at U.S.
PaperPhone Cluster Shows How One Bot Operator Can Look Like Thousands of Mobile Users
A large-scale scraping cluster dubbed PaperPhone, exposing how one operator can manufacture the appearance of tens of thousands of legitimate mobile users…
Know Your Enemy: Browser-Based Attack Techniques in 2026
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a…
CyberASAP Celebrates 10th Anniversary with Special Event Exploring Future of UK Cyber Security Innovation
In 2026, the Cyber Security Academic Startup Accelerator Programme (CyberASAP), which is funded by the UK Government’s Department for Digital, Culture,…
Trump, Six AI Giants Sign ‘Super Intelligence’ Safety Accord
Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight
Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks
Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772.
Don’t Make It Easy For Them: Cybersecurity Awareness Month 2026
Don’t Make It Easy For Them: Cybersecurity Awareness Month 2026 lee.potok@thal… Wed, 09/30/2026 – 08:29 Cybersecurity Awareness Month 2026 highlights…
Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)
“Advanced and suspected state-sponsored threat actors” are likely to be behind the initial targeted intrusions that leveraged CVE-2026-88772, one of the…
Docker CopyEscape CVE-2026-17106 Lets Malicious Containers Overwrite Host Files
A critical Docker vulnerability tracked as CVE-2026-17106, also known as CopyEscape, could allow a malicious container to overwrite files on the host…
IT Security News Hourly Summary 2026-09-30 15h : 13 posts
13 posts published in the last hour 12:31Attackers Target Developer Credentials to Expand Supply Chain Intrusions Beyond Source Code 12:31AI Boosts SOC Analyst Capacity but Limits Skill Development 12:31Claude Compliance API Lets Security Teams Monitor Chats, Files and Agent Activity…
Attackers Target Developer Credentials to Expand Supply Chain Intrusions Beyond Source Code
Software supply chain attacks are increasingly evolving into cloud identity breaches, as attackers weaponize trusted packages to steal credentials from…
AI Boosts SOC Analyst Capacity but Limits Skill Development
Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer
Claude Compliance API Lets Security Teams Monitor Chats, Files and Agent Activity
Anthropic has enhanced enterprise security visibility for its AI assistant, Claude, with the Compliance API. This feature lets organizations extract data…
Chrome, Firefox Updates Patch Over 100 Vulnerabilities
Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox.
Critical MikroTik RouterOS Vulnerability Exposes Devices to Remote Code Execution
A critical vulnerability in MikroTik RouterOS could allow unauthenticated remote attackers to execute code on vulnerable devices or trigger a…
AI coding agents leaked 13,000 internal company screenshots to public GitHub repos
When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it,…
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company…
Google Chrome 154 Update Fixes 32 Security Flaws Including Critical ANGLE Bug
Google has released Chrome version 154 for desktop platforms, addressing 32 security vulnerabilities, including a critical buffer overflow flaw in the…