14 posts published in the last hour 10:31Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm 10:31Four days to TechCrunch Disrupt: What’s next for AI and software development 10:31Unpatched AhsayCBS Vulnerabilities Exploited in the Wild 10:31Neoclouds and the enterprises that…
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was…
Four days to TechCrunch Disrupt: What’s next for AI and software development
First AI gave us code completion, predicting the lines of code, functions, and boilerplate we needed based on what we’d already typed. Then came code…
Unpatched AhsayCBS Vulnerabilities Exploited in the Wild
The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.
Neoclouds and the enterprises that need them
I’ve been tracking the rise of neoclouds in the past couple of years, and I’ll start by admitting that the numbers are genuinely staggering. Synergy…
Micron Workers In Taiwan Vote To Approve Strike Action
Vast majority of union-represented workers at Micron’s Taoyuan plant in Taiwan vote in favour of strike, amid profit-driven discontent
How Luna Moth Runs Data Extortion Like a Business
Around October 5, 2026, an anonymous onion site called “The Luna Moth Files” claimed to expose internal material from Silent Ransom Group (SRG), also…
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
Three research teams broke into Google’s Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully…
Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.
FBI disrupts Flax Typhoon hacking tools used in global cyberattacks
The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that…
UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group
The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group
GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site’s .onion…
Anthropic offers free AI security scans to open-source maintainers
Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software.…
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code…
IT Security News Hourly Summary 2026-10-09 12h : 13 posts
13 posts published in the last hour 09:31Meta Deploys AI to Catch Facebook Ads Linked to Child Exploitation 09:31Goldman Sachs Client Data Affected By EY Hack 09:02Anthropic reconfigures its cool kids security program 09:02AI-Driven tool ARTEX used in attacks against…
Meta Deploys AI to Catch Facebook Ads Linked to Child Exploitation
Meta is using AI to detect Facebook ads that direct users to child exploitation content, while testing its safety systems for weaknesses and evasion…
Goldman Sachs Client Data Affected By EY Hack
Data on clients of Goldman Sachs caught up in hack earlier this year involving international accountancy firm EY
Anthropic reconfigures its cool kids security program
Company’s Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club
AI-Driven tool ARTEX used in attacks against South Korean Banks
CrowdStrike analyzes open directories left by an attacker who used the ARTEX AI pentest tool and LLMs to breach South Korean financial firms. CrowdStrike…
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and…
Inside a brand deal scam targeting YouTube creators
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account
Engineer sentenced for locking over 3,000 devices on employer’s network
Sergiu Gatlan has an update on a case previously noted on this site. A former core infrastructure engineer at an industrial company headquartered in New…
Product showcase: SimpleLogin keeps your email address private with aliases
SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and…
US Disrupts Chinese State-Sponsored Hacking Tools
Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure.