High time to stop kicking the security can down the road, investor tells The Reg
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
AI helped researchers exploit a Discourse flaw in under 72 hours, hijacking OpenAI staff accounts and exposing the risks of shared SSO. Three researchers…
Google Gemini AI Hacked 3 Real Companies After Cybersecurity Test Exposed It to Internet
Google has confirmed that its Gemini artificial intelligence model accidentally accessed protected systems belonging to three real companies during a…
TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories
CrowdSec has disclosed that attackers copied about 170 private GitHub repositories after a former employee’s account was compromised through May’s…
IT Security News Hourly Summary 2026-09-19 14h : 3 posts
3 posts published in the last hour 11:31SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE 11:31Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening 11:31Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an…
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
AI labs are toying with an industry-wide pact to slow development. Meanwhile, widely available AI chatbots are already helping uncover a tidal wave of…
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several…
Google Gemini AI Hacked 3 Real Companies during a Cybersecurity Test
Google has confirmed that its Gemini artificial intelligence model accessed protected systems belonging to three companies during a cybersecurity…
IT Security News Hourly Summary 2026-09-19 12h : 5 posts
5 posts published in the last hour 09:316 Best VPN Services (2026), Tested and Reviewed 09:31Drug trafficking investigation leads to some of the world’s biggest underground bankers 09:31North Korean WaterPlum Hackers Target IT Professionals With Fake Job Interviews to Steal…
6 Best VPN Services (2026), Tested and Reviewed
Every VPN says it’s the best, but only some of them are telling the truth.
Drug trafficking investigation leads to some of the world’s biggest underground bankers
The investigation, led by the Spanish National Police (Policía Nacional) and supported by Europol, has resulted in the arrest of 21 suspects for offences…
North Korean WaterPlum Hackers Target IT Professionals With Fake Job Interviews to Steal Crypto
North Korean threat actors, known as WaterPlum (also referred to as Contagious Interview), have infected at least 30,000 devices in over 100 countries by…
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is…
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Google’s Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a…
AI-Powered RatHat Android Trojan Steals Bank Credentials, PINs and MFA Codes
Researchers have identified a new Android banking Trojan called RatHat that utilizes artificial intelligence to automate device compromise and steal…
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
An attacker copied about 170 of CrowdSec’s private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on…
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited…
PowerShell Malware Abuses Registry and DNS TXT Records to Deploy XMRig Crypto Miner
A sophisticated cryptomining campaign is employing multiple layers of obfuscation to conceal malicious PowerShell payloads and ultimately deploy an…
Click2Shell WordPress Flaw Lets Attackers Gain RCE With a Single Malicious Link
WordPress administrators are being urged to update after researchers disclosed Click2Shell, an exploit chain that can turn one malicious link into remote…
Thousands of horses caught up in Europe-wide trafficking scheme
Europol has supported a major operation against a criminal network suspected of trafficking horses across Europe using falsified documents and manipulated…
‘Nudify’ apps: What to do if someone makes a fake nude of you
Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images
BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers
A new attack technique dubbed “BragJack” allows a malicious browser extension to seize trusted communication channels used by AI assistants in Chrome,…
Flock Offers Employees Buyouts as Customers Flee
As dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program, WIRED has learned.