18 posts published in the last hour 06:31Pricing your bad days and how to build an economic model for security decisions 06:31FBI Blames Contractor’s Missed Patch for ShinyHunters Breach 06:31Goldman Sachs Client Data Affected By EY Hack 06:31Linux Backdoors Impersonate…
Pricing your bad days and how to build an economic model for security decisions
Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He…
FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
Eduard Kovacs reports: The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees,…
Goldman Sachs Client Data Affected By EY Hack
Data on clients of Goldman Sachs caught up in hack earlier this year involving international accountancy firm EY
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly…
Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens
Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security checks. The…
Meta’s AI Agent Read 187,000 Private Messages. Now Apple Is Changing the Rules
Apple has announced plans to overhaul one of macOS’s most powerful privacy settings, citing security risks posed by AI agents that have been using it to…
‘BigDiskBuster’ Leaves Microsoft Defender Running While Blocking Updates
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.
Former NSA chief Nakasone says agency overhaul is ‘probably needed’
Paul Nakasone said the reported reorganization is likely necessary to meet faster-moving cyberthreats and competition in AI, but warned its success will…
ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach
British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…
Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities
The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers
Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use
Anthropic has released Claude Haiku 5.5, its newest small AI model. The company says it is the cheapest, fastest, and most capable small model it has ever…
Cyber Briefing: 2026.10.06
Malicious packages, critical software flaws, customer-targeted compromise, and extortion activity remain key risks, while security teams are developing…
Inside a brand deal scam targeting YouTube creators
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account
Engineer sentenced for locking over 3,000 devices on employer’s network
Sergiu Gatlan has an update on a case previously noted on this site. A former core infrastructure engineer at an industrial company headquartered in New…
Who watches the AI watching your street?
Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera…
Anthropic reconfigures its cool kids security program
Company’s Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32…
IT Security News Hourly Summary 2026-10-08 08h : 9 posts
9 posts published in the last hour 05:31LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings 05:31How AI can fix cybersecurity compliance: From dashboards to continuous execution 05:31Google’s PageBreak AI Agent Finds 500 Flaws in Its Web…
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker’s code as soon as the file is opened, security researchers have shown.…
How AI can fix cybersecurity compliance: From dashboards to continuous execution
Most compliance work goes into proving security, not improving it. That isn’t because the rules are unreasonable. Regulators, customers, and cyber…
Google’s PageBreak AI Agent Finds 500 Flaws in Its Web Apps
The situation illustrates a trend toward using AI and deterministic validation to identify flaws and exploitability, and provide a risk assessment.
PoeLLM Malware Hijacks 3,400+ Servers for Crypto Mining and Botnet Expansion
A cryptocurrency mining campaign dubbed PoeLLM has compromised more than 3,400 servers by targeting exposed AI infrastructure and other internet-facing…
South Korea Orders Financial Sector Probe After Series of Data Breaches
South Korea is gearing up to respond to a string of cyber disruptions that targeted financial institutions, with the President demanding a thorough…