The Google subsidiary, which helped a railroad and two hospitals, invited others to apply for its free scanning service.
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry…
Kothamine malware uses Tailscale’s tailcat to evade network detection
Kothamine uses a legitimate Tailscale tool to receive attackers’ commands through an encrypted connection with no malicious domain to block.
Zero-Days, AI Agents, and Identity Attacks Define Cybersecurity Week
Weekly summary of Cybersecurity Insider newsletters
Critical Roundcube Flaw Under Active Exploitation in Code Injection Attacks
A high-severity vulnerability in Roundcube Webmail, patched in May 2026, is now being actively exploited in code injection attacks, according to the…
Rogue OpenAI agent targeted Australian government site
The prime minister rebuked the company for its slow response and warned that AI poses significant risks that need to be further addressed.
LinkedIn adds new checks for fake profiles and work histories
The platform is adding new checks as AI makes profiles easier to forge. But scammers can still invent a company to recruit for.
How an OpenAI ‘agent’ hacked Australia’s Medicare and What that Means for Governments Worldwide
In June, OpenAI gave one of its AI agents a task so unremarkable it barely warranted attention: look up public data on Australian medicine spending. What…
Businesses expand AI’s cybersecurity uses as comfort with technology grows
Companies in the experimentation stage were less likely than established users to deploy advanced AI-powered defenses, a new survey found.
Which copy of that file is the real one? Dinner, off the record, in Midtown
Joe Fay chairs a Register dinner in New York on the file infrastructure nobody has got around to replacing, with nothing on the record.
IT Security News Hourly Summary 2026-09-25 17h : 8 posts
8 posts published in the last hour 14:31North Korea Suspected in $351 Million Bitget Crypto Heist 14:31Cyber Briefing: 2026.09.25 14:31ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer 14:31Quantum computing’s “dark horse” just proved it can go universal 14:02AI Q&A:…
North Korea Suspected in $351 Million Bitget Crypto Heist
Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen.
Cyber Briefing: 2026.09.25
Ransomware exploitation, phishing, exposed customer data, and failed detection rules are creating opportunities for unauthorized access, credential theft,…
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
Attackers hijacked Ukrainian websites to deliver a fake Cloudflare CAPTCHA that installs Psychedelic Stealer and steals browser and crypto credentials.…
Quantum computing’s “dark horse” just proved it can go universal
Researchers have shown that exotic quantum particles called non-Abelian anyons can perform the full range of operations needed for universal quantum…
AI Q&A: what is an Agent?
Intro I talk a lot about AI these days… and I know I am not alone. People talk a lot about “agentic AI” or “AI Agents” or simply “Agents”. During these…
Ransomware gangs exploiting critical TeamCity flaw
The U.S.
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration
IT Security News Hourly Summary 2026-09-25 16h : 15 posts
15 posts published in the last hour 13:33Party Invite Phishing Scams Target Users 13:32CenterPoint Energy breach: 7.49M records claimed stolen 13:32Two Things Every Cyber Asset Attack Surface Management (CAASM) Tool Needs to Get Right 13:32Rydox marketplace admin pleads guilty 13:32North…
Party Invite Phishing Scams Target Users
A wave of phishing attacks is targeting users through fake party invitations that mimic popular digital invitation services such as Evite and Paperless…
CenterPoint Energy breach: 7.49M records claimed stolen
CenterPoint Energy disclosed a data breach on September 14, 2025, confirming that an unauthorized third party obtained customer information through one of…
Two Things Every Cyber Asset Attack Surface Management (CAASM) Tool Needs to Get Right
Cyber Asset Attack Surface Management (CAASM) solved a significant problem. Security teams can now say with confidence what they own. But, two things…
Rydox marketplace admin pleads guilty
A citizen of Kosovo has pleaded guilty to federal charges for operating Rydox, a significant illegal online marketplace that trafficked in stolen personal…
North Korean hackers suspected in $351M crypto theft, the largest so far this year
The $351 million theft from crypto exchange Bitget is the latest in a string of high profile hacks targeting the crypto sector.