A campaign in July 2026 using a trojanized Terraform provider to deploy cross-platform malware against developer environments. The operation delivers…
AI Training Critical as Governance Challenges Grow
As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI…
12 Best Software Supply Chain Security Tools Compared (2026): Features & Pricing
Chainguard leads the eliminate-the-problem lane with hardened zero-CVE images, Sonatype the block-at-ingestion lane, and Scribe/Lineaje the…
IT Security News Hourly Summary 2026-10-09 11h : 10 posts
10 posts published in the last hour 08:31Hackers Target Hikvision Cameras in Ukraine With RCE Exploits Amid Russian Airstrikes 08:31Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security 08:31FBI Disrupts Major Scam Centers in Ghana,…
Hackers Target Hikvision Cameras in Ukraine With RCE Exploits Amid Russian Airstrikes
Hackers targeted Hikvision surveillance devices in Ukraine during a concentrated surge of remote command execution attempts that coincided with Russian…
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
FBI Disrupts Major Scam Centers in Ghana, 130+ Detained and 300+ Devices Seized
The FBI has announced another disruption of scam centers in Ghana as part of Operation Blackout, resulting in the arrest or detention of over 130…
UK ICO Secures Data Protection Commitments From OpenAI, Google, Microsoft, and Seven Other AI Developers
The UK data protection regulator, the ICO, says ten of the largest AI developers, including OpenAI, Google, and Microsoft, have changed how they handle…
11 Best API Security Tools Compared (2026): Features & Pricing
Salt Security and Traceable anchor dedicated discovery-plus-runtime defense, 42Crunch owns design-time contract security, and the edge giants (Akamai with…
European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
Warden Stealer Malware Targets Claude, Codex, Grok and Cursor to Steal AI Agent Data
Warden Stealer as a rapidly growing malware-as-a-service operation targeting data stored by AI assistants and coding agents, including Claude, Codex,…
Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push
Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner’s Office
ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130,…
IT Security News Hourly Summary 2026-10-09 10h : 17 posts
17 posts published in the last hour 07:32Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead 07:32CyrusOne – 373,460 breached accounts 07:31Top level domain theft, Yandex attacked, Cisco Nexus flaws 07:31React Server Components Flaw Lets Attackers Freeze Next.js…
Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead
Feds claim he charged clients more than ransoms, paid up, pocketed the difference
CyrusOne – 373,460 breached accounts
In August 2026, data centre operator CyrusOne was the target of a ShinyHunters “pay or leak” extortion attempt . The group subsequently published data…
Top level domain theft, Yandex attacked, Cisco Nexus flaws
Attackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major…
React Server Components Flaw Lets Attackers Freeze Next.js Servers With a Single POST Request
A high-severity denial-of-service flaw (CVE-2026-23870) in React Server Components can allow a remote attacker to freeze vulnerable Next.js servers by…
ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128,…
Malicious PDF Reader With 10,000+ Installs on Google Play Delivers Anatsa Banking Trojan
A malicious Android PDF reader distributed through Google Play has recorded more than 10,000 installs while serving as an installer for the Anatsa banking…
Italian Foreign Ministry Website Hit By Disruption Attempt
Distributed denial of service attack attempts to take foreign ministry’s website offline, in incident linked to Russian group
Leaked Chat Logs Show Silent Ransomware Extorted Over $200,000,000 in 6 Months Without Encrypting Data
Alleged internal chats from Silent Ransom Group suggest the criminals collected $206.95 million from 27 firms in roughly six months without encrypting…
Anthropic Launches Cyber Mission to Protect Critical Infrastructure and Open-Source Software With Claude AI
Anthropic launched its Cyber Mission, a long-term initiative aimed at helping defenders secure critical infrastructure and open-source software. This…
Ransomware recovery CEO charged over secret ransom payments
The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers…