Microsoft’s account on X was hacked and used to promote a cryptocurrency token, turning the technology company’s 13-million-follower social media presence…
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
CloudSyncD MacOS Backdoor Used Fake Zoom Installer to Steal Passwords
Cybersecurity researchers have identified a new macOS backdoor called CloudSyncD that uses a fake Zoom installer to trick users into providing their…
Star Blizzard APT Uses RedFlick Chain
Russian state-sponsored threat actor Star Blizzard has adopted a new infection technique dubbed RedFlick to deploy the CosmicPulse backdoor in recent…
Electrons slow to a crawl in a strange new quantum state
Scientists at the University of Chicago have uncovered a surprising quantum state in the layered magnetic material Fe5GeTe2, where huge numbers of…
Rethinking automotive cyber risk for the age of accelerated vulnerability discovery
By Tamás Pentz, Head of Threat Intelligence, PCA Cyber Security Automotive cybersecurity has traditionally focused on putting controls into vehicles that…
Scientists just pushed superconductors beyond their usual current limit
Ultrashort electrical pulses allowed scientists to push superconductors closer than ever to the point where their electron pairs actually break apart. The…
IT Security News Hourly Summary 2026-10-03 15h : 6 posts
6 posts published in the last hour 12:31Muse Creates Detailed Profiles of All Your Friends and Family 12:01Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days 12:01doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures 12:01How Financial Services Companies Can…
Muse Creates Detailed Profiles of All Your Friends and Family
Millions have downloaded Meta’s AI agent Muse. But getting it to do your bidding comes with privacy costs.
Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days
Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root…
doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures
doxx.net’s new ADN platform prevents agentic misadventure while the agent is operating under the user’s authority.
How Financial Services Companies Can Modernize Their Software Supply Chain
Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities.…
CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed
GitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape a prompt sandbox and execute commands on self-hosted gateways. GitLab…
Fortra Patches Critical Vulnerabilities in BoKS
The bugs could lead to authentication bypass, shell command execution, and memory corruption.
The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
Featuring: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital…
Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950
Apple patched a CoreGraphics zero-day that may have been exploited in targeted attacks. A public PoC for the flaw is now available. Apple patched a…
Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel
Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor and Microsoft 365 as cover to spy on Asian governments. Cisco Talos has been…
Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices
A newly identified IoT botnet, Cling, disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to…
IT Security News Hourly Summary 2026-10-03 10h : 3 posts
3 posts published in the last hour 07:31England’s schools are getting better at mopping up cyber incidents 07:01OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates 07:00IT Security News Hourly Summary 2026-10-03 09h : 9 posts
England’s schools are getting better at mopping up cyber incidents
Two-thirds report immediate recovery, although teachers remain divided over whose job security is
OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates
OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from…
IT Security News Hourly Summary 2026-10-03 09h : 9 posts
9 posts published in the last hour 06:31Microsoft Warns ClickFix Attacks Use Fake CAPTCHA Lures to Execute Malicious Commands 06:31Connected Cars Are a Surveillance Platform 06:31AWS AI Agent Vulnerabilities Let Attackers Bypass Authentication and Steal Credentials 06:31September 2026 Patch Tuesday:…
Microsoft Warns ClickFix Attacks Use Fake CAPTCHA Lures to Execute Malicious Commands
Microsoft Threat Intelligence has identified a ClickFix campaign in which compromised websites use fake CAPTCHA-style verification prompts to trick…
Connected Cars Are a Surveillance Platform
Researchers at Northeastern University, in collaboration with Consumer Reports , evaluated how much modern cars spy in their drivers: The new Northeastern…