Microsoft is the best passwordless starting point for most workforces passkeys and Windows Hello ride licensing you already own while HYPR leads the…
Alleged ShinyHunters Leader Arrested in Jordan
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.
AMD Buys Li Fei-Fei’s World Labs For $8.2bn
Chipmaker to acquire two-year-old start-up founded by pioneering AI researcher Li Fei-Fei amid surging interest in ’embodied AI’
GlassWorm Supply Chain Attack Hides Malware Inside VS Code Color Themes
A GlassWorm-linked software supply chain campaign has abused seemingly harmless Visual Studio Code color themes to distribute malicious loaders across the…
OpenAI faces California DOJ subpoena amid growing cybersecurity incident notices
IAPP reports: Regulator inquiries into major AI companies’ cybersecurity practices are ramping up. A day after reports surfaced about the likely…
Dutch Ex-Hacker Arrested Over Suspected Link To FBI Breach Gang
Dutch authorities arrest 24-year-old reformed hacker over suspicion he is part of gang that stole data on nearly all FBI employees
Fed employee repeatedly removed sensitive files, watchdog finds
Matt Bracken reports: A Federal Reserve Board staffer mishandled sensitive classified files and triggered hundreds of data loss prevention alerts leading…
Smart Ring Maker Oura Withdraws Planned $2.2bn IPO
Finland-founded company postpones Nasdaq debut days after announcing it, as tech firms react to uncertain market conditions
Senate passes bipartisan bill to bolster hospital cybersecurity
Naomi Diaz reports: The Senate passed the bipartisan Health Care Cybersecurity and Resilience Act by unanimous consent. The legislation aims to help…
IT Security News Hourly Summary 2026-10-05 09h : 12 posts
12 posts published in the last hour 06:02Keyorix: Open-source secrets management for teams that can’t use SaaS 06:02Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier 06:02DHS readies major cyber contract 06:02Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign…
Keyorix: Open-source secrets management for teams that can’t use SaaS
Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application…
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
DHS readies major cyber contract
Justin Doubleday reports: The Department of Homeland Security is preparing this year to award a major cloud, cybersecurity and network services contract…
Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign to Gain Remote Access
Threat actors are increasingly bypassing conventional malware detection by abusing legitimate remote monitoring and management software instead of…
Italy’s Data Protection Authority fines IQVIA €7 million over data protection breach
The following is a machine translation of a press release by Italy’s privacy guarantor: Healthcare data: The Privacy Guarantor fines IQVIA 7 million…
N0n ransomware: what you need to know
N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web…
ShinyHunters hacker “Rey,” allegedly involved in FBI data theft, detained in Jordan
Jana Winter, Raphael Satter, and A.J. Vicens report: A key member of the ShinyHunters hacking group, which claims to have stolen data on every FBI…
Three questions a hospital CISO should ask a healthcare fintech vendor
In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every…
Slate Valley Unified School District voted not to pay ransom demand; Kairos likely to leak data
The Slate Valley Unified School District in Fair Haven, Vermont, has been responding to a security incident since September 3. On October 2, Kairos threat…
Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940
Microsoft has released a revised security update package for on-premises Exchange Server, dated September 2026, which includes a fix for CVE-2026-96940.…
South Korea’s President Lee Jae Myung orders thorough probe into data breaches at local banks
Lee Hyo-jin reports: President Lee Jae Myung on Sunday ordered a thorough investigation into a string of recent data breaches at financial institutions,…
IT Security News Hourly Summary 2026-10-05 08h : 6 posts
6 posts published in the last hour 05:01Anthropic Asks Claude Users to Share Voice Recordings for AI Training With a New Opt-In Setting 05:01Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications 05:01How RMM abuse gives…
Anthropic Asks Claude Users to Share Voice Recordings for AI Training With a New Opt-In Setting
Anthropic has started asking Claude users to share their voice conversations so the company can use them to train and improve its AI models. Thank you for…
Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications
Google has disclosed that PageBreak, an internal AI security agent developed by its Product Security team, has identified and validated more than 500…