Six months after Iranian drone strikes tore through its Middle East infrastructure, Amazon Web Services (AWS) has acknowledged the permanent loss of…
September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972…
A fake ChatGPT billing email is after your OpenAI password
A fake ChatGPT billing email is steering users to a copy of the OpenAI login page that keeps whatever username and password they type. Josh Varden of…
Cisco drops another exploited zero-day, this time a perfect 10
ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch
New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data
Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilities
Could an Email You Never Read Hijack Your AI Assistant?
Cybersecurity awareness has traditionally focused on teaching people not to click suspicious links, open unexpected attachments or hand over their…
CISA wants critical infrastructure orgs and smaller security teams to start using cyber decoys
Cyber deception has long been the domain of well-resourced security teams, but CISA’s latest guidance, titled “Using Cyber Decoys to Strengthen Detection…
Critical ScreenConnect flaw actively exploited
The U.S.
North Korean IT Workers Pay People to Sit Through Job Interviews While They Control the Computer
North Korean IT-worker operators are recruiting foreign nationals to sit on camera during remote job interviews. At the same time, the real candidate…
Anthropic tests Claude Money for bank data analysis
Anthropic has begun testing Claude Money, a personal finance feature that enables users to connect their bank accounts directly to the Claude AI assistant.
ISC Patches 14 Vulnerabilities in BIND 9 Security Update
Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process.
Google Launches Gemini 3.8 Live AI Models
Google has launched two new audio AI models designed to help enterprises deploy conversational voice agents with enhanced reasoning capabilities.
Salt Security expands CrowdStrike integration to tackle AI agent security
Salt Security has expanded its integration with CrowdStrike to give security teams greater visibility into how AI agents connect to enterprise systems,…
Salesforce global outage affects hundreds of instances
Salesforce suffered a multi-hour global outage on September 16 that disrupted service for customers across the United States, Japan, India, the United…
Druva expands identity resilience with ransomware detection
Druva has announced new capabilities for Druva Identity Resilience alongside the launch of Ransomware Detection, a new feature fueled by a proprietary AI…
SE Labs Launches PIVOT Testing Program for Cybersecurity Ven
SE Labs, a UK-based security testing provider, announced the launch of PIVOT on September 15, a new independent testing program designed to evaluate…
IT Security News Hourly Summary 2026-09-17 15h : 9 posts
9 posts published in the last hour 12:31Google’s new agent security system detects tool misuse, loops and rogue behavior 12:31Cyber Essentials Has Record Year but Takeup Remains Low 12:31Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows 12:31GPT4Free Privacy…
Google’s new agent security system detects tool misuse, loops and rogue behavior
Google’s Agent Anomaly Detection is a reasoning-based oversight and audit layer for autonomous agents deployed on Agent Runtime in the Gemini Enterprise…
Cyber Essentials Has Record Year but Takeup Remains Low
New government figures reveal a 20% annual increase in certifications
Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows
Research shows attacks on manufacturers rose 40% in early 2026, as ransomware groups increasingly exploit the supply-chain disruption caused by…
GPT4Free Privacy Risks Expose AI Prompts to Third-Party Servers and Hidden Logs
Users of the GPT4Free hosted platform might believe they are directly interacting with the selected artificial intelligence model in its web interface.…
Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard
The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution.
NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown
The DOJ seized domains behind NightmareStresser, a DDoS-for-hire service tied to hundreds of thousands of attacks since 2022, as part of Operation…
Two in Five Organisations Hit by AI-Related Compliance Failures in Past Year, Research Finds
40% of organisations have suffered an AI-related compliance or governance issue in the last 12 months, with legacy and poorly designed business processes…