MITRE released ATT&CK v20 on October 13, 2026. It adds the first Enterprise techniques for direct and indirect prompt injection, AI-enabled exfiltration…
Burger King Japan data breach exposes 11 million customer records
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server…
When AI Agents Commit Breaches, Humans May Not Be Held Liable
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
Rapid7 Intelligence Wins the 2026 Péter Szőr Award for Outstanding Research
Some awards you’re happy to receive, while others make you stop for a moment. Receiving the 2026 Péter Szőr Award this week at Virus Bulletin in Seville…
Google Chrome 155 Patches Critical Use-After-Free Flaw and Nine Additional Security Bugs
Google has released Chrome 155 to the Stable channel with 10 security fixes. One is rated Critical: a use-after-free in Prerender, tracked as…
IT Security News Hourly Summary 2026-10-16 15h : 14 posts
14 posts published in the last hour 12:31AI Data Centre Operator Firmus Cancels $5bn IPO 12:31Jev and other decision models can still be tricked with prompt injection 12:31AdFection Zero-Click Spyware Attack Hits Al Jazeera 12:31U.S. CISA adds Atlassian flaw to its…
AI Data Centre Operator Firmus Cancels $5bn IPO
Firmus had reportedly seen insufficient investor demand to justify offer price that sought sky-high $30bn valuation
Jev and other decision models can still be tricked with prompt injection
Never making type errors does not mean never making errors
AdFection Zero-Click Spyware Attack Hits Al Jazeera
Citizen Lab confirms that zero-click spyware infected Al Jazeera devices through targeted ads. Its investigation also exposes Discover-Tech’s global…
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…
AI Decision Models and Their Impact on AI SOC Platforms
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System…
Data-Centric Security with Hardware-Backed Encryption: How Virtru and Thales Protect Sensitive Data
Data-Centric Security with Hardware-Backed Encryption: How Virtru and Thales Protect Sensitive Data lee.potok@thal… Wed, 10/14/2026 – 09:44 Virtru and…
Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
Cannabis smuggling from North America and Thailand in Europe has seen a sharp rise, driven by oversupply in legal markets and the adaptability of…
Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns
Three weeks before Americans vote in the 2026 midterm election, fraudsters are borrowing candidate names, logos and slogans to collect fake donations and…
“Spray and pray” job applications could make it harder for you to spot a scam
Sending out lots of job applications without keeping track could make a scammer’s message look like a reply you’ve been waiting for.
Google Automatically Adds Your Phone Number to Every Google Account on Your Android Phone
Google automatically verifies phone numbers on Android devices and adds them to every Google account signed in on the Phone. The setting is enabled by…
Chinese Phishing Network Uses 17,000 Domains to Target Japanese Banks and Steal Credentials
A large Chinese-language phishing operation has used around 17,000 internet domains to impersonate banks, payment services, retailers and other well-known…
BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts
A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week.
New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials
Aoki, also known as Aokigahara, is a data-stealing malware that has added credentials for AI tools to its growing list of targets. Recent versions seek…
IT Security News Hourly Summary 2026-10-16 14h : 11 posts
11 posts published in the last hour 11:31Backdooring Open-Weight AI Models 11:31BAE Systems Cybersecurity Incident Disrupts Bankruptcy Court Operations Across the U.S. 11:31Protecting citizens, preserving rights 11:02OpenAI sued over children safety and data use 11:02Panchan’s Mining Island [Guest Diary], (Wed,…
Backdooring Open-Weight AI Models
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an…
BAE Systems Cybersecurity Incident Disrupts Bankruptcy Court Operations Across the U.S.
A cybersecurity incident at defense contractor BAE Systems has taken offline the systems that send bankruptcy notices for every federal bankruptcy court…
Protecting citizens, preserving rights
How can law enforcement make effective use of data and technology while ensuring that fundamental rights and the rule of law remain protected? This…
OpenAI sued over children safety and data use
Eight US states and a mother of two accuse the ChatGPT maker of putting children’s safety and privacy at risk.