Washignton, DC, USA, 30th September 2026, CyberNewswire
SWIFT Banking & Government Middleware Enables RCE
Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.
US sanctions Tren de Aragua gang members in ATM hacks crackdown
The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars…
Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, devices, data, applications,…
Is It Fair to Blame ‘Rogue’ AI for Security Failures?
“Rogue AI” terminology anthropomorphizes LLMs and shifts risk responsibility from vendors. Defenders should treat agents as untrusted, nondeterministic…
MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data
CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,…
WatchGuard fixes critical Fireware OS flaw allowing remote code execution
WatchGuard fixes 15 Fireware OS flaws, including a critical RCE bug that could give attackers root access to vulnerable Firebox appliances. WatchGuard has…
Fortinet warns that critical flaw in FortiMail is facing exploitation
Security researchers warn that attackers can gain access to credentials, stored mail and other connected systems.
Automakers Face Scrutiny Over Connected-Car Data Sharing
Modern connected cars are increasingly functioning as data-collection platforms, with new research finding that many automakers routinely transmit…
State-linked actor targets US AI policy experts in credential phishing campaigns
The China-linked espionage attacks were designed to gain insight into the country’s strategy and regulatory environment.
IT Security News Hourly Summary 2026-10-02 18h : 29 posts
29 posts published in the last hour 15:31Medela – 423,947 breached accounts 15:31Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval 15:31National cyber director defends private-sector hacking program, urges focus on security basics 15:31Hackers…
Medela – 423,947 breached accounts
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters “pay or leak” extortion campaign . The data allegedly obtained in…
Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval
Prosecutors claim Greg Lui helped China procure advanced hardware to develop, ahem, ‘super intelligence’
National cyber director defends private-sector hacking program, urges focus on security basics
Letting businesses help the government deter cybercrime will benefit all Americans, Sean Cairncross said.
Hackers stole millions of US military personnel records during months-long data breach
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long…
Google Introduces Gemini 4 Argon With Guardrail-Free Access for Defenders
A new frontier artificial intelligence model, Gemini 4 Argon, has been introduced by Google through its Fairwind Program for initial distribution to…
When Productivity Extensions Become Attack Platforms
Our research uncovered a campaign of 32 malicious browser extensions that uses remote configs to spy on 9,800+ users and hijack browsing activity.
The Silent Container Death: A TCP Dial That Never Times Out
A pod goes into CrashLoopBackOff . You pull the logs expecting a stack trace, a panic, an error string – anything that points you somewhere. Instead, you…
FTC Probes OpenAI, Anthropic as AI Agent Safety Risks Draw Scrutiny
The FTC is investigating OpenAI, Anthropic and other AI firms over potential consumer harms, safety claims and risks tied to increasingly autonomous AI…
In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense Report,…
Exposed WordPress Backups Became a Gold Mine of AWS and Email Credentials
Exposed WordPress backups have become a valuable source of cloud and email credentials for attackers using a toolkit called TIKTOUK. Rather than relying…
Pentagon Confirms Breached 3 Million DMDC Personnel Database
HOC Shorts The Pentagon confirmed a major data breach involving the Defense Manpower Data Center (DMDC), exposing sensitive…
Unidentified Flock Cameras in Florida
St. Lucie County in Florida discovered ( alt link ) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not…
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to…