Dutch authorities arrest 24-year-old reformed hacker over suspicion he is part of gang that stole data on nearly all FBI employees
Fed employee repeatedly removed sensitive files, watchdog finds
Matt Bracken reports: A Federal Reserve Board staffer mishandled sensitive classified files and triggered hundreds of data loss prevention alerts leading…
Smart Ring Maker Oura Withdraws Planned $2.2bn IPO
Finland-founded company postpones Nasdaq debut days after announcing it, as tech firms react to uncertain market conditions
Senate passes bipartisan bill to bolster hospital cybersecurity
Naomi Diaz reports: The Senate passed the bipartisan Health Care Cybersecurity and Resilience Act by unanimous consent. The legislation aims to help…
IT Security News Hourly Summary 2026-10-05 09h : 12 posts
12 posts published in the last hour 06:02Keyorix: Open-source secrets management for teams that can’t use SaaS 06:02Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier 06:02DHS readies major cyber contract 06:02Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign…
Keyorix: Open-source secrets management for teams that can’t use SaaS
Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application…
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
DHS readies major cyber contract
Justin Doubleday reports: The Department of Homeland Security is preparing this year to award a major cloud, cybersecurity and network services contract…
Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign to Gain Remote Access
Threat actors are increasingly bypassing conventional malware detection by abusing legitimate remote monitoring and management software instead of…
Italy’s Data Protection Authority fines IQVIA €7 million over data protection breach
The following is a machine translation of a press release by Italy’s privacy guarantor: Healthcare data: The Privacy Guarantor fines IQVIA 7 million…
N0n ransomware: what you need to know
N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web…
ShinyHunters hacker “Rey,” allegedly involved in FBI data theft, detained in Jordan
Jana Winter, Raphael Satter, and A.J. Vicens report: A key member of the ShinyHunters hacking group, which claims to have stolen data on every FBI…
Three questions a hospital CISO should ask a healthcare fintech vendor
In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every…
Slate Valley Unified School District voted not to pay ransom demand; Kairos likely to leak data
The Slate Valley Unified School District in Fair Haven, Vermont, has been responding to a security incident since September 3. On October 2, Kairos threat…
Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940
Microsoft has released a revised security update package for on-premises Exchange Server, dated September 2026, which includes a fix for CVE-2026-96940.…
South Korea’s President Lee Jae Myung orders thorough probe into data breaches at local banks
Lee Hyo-jin reports: President Lee Jae Myung on Sunday ordered a thorough investigation into a string of recent data breaches at financial institutions,…
IT Security News Hourly Summary 2026-10-05 08h : 6 posts
6 posts published in the last hour 05:01Anthropic Asks Claude Users to Share Voice Recordings for AI Training With a New Opt-In Setting 05:01Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications 05:01How RMM abuse gives…
Anthropic Asks Claude Users to Share Voice Recordings for AI Training With a New Opt-In Setting
Anthropic has started asking Claude users to share their voice conversations so the company can use them to train and improve its AI models. Thank you for…
Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications
Google has disclosed that PageBreak, an internal AI security agent developed by its Product Security team, has identified and validated more than 500…
How RMM abuse gives attackers a way in that looks like business as usual
Huntress found attackers using legitimate remote monitoring and management (RMM) software in 45% of the endpoint-related incidents it recorded in the…
South Korea Orders Investigation Into AI-Powered Cyberattacks on Major Banks
South Korean President Lee Jae Myung has ordered a comprehensive investigation into a series of data breaches impacting major banks and other financial…
Apple Will Require Explicit User Action to Grant Full Disk Access in macOS, Citing AI Agents
Apple will introduce additional controls for Full Disk Access in macOS, so that users can grant an app access to the entire system only through “very…
Citrix NetScaler SAML Vulnerability Enables Unauthenticated Remote DoS Attacks
Citrix has released emergency security updates to address a high-severity memory overflow vulnerability in NetScaler ADC and NetScaler Gateway. This flaw,…
IT Security News Hourly Summary 2026-10-05 06h : 3 posts
3 posts published in the last hour 03:012026-10-02: Atomic macOS (AMOS) Stealer infection from malicious ad impersonating Claude Code 03:012026-10-01: Traffic analysis exercise – Natureforce 03:00IT Security News Hourly Summary 2026-10-05 05h : 3 posts