A public proof-of-concept exploit has been released for CVE-2026-23980, a SQL injection vulnerability affecting Apache Superset installations running…
Acronis Plugin Vulnerability in cPanel and Plesk Exploited in the Wild
Acronis has released security updates for its Backup plugin for cPanel & WHM and Backup extension for Plesk after detecting limited, targeted exploitation…
Major Cyber Threat Detection Vendors Shift from MITRE to UK Testing Program
A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program
KREMLIN Banking Malware Infects Over 1,500 Systems With Malicious Chrome Extension
KREMLIN is a banking malware operation that plants a hostile browser extension on infected computers. The extension can harvest passwords, session…
China-Aligned Hackers Hide PeckBirdy Malware C2 Inside Casino and Adult Websites
China-aligned threat actors are concealing the PeckBirdy command-and-control framework inside low-quality Chinese-language casino and adult websites.…
Iranian Hackers Use Fake MRI Results to Infect Victims With CHOSEN BRICK Spyware
Iranian state-linked hackers are using fake MRI scan results to infect selected people with CHOSEN BRICK, a Windows spyware family built for long-term…
Enterprises Warned of Attacks Exploiting WSO2 Vulnerability
The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data.
US Official ‘Suspicious’ Of Anthropic Call For Antitrust Exemption
FTC chair Andrew Ferguson says AI companies looking to bring in regulations that ‘insulate their incumbency from challenge’
AI helps scammers build convincing antivirus renewal pages
A fake Avast renewal page shows how AI is helping scammers create more convincing traps with polished designs and fluent copy.
Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Claims 7.49M Records Stolen
CenterPoint Energy confirmed a customer data breach after a hacker claimed to leak 7.49M records, including personal and billing information. CenterPoint…
IT Security News Hourly Summary 2026-09-16 11h : 16 posts
16 posts published in the last hour 08:32Shared AI Memory Lets Hundreds of Agents Inherit Exploits and Join Coordinated Attacks 08:32Top 10 Best Data Security Posture Management (DSPM) Tools in 2026 08:31Oracle Patches 800+ Vulnerabilities in September 2026 Security Update…
Shared AI Memory Lets Hundreds of Agents Inherit Exploits and Join Coordinated Attacks
A shared message board turned isolated AI agents into an effective offensive collective during OpenAI’s July 2026 ExploitGym evaluations, enabling roughly…
Top 10 Best Data Security Posture Management (DSPM) Tools in 2026
DSPM finds sensitive data you didn’t know you had, classifies it, maps who can reach it, and flags exposure answering “where is our sensitive data, and…
Oracle Patches 800+ Vulnerabilities in September 2026 Security Update
The security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws.
Top 10 Best SaaS Security Posture Management (SSPM) Tools in 2026
Your SaaS estate M365, Salesforce, Workday, Slack, hundreds of others is a sprawl of misconfigurations, over-permissioned OAuth grants, and shadow apps…
Hacker ‘Breached Italian Gov’t Email’ To Steal Revolut Data
Hacker claims they gained access to secure Italian government email system, posed as law enforcement to obtain data on 680 Revolut customers
Top 10 Best Cloud Detection & Response (CDR) Solutions in 2026
CDR is the runtime, real-time half of cloud security: while CSPM tells you what’s misconfigured, CDR tells you what’s happening right now an attacker…
NCSC and Allies Warn of Iranian Spyware Campaign
The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents
Microsoft Releases Emergency Windows 11 Update Following Patch Tuesday Bugs
Microsoft has pushed out an emergency, out-of-band Windows 11 update after its September Patch Tuesday release triggered a wave of stability failures…
NIS-2: Why practical relevance is crucial in management training
Under NIS-2, management bodies of affected companies are required to attend training on a regular basis. However, anyone who sees this merely as proof of…
Meta Strengthens WhatsApp Account Security
WhatsApp is one of the world’s most widely used messaging apps, connecting billions of people every day. Because it’s so widely used, cybercriminals also…
12 Best CIEM Tools Compared (2026): Features & Pricing
Quick Answer: CIEM bills per identity or per cloud resource, and the count that matters is non-human identities machines outnumber people many-fold and…
NIST and CISA finalize playbook to stop token theft and forgery
NIST and CISA have finalized guidelines to help federal agencies and cloud service providers (CSPs) protect identity and access tokens from forgery,…
12 Best CASB Solutions Compared (2026): Features & Pricing
Quick Answer: Nobody buys standalone CASB anymore you buy an SSE seat and CASB rides along. That flips the cost question: Defender for Cloud Apps is…