CrowdStrike analyzes open directories left by an attacker who used the ARTEX AI pentest tool and LLMs to breach South Korean financial firms. CrowdStrike…
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and…
Inside a brand deal scam targeting YouTube creators
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account
Engineer sentenced for locking over 3,000 devices on employer’s network
Sergiu Gatlan has an update on a case previously noted on this site. A former core infrastructure engineer at an industrial company headquartered in New…
Product showcase: SimpleLogin keeps your email address private with aliases
SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and…
US Disrupts Chinese State-Sponsored Hacking Tools
Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure.
Suspected TraderTraitor Hackers Trojanize Terraform Provider to Deploy Cross-Platform Malware
A campaign in July 2026 using a trojanized Terraform provider to deploy cross-platform malware against developer environments. The operation delivers…
AI Training Critical as Governance Challenges Grow
As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI…
12 Best Software Supply Chain Security Tools Compared (2026): Features & Pricing
Chainguard leads the eliminate-the-problem lane with hardened zero-CVE images, Sonatype the block-at-ingestion lane, and Scribe/Lineaje the…
IT Security News Hourly Summary 2026-10-09 11h : 10 posts
10 posts published in the last hour 08:31Hackers Target Hikvision Cameras in Ukraine With RCE Exploits Amid Russian Airstrikes 08:31Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security 08:31FBI Disrupts Major Scam Centers in Ghana,…
Hackers Target Hikvision Cameras in Ukraine With RCE Exploits Amid Russian Airstrikes
Hackers targeted Hikvision surveillance devices in Ukraine during a concentrated surge of remote command execution attempts that coincided with Russian…
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
FBI Disrupts Major Scam Centers in Ghana, 130+ Detained and 300+ Devices Seized
The FBI has announced another disruption of scam centers in Ghana as part of Operation Blackout, resulting in the arrest or detention of over 130…
UK ICO Secures Data Protection Commitments From OpenAI, Google, Microsoft, and Seven Other AI Developers
The UK data protection regulator, the ICO, says ten of the largest AI developers, including OpenAI, Google, and Microsoft, have changed how they handle…
11 Best API Security Tools Compared (2026): Features & Pricing
Salt Security and Traceable anchor dedicated discovery-plus-runtime defense, 42Crunch owns design-time contract security, and the edge giants (Akamai with…
European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
Warden Stealer Malware Targets Claude, Codex, Grok and Cursor to Steal AI Agent Data
Warden Stealer as a rapidly growing malware-as-a-service operation targeting data stored by AI assistants and coding agents, including Claude, Codex,…
Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push
Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner’s Office
ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130,…
IT Security News Hourly Summary 2026-10-09 10h : 17 posts
17 posts published in the last hour 07:32Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead 07:32CyrusOne – 373,460 breached accounts 07:31Top level domain theft, Yandex attacked, Cisco Nexus flaws 07:31React Server Components Flaw Lets Attackers Freeze Next.js…
Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead
Feds claim he charged clients more than ransoms, paid up, pocketed the difference
CyrusOne – 373,460 breached accounts
In August 2026, data centre operator CyrusOne was the target of a ShinyHunters “pay or leak” extortion attempt . The group subsequently published data…
Top level domain theft, Yandex attacked, Cisco Nexus flaws
Attackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major…
React Server Components Flaw Lets Attackers Freeze Next.js Servers With a Single POST Request
A high-severity denial-of-service flaw (CVE-2026-23870) in React Server Components can allow a remote attacker to freeze vulnerable Next.js servers by…