A security researcher has publicly released working exploit code for four Linux kernel vulnerabilities that can allow local users to escalate their…
Attackers Abuse npm Trusted Publishing in GHAPPIER Campaign
CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenance
Microsoft Confirms September 2026 Windows Updates Break File History Backups
Microsoft has confirmed that its September 2026 Windows security updates can prevent File History from creating or updating backups on some systems. The…
No Attacker Required: What a Two-Day Hackathon Taught Us About Agent Security
In this article Nineteen Check Point AI Security R&D teams spent two days on one prompt: build the demo customers would ask to see twice. Three of the…
North Korean TraderTraitor Hackers Use Fake Terraform Job Tests to Deploy macOS Backdoors
North Korean threat actors are using fake Terraform job tests to compromise macOS developers and reach cloud systems. The campaign shows how a routine…
ChainScript: the RAT that hides its command server inside a blockchain contract
Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server. Blackpoint’s Adversary Pursuit…
ChatGPT Ad Tracking Cookie Follows Users Across Third-Party Advertiser Websites
OpenAI’s advertising measurement system appears to use a cross-site cookie that can link activity on advertiser websites to a person’s ChatGPT account.…
TerminalFix Campaign Uses PNG Steganography
A sophisticated malware campaign identified by Microsoft Security Research employs PNG image files with steganography to deliver malicious payloads…
Leaky TLS Certificate Exposes North Korea’s Hangro VPN Infrastructure Across Two Countries
North Korea’s Hangro platform has exposed an unusually detailed view of infrastructure used to connect officials and trade representatives abroad with…
IT Security News Hourly Summary 2026-09-21 16h : 15 posts
15 posts published in the last hour 13:32FBI warns of police impersonation extortion scams 13:31CrowdSec Source Code Stolen in Supply Chain Attack 13:31What AI Can, Cannot, and Should Not Do 13:31AI Models Cheat Benchmarks, CAIS Study Finds 13:31NightEagle Uses BlueKeep…
FBI warns of police impersonation extortion scams
The FBI has issued an updated warning about a persistent extortion scam in which criminals impersonate law enforcement officers and federal agents to…
CrowdSec Source Code Stolen in Supply Chain Attack
Cybersecurity firm CrowdSec has confirmed that threat actors successfully stole its source code following a supply chain attack that compromised TanStack,…
What AI Can, Cannot, and Should Not Do
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: What AI Can, Cannot, and Should Not Do
AI Models Cheat Benchmarks, CAIS Study Finds
A new benchmark from the Center for AI Safety reveals that leading AI models routinely take shortcuts and cheat when faced with challenging tasks.
NightEagle Uses BlueKeep and DCSync to Move Toward Active Directory Domain Controllers
NightEagle, an espionage-focused threat group also tracked as APT-Q-95, has expanded its operations from Asian targets to Russian organizations, using a…
AWS IAM Credential Exposure Detection
Amazon Web Services employs automated systems to detect and neutralize exposed Identity and Access Management (IAM) credentials when they appear in public…
Hash Identifier Tools – Command-Line Password Hash Identification
hashID and Name-That-Hash tested against current password formats. Both miss bcrypt’s $2b$ prefix; only Name-That-Hash recognises Argon2id.
Google fined $463M for EU location data breach
Google faces a €403 million ($463 million) fine from Ireland’s Data Protection Commission for breaching the European Union’s General Data Protection…
RatHat Android Trojan Uses AI for Automation
The malware relies on AI for real-time device navigation and control, increasing adaptability and evasion.
10 Malicious npm Packages Linked to Runtime Malware Campaign With Millions of Downloads
A sophisticated npm supply-chain campaign has been linked to 10 malicious JavaScript packages that collectively recorded millions of downloads while…
ShinyHunters Claim Hack of Rival Ransomware Gang Clop
ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key operational data
North Korea’s job interview scam runs both ways
Attackers are targeting members of the Rust Project and maintainers of widely used crates (Rust code libraries), dangling attractive opportunities to…
Clop gets a taste of its own medicine after ShinyHunters hijack leak site
Rival crew demands eight figures and threatens to expose companies that paid to keep quiet
Fastly gives enterprises real-time control over AI models and agents
Fastly has announced AI Runtime Control, AI Firewall, and new API Security capabilities designed to give organizations real-time visibility and control…