← Feed

Posts

• View post

  🔒 Security News Digest - 2026-09-28 📊 7 updates from 3 sources: 🦠 Malwarebytes: A week in security (September 21 – September 27) https://www.malwarebytes.com/blog/news/2026/09/a-week-in-security-september-21-september-27 🔹 The Hacker News: CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html 🔹 SecurityWeek: Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug https:...

• View post

  🔹 iTnews - Security Security researcher says don't install Meta's Muse AI assistant Expert "not-a-mused" by insecure AI agent. 🔗 https://www.itnews.com.au/news/security-researcher-says-dont-install-metas-muse-ai-assistant-629088?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

• View post

  🔹 SecurityWeek US Proposes AI Incident Alert System in Talks With China, Bessent Says Trump has resisted calls to slow down AI development, saying that would help China catch up to U.S. companies. The post US Proposes AI Incident Alert System in Talks With China, Bessent Says appeared first on SecurityWeek. 🔗 https://www.securityweek.com/us-proposes-ai-incident-alert-system-in-talks-with-china-bessent-says/

• View post

  🔹 iTnews - Security ASD says prompt injection in AI cannot be fixed Urges harness controls. 🔗 https://www.itnews.com.au/news/asd-says-prompt-injection-in-ai-cannot-be-fixed-629019?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

• View post

  🔹 darkreading Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand for broader AI expertise, services, and security outcomes. 🔗 https://www.darkreading.com/cyberattacks-data-breaches/vectra-ai-launches-ascent-new-era-ai-driven-attacks

• View post

  🔒 Security News Digest - 2026-09-18 📊 18 updates from 6 sources: 🔹 The Hacker News: Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer https://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.html 🔹 SecurityWeek: Brevo Supply Chain Attack Injects Malware Into 100,000 Websites https://www.securityweek.com/brevo-supply-chain-attack-injects-malware-into-100000-websites/ 🔹 Unit 42: A Vault with a Heap-View: The Uncomfortable Space Between AgentCore H...

• View post

  🔹 iTnews - Security Apple overhauls security with iOS and macOS 27 New operating system versions arrive with large chunk of patches and changes. 🔗 https://www.itnews.com.au/news/apple-overhauls-security-with-ios-and-macos-27-628916?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

• View post

  🔒 Security News Digest - 2026-09-09 📊 23 updates from 7 sources: 🔹 The Hacker News: Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html 🔹 The Hacker News: U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok https://thehackernews.com/2026/09/us-agencies-accuse-china-ai-firms-of.html 🔹 SecurityWeek: Chrome 153 Patches Seventh Zero-Day of 2026 https://www.s...

• View post

  🔹 The Hacker News JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-protected strings, control-flow flattening, proxy functions, and operation wrappers," Check Point Research said in...

• View post

  🔹 iTnews - Security iTnews Executive Retreat – Security Leaders Edition - VIC 26-27 November, 2026, RACV Goldfields Resort, Creswick Victoria. 🔗 https://www.itnews.com.au/feature/itnews-executive-retreat-security-leaders-edition---vic-628732?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

• View post

  🦠 Malwarebytes A week in security (August 31 – September 6) Last week on Malwarebytes Labs: Stay safe! 🔗 https://www.malwarebytes.com/blog/news/2026/09/a-week-in-security-august-31-september-6

• View post

  🔒 Security News Digest - 2026-08-11 📊 15 updates from 5 sources: 🦠 Malwarebytes: Fake popular sites offer a free app, instead take over PCs https://www.malwarebytes.com/blog/threat-intel/2026/08/fake-popular-sites-offer-a-free-app-instead-take-over-pcs 🦠 Malwarebytes: Watch out for fake TikTok Shops trying to steal your money https://www.malwarebytes.com/blog/scams/2026/08/watch-out-for-fake-tiktok-shops-trying-to-steal-your-money 🔹 The Hacker News: Gunra Ransomware Exploits Fortinet a...

• View post

  🔹 The Hacker News Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant supplies heat to roughly 50,000 residents. Recovery began at about 7:30 a.m. while the intruders were still active inside the network, and customers lost neither...

• View post

  🔹 SecurityWeek Mozilla Issues New Firefox GPG Key Following Exposure The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it. The post Mozilla Issues New Firefox GPG Key Following Exposure appeared first on SecurityWeek. 🔗 https://www.securityweek.com/mozilla-issues-new-firefox-gpg-key-following-exposure/

• View post

  🔹 The Hacker News OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart said it's implementing security controls for higher-capability models and associated activ...

• View post

  🔹 The Hacker News Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below - helper-beeps.solidity-pro web3devtoolsx.solidity-pro Although neither of the extensions is now available on Open VSX, the GitHub repository...

• View post

  🦠 Malwarebytes A week in security (August 3 – August 9) A list of topics we covered in the week of August 3 to August 9 of 2026 🔗 https://www.malwarebytes.com/blog/news/2026/08/a-week-in-security-august-3-august-9

• View post

  🔹 SecurityWeek Critical Flaws Discovered in Belgian eID Software Used by 2 Million People The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies. The post Critical Flaws Discovered in Belgian eID Software Used by 2 Million People appeared first on SecurityWeek. 🔗 https://www.securityweek.com/critical-flaws-discovered-in-belgian-eid-software-used-by-2-million-people/

• View post

  🔹 The Hacker News TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain. "The connection is supported by overlapping domains, malware deployment paths, staging techniques, backend infrastruc...

• View post

  🔒 Security News Digest - 2026-08-06 📊 5 updates from 3 sources: 🔹 darkreading: No Perfect Fix for AI Browser Prompt Injection Flaws https://www.darkreading.com/application-security/no-perfect-fix-ai-browser-prompt-injection-flaws 🔹 Latest Bulletins: CVE-2026-18954 - Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server https://aws.amazon.com/security/security-bulletins/rss/2026-076-aws/ 🔹 darkreading: AI Browsers Vulnerable to 'PleaseFix&...

• View post

  🔹 iTnews - Security Anthropic's Mythos 5 targeted real developers in UK cyber test Model without safety filters tried to social engineer coder during test. 🔗 https://www.itnews.com.au/news/anthropics-mythos-5-targeted-real-developers-in-uk-cyber-test-627952?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

• View post

  🔹 iTnews - Security iTnews Executive Retreat – Security Leaders Edition Hunter Valley, 17–18 September 🔗 https://www.itnews.com.au/feature/itnews-executive-retreat-security-leaders-edition-627912?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

• View post

  🔒 Security News Digest - 2026-08-04 📊 7 updates from 5 sources: 🔹 Latest Bulletins: CVE-2026-18830 - Issue with Amazon Bedrock AgentCore harness – Insufficient Input Validation https://aws.amazon.com/security/security-bulletins/rss/2026-073-aws/ 🔹 darkreading: Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook https://www.darkreading.com/cyberattacks-data-breaches/latest-rmm-fueled-phishing-attack-exposes-threat-actor-playbook 🔹 Security News | TechCrunch: Nvidia doesn’t me...

• View post

  🔒 Security News Digest - 2026-08-04 📊 15 updates from 6 sources: 🔹 The Hacker News: New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root https://thehackernews.com/2026/08/new-cpanel-critical-flaw-could-let.html 🔹 SecurityWeek: Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering https://www.securityweek.com/gemini-agent-to-agent-attack-exposed-secrets-enabled-pull-request-tampering/ 🔹 The Hacker News: Google Deletes 3 ADK AI Workf...

• View post

  🔒 Security News Digest - 2026-08-04 📊 5 updates from 3 sources: 🔹 darkreading: Device Code Phishing Up 1,500% in 2026; Vishing Doubles https://www.darkreading.com/cybersecurity-analytics/device-code-phishing-vishing-doubles 🔹 The Hacker News: CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html 🔹 SecurityWeek: 150,000 Impacted by Madera Community Hospital Data Breach https://www.securi...

• View post

  🔹 SecurityWeek New York Awards $9 Million to Strengthen Cybersecurity at 153 Water Systems The grants will help local governments assess and improve cyber defenses amid a multistate campaign targeting water and wastewater infrastructure. The post New York Awards $9 Million to Strengthen Cybersecurity at 153 Water Systems appeared first on SecurityWeek. 🔗 https://www.securityweek.com/new-york-awards-9-million-to-strengthen-cybersecurity-at-153-water-systems/

• View post

  🔹 darkreading Attackers Exploit N-able Patch Bypass Flaw on RMM Servers Over the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access. 🔗 https://www.darkreading.com/vulnerabilities-threats/attackers-exploit-n-able-patch-bypass-flaw

• View post

  🦠 Malwarebytes The AI Act kicks into action, forces companies to be clear about AI chatbots The European Union (EU) has started enforcing key parts of the AI Act, with immediate, visible consequences for chatbots, deepfakes and other consumer‑facing AI. 🔗 https://www.malwarebytes.com/blog/news/2026/08/the-ai-act-kicks-into-action-forces-companies-to-be-clear-about-ai-bots

• View post

  🔒 Security News Digest - 2026-08-03 📊 6 updates from 4 sources: 🔹 SecurityWeek: Visa to Acquire Fraud Intelligence Firm BioCatch for $2.4 Billion https://www.securityweek.com/visa-to-acquire-fraud-intelligence-firm-biocatch-for-2-4-billion/ 🔹 darkreading: Chinese Actor Weaponizes Deepseek AI Agent to Attack Security Firm https://www.darkreading.com/cyberattacks-data-breaches/chinese-actor-deepseek-ai-agent-attack-security-firm 🔹 SecurityWeek: Black Hat USA 2026 – Summary of Vendor Anno...

• View post

  🔒 Security News Digest - 2026-08-03 📊 10 updates from 4 sources: 🔹 The Hacker News: Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code https://thehackernews.com/2026/08/hugging-face-diffusers-flaws-could-let.html 🔹 The Hacker News: N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html 🦠 Malwarebytes: A week in security (July 27 – August 2)...