Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks. […]

Read more →

Most patients and families assume that if a hospital’s AI predicted a downturn hours before it happened, the prediction is sitting somewhere in the chart, timestamped and easy…

Read more →

Video demand across Australian marketing teams keeps climbing. Budgets, largely, do not. Wistia’s 2026 State of Video found companies producing more video than the year before,…

Read more →

Enterprise IT teams are increasingly using artificial intelligence to manage Apple devices, but new research suggests their ability to recover from configuration mistakes is failing to keep pace with AI adoption. A new report from device management provider Fleet found that 86% of surveyed Mac administrators allow AI-generated scripts or configurations to reach production devices…

Read more →

Microsoft, Adobe and six major IT services companies face new restrictions on sponsoring foreign employees for permanent residency in the United States. The Trump administration on Thursday suspended the companies from the federal Permanent Labor Certification Program, known as PERM, accusing them of abusing employment-based immigration rules. The affected companies are Cognizant, Infosys, Tata Consultancy…

Read more →

Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What’s different: Many of the buyers are not your typical cybersecurity firms.

Read more →

Amazon just upped its game with new Android tablets for entertainment and work.

Read more →

Japan helped extradite a Russian suspect linked to Qilin ransomware to Germany, but the gang continued attacking victims after his arrest. Germany has arrested a Russian national believed to be a leading figure in the Qilin ransomware group, and Japan’s National Police Agency just put its own role in that arrest on the record. The…

Read more →

Microsoft warns outdated Windows devices could lose access to all updates in 2027. Learn which versions are affected and what security teams should do.

Read more →

The DOJ accuses MonsterCloud CEO Zohar Pinhasi of secretly paying ransomware gangs for decryption keys while charging victims…

Read more →

Anthropic’s OSS Scanner offers free AI vulnerability scans for eligible open-source projects, with maintainers responsible for verifying reports and fixes.

Read more →

GitHub’s new AI model spots passwords hidden in source code. See how its secret scanning works, which checks are in preview, and what security teams should do.

Read more →

Microsoft Teams plans to add third-party deepfake detection for meetings in November 2026. Learn how the warnings could help organizations spot AI impostors.

Read more →

The Linux creator calls vibe coding ‘a wonderful way to find joy in programming,’ but not for running Linux development. (Finding bugs is OK.)

Read more →

The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI’s jobs portal and stolen sensitive data on almost all FBI agents and job applicants. The FBI has not named the suspect, and…

Read more →

In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run data center.

Read more →

Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. […]

Read more →

The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. […]

Read more →

Global systems integrator Myriad360 plans to accelerate acquisitions and expand its enterprise technology services following a majority investment from private equity firm One Equity Partners, CEO Jay Miley told Channel Insider. “I think by and large, the reason why we did this is that it’ll enable us to make more acquisitions,” Miley said. The investment,…

Read more →

Tom Brown is leveraging his Republican ties and business savvy to win over Washington and secure the computing power Anthropic needs.

Read more →

More than eight in 10 workers have decided an IT problem wasn’t worth reporting, according to new research from Buchanan Technologies, raising questions about how effectively businesses and their managed service providers measure IT support performance. The company’s 2026 IT Experience Gap Report found that 82% of surveyed workers have avoided reporting an IT issue,…

Read more →

Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. “Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker’s infrastructure,” iVerify said in a new report published Thursday.…

Read more →

Those closest to executives must match their security postures because the weakest link in a family becomes the entry point for attacks.

Read more →

Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously undiscovered vulnerabilities in widely used Java libraries — and now the companies are inviting customers to submit their own code dependencies to a new service, Lightwell Clearinghouse, for review. They’ll be looking for bugs such as the…

Read more →

What if the three remaining hard disk manufacturers became two? Seagate Technology and Western Digital control 90% of the market, according to market researcher TrendForce, with Toshiba picking up the crumbs. Seagate and WD both make their own magnetic drive heads, but Toshiba relies on a third party, TDK, which also sells to Seagate and…

Read more →

Plus, how AI could help short-staffed fire departments, the silent electronic battleground shaping warfare, and the startup trying to double the world’s compute.

Read more →

Summary Cribl Detect, released on September 29, 2026, is a SIEM that runs on Cribl’s data platform. The data it stores and searches is ingested through Cribl Stream Routes and Pipelines, so a sanitization step in those Pipelines determines what analysts, AI-assisted triage, alert notifications and retained datasets can access. The Cribl LogTotal Sanitizer is…

Read more →

The owner of a ransomware remediation company is facing trial for defrauding customers. Zohar Pinhasi, also known as “Zack Silver” and “Zack Green,” has been arraigned in New York on wire fraud charges for allegedly defrauding clients of his ransomware remediation company, MonsterCloud. Pinhasi falsely claimed he could recover documents encrypted by ransomware without paying…

Read more →

The owner of a ransomware remediation company is facing trial for defrauding customers. Zohar Pinhasi, also known as “Zack Silver” and “Zack Green,” has been arraigned in New York on wire fraud charges for allegedly defrauding clients of his ransomware remediation company, MonsterCloud. Pinhasi falsely claimed he could recover documents encrypted by ransomware without paying…

Read more →

Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. […]

Read more →

OpenAI continues to report incidences of “misaligned” behavior by its AI models, with three new reports dropping on Oct. 2. However, they describe relatively minor issues compared to previous alignment reports and notices covering its attacks on Hugging Face, Rubygems, and a German programming wiki. The first of the new reports described how an instance…

Read more →

Wikimedia says OpenAI agents performed unauthorized actions on its platforms, including edits to wikis

Read more →

Samsung’s Galaxy S26 was hacked repeatedly at Pwn2Own Ireland. Learn what researchers found, why exploit chains matter and what users should know.

Read more →

The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national who is accused of being a key figure in China’s state-sponsored hacking group, Hafnium. Read more in my article on the Hot for Security blog.

Read more →

For the third week running, Citrix has issued a critical security warning to customers managing their own NetScaler ADC and Netscaler Gateway instances, this time warning of a memory overflow vulnerability enabling denial of service or remote code execution. This week’s vulnerability affects ADC and Gateway when configured as a SAML (Security Assertion Markup Language)…

Read more →

Deeper Network Promo

OpenAI’s annualized revenue run rate reportedly approached $50 billion at the end of September, roughly $20 billion below an earlier estimate that drew attention across the AI industry. According to the Financial Times, the ChatGPT maker shared the updated figure with investors. The difference does not necessarily indicate a decline in sales. Instead, reporting suggests…

Read more →

Bitdefender uncovered Midnight Mimosa malware preinstalled on low-cost Android phones, enabling hidden ad fraud and raising device supply-chain security concerns.

Read more →

A vulnerability has been discovered in Citrix NetScaler Application Delivery Controller (ADC) and Citrix NetScaler Gateway that could allow for remote code execution. Citrix NetScaler ADC (Application Delivery Controller) is an enterprise networking platform and traffic management device designed to optimize, secure, and accelerate the delivery of web and cloud applications. Successful exploitation of the…

Read more →

Citrix has disclosed CVE-2026-107406, a critical memory overflow vulnerability affecting NetScaler ADC and NetScaler Gateway appliances configured for specific SAML authentication roles. The flaw carries a CVSS v4.0 score of 9.5 and could enable an unauthenticated remote attacker to execute arbitrary code or trigger a denial-of-service condition on vulnerable systems. The vulnerability is particularly significant…

Read more →

AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations can enforce agent-specific policies without sacrificing autonomy. […]

Read more →

Anthropic launches free OSS Scanner, using AI to find open-source vulnerabilities and help maintainers fix bugs before attackers exploit them. Anthropic is launching OSS Scanner, a vulnerability scanner for open-source code that costs nothing for projects to join. It grew directly out of lessons learned running Claude against real-world targets during Project Glasswing. The backdrop…

Read more →

Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with  Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers are and how separate it is from China. TP-Link denies the claims and says it will fight…

Read more →

Plus, neocloud Firmus Grid withdraws IPO

Read more →

Former ransomware negotiator Angelo Martino received 70 months in prison after secretly sharing clients’ confidential information with BlackCat attackers and participating in additional ransomware attacks.

Read more →

As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.

Read more →

Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described the fix only as “fixed a bug that could lead to a crash,” with no CVE assigned and…

Read more →

Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). “It’s an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing,” Anthropic said. “Projects that join will receive thorough, periodic security scans by our strongest models at no cost.”

Read more →

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below – CVE-2026-105133 (CVSS v4 score: 5.5) – An improper authentication vulnerability in the checkSysPwd() function in the “com/ahsay/obs/api/ApiStructsAction.java”

Read more →

A component of Nvidia’s GPU monitoring software that enterprises use to keep tabs on their AI training and inference infrastructure has been vulnerable to denial-of-service (DoS) and information disclosure attacks. The Nvidia DCGM Exporter contains an unauthenticated resource exhaustion vulnerability that could allow remote attackers to crash the monitoring service and potentially disrupt AI workloads…

Read more →

Learn how businesses can use AI to reduce repetitive work, improve workflows, connect information, and support better everyday decisions.

Read more →

Learn how businesses can use AI to reduce repetitive work, improve workflows, connect information, and support better everyday decisions.

Read more →

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. […]

Read more →

Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets unauthenticated attackers crash the monitoring service and may disrupt AI workloads, according to Lava. Lava reported the flaw to NVIDIA, which rated it 8.2 on the CVSS scale and published a security bulletin on…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below – CVE-2015-3306 (CVSS score: 10.0) – An improper access control vulnerability in ProFTPD that could…

Read more →

Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases

Read more →

As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The “Horizons of Identity Security” report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls,…

Read more →

Plus: Vance says U.S. will suspend Microsoft and other firms from green card program, and rogue pilots are a growing safety threat.

Read more →

​A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals worldwide. […]

Read more →

Microsoft has launched Execution Containers for AI agents on Windows 11, adding policy-based restrictions for file, network, process, and desktop access.

Read more →

The customer data stolen from global fashion retailer ASOS includes more than just names and contact details, raising questions about its early reassurances. As we reported earlier this week, ASOS customers received a push notification through the ASOS app alleging that the company had been hacked. ASOS has confirmed that attackers accessed customer information after tricking…

Read more →

DOJ and FBI seized China-linked hacking tools Microscan and FishHub, linked to Integrity Tech and attacks on critical infrastructure worldwide. The Justice Department and FBI took down two hacking tools this week, Microscan and FishHub, both built and run by a Beijing-based company with direct government contracts. The tools were used to scan, and in…

Read more →

FortiBleed attacks continue to target Fortinet FortiGate devices, with SOCRadar reporting more than 86,644 compromised devices across 194…

Read more →

Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year’s Windows Update certificate rotation. […]

Read more →

Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-107406 (CVSS score of 9.5), a critical flaw affecting NetScaler ADC and NetScaler Gateway that could allow remote code execution or denial-of-service (DoS) under certain conditions. The vulnerability is…

Read more →

The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group

Read more →

Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when available, how to fix them. The service builds on Anthropic’s experience with Project Glasswing, which…

Read more →

The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure notice (Source: US Department of Justice) According to the US Department of Justice, the hackers worked…

Read more →

Dell is bringing Nvidia’s RTX Spark technology to its XPS laptop lineup, offering up to 128GB of unified memory in a portable system designed for demanding AI and creative workloads. The company revealed additional specifications, pricing, and preorder details for the XPS 16 Creator Edition on October 7. The laptop starts at $3,799.99 and combines…

Read more →

Technology companies are directing a growing share of their spending toward IT services as investments in artificial intelligence reshape procurement priorities, according to new research from Coupa. The company’s Q3 2026 Business Spend Index (BSI), released October 8, found that IT services accounted for 14.1% of high-tech spending in 2026, up from 8.8% in 2023.…

Read more →

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site’s .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the…

Read more →

Deeper Network Promo

In my last article, I described the SOC Triangle, the longstanding trade-off among quality, consistency and cost efficiency in security operations. AI is starting to loosen that constraint by enabling certain kinds of work with greater depth and consistency, without requiring a linear increase in headcount. That raises the next question I hear from security…

Read more →

As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI securely

Read more →

SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and correspondence, giving them control over where their primary email address is shared. The service is open source and supports self-hosting. Getting started I tried SimpleLogin using a Gmail address. After verification, the dashboard…

Read more →

Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. […]

Read more →

Three research teams broke into Google’s Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas Labs $300,000, the contest’s…

Read more →

Broadcom has addressed CVE-2026-59346, a critical integer-overflow vulnerability affecting VMware Workstation and VMware Fusion. The flaw carries a CVSS score of 9.3 and can allow an attacker with administrative privileges inside a virtual machine to cross the virtualization boundary and execute code on the underlying host. The issue resides in VMware’s VMXNET3 virtual network adapter…

Read more →

Meta is using AI to detect Facebook ads that direct users to child exploitation content, while testing its safety systems for weaknesses and evasion tactics.

Read more →

Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. “CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions,” Citrix said. The vulnerability

Read more →

Microsoft says its newest Surface can run AI models exceeding 120 billion parameters locally, depending on configuration. Microsoft has opened preorders for the Surface Laptop Ultra, with the first systems shipping Oct. 16. The laptop starts at $2,599 and is aimed at developers, creators and users who want to run demanding AI workloads locally rather…

Read more →

Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner’s Office

Read more →

CrowdStrike analyzes open directories left by an attacker who used the ARTEX AI pentest tool and LLMs to breach South Korean financial firms. CrowdStrike published a research on a campaign against South Korean financial organizations that ran from late September to early October 2026 and ended with stolen data. The attacker left their working notes…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

An image-to-3D API can add asset generation to a game tool, product configurator, creator platform, or internal content pipeline.

Read more →

The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon. To that end, the agencies seized several domains and blocked access to platforms that were used to scan, and in some cases infiltrate, U.S.…

Read more →

September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs reported. Despite this massive number, only two, CVE-2026-85880 and CVE-2026-81963, were reported Known Exploited and none were…

Read more →

A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, VP of Rapid7 Intelligence, explains why its operators go after mail gateways and other edge devices that can’t…

Read more →

The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws. […]

Read more →

Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The systems range from login screens to a turbine control page that offers a Stop button to anyone with a browser.…

Read more →

Everpure APJ CTO Matt Oostveen wants Australian organisations to define a minimum viable company. The challenge is knowing what would still work if a critical supplier became…

Read more →

The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. Developed with industry stakeholders, the document addresses governance, deployment, access controls, testing and the application of PCI standards. Its recommendations are advisory, and…

Read more →

Ninety percent of companies want to move toward autonomous IT operations over the next two years, with agentic AI, software that plans and carries out multi-step tasks on its own, doing the work. Yet 77 percent say their own organization hesitates to let AI make an operational decision without a human approving it. Most of…

Read more →

Microsoft has launched Microsoft Execution Containers MXC, a policy-driven security layer designed to contain AI agents, alongside new Surface hardware built for running AI…

Read more →

Google seems to be making a strategic play to control the AI infrastructure layer, not just roll out another shiny new agent. At its Gemini at Work 2026 event this week, the tech giant unveiled what it calls a “single, universal agent” and API in Gemini that can be kicked off from a simple prompt…

Read more →

Highly skilled helicopter and drone pilots are spearheading a precise aerial operation to string thousands of kilometres of cabling across hundreds of steel towers as…

Read more →

Acer has launched its first Googlebook, the Googlebook 14, entering a new category of laptops built for Google’s Googlebook OS with Gemini Intelligence at its core.

Read more →

New integration pairs Forcepoint’s AI-native data discovery and classification with BeyondTrust’s identity risk detections, revealing the sensitive data behind each risk and…

Read more →

Fifth annual Horizons of Identity Security report reveals a 40x gap between AI adoption and identity security readiness

Read more →

AI-assisted migration, expert services, and flexible commercial models make it faster, lower-risk, and more affordable to consolidate legacy communications systems

Read more →

Saviynthttps://saviynt.com/, a leading provider of identity security, today announced the appointment of Clinton Mottram as Head of Application Identity Security for Asia…

Read more →