The lawsuit alleges that the AI company failed to notify law enforcement and calls out product safety gaps.

Read more →

Ireland’s DPC fined Google €403 million over GDPR violations involving location data, transparency, retention and user control. Ireland’s Data Protection Commission (DPC) just fined Google €403 million, and the case behind it goes back six years, to a set of complaints that never really went away. The DPC launched the investigation in February 2020 after…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical. […]

Read more →

ShinyHunters defaced Clop’s Dark Web site and claims to have stolen victim data, potentially exposing organizations that paid ransoms to renewed extortion attempts.

Read more →

Orca Security has launched a new global partner program alongside an AI-powered Partner Success Platform (PSP) designed to automate demand generation, account research, enablement, and other day-to-day work for its channel partners. The new Partner POD Program rewards partners across the customer lifecycle, including net retention, while the platform uses AI to help partners identify…

Read more →

Huawei Cloud unveiled a new set of enterprise AI products at HUAWEI CONNECT 2026, bringing computing, memory, models, agent development and industry applications under what it calls “Agentic Infra.” Dr. Peter Zhou, director of the board at Huawei and CEO of Huawei Cloud, said infrastructure in the agentic AI era must go beyond providing compute.…

Read more →

Victims have been identified in Africa, including in Kenya and Uganda.

Read more →

Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed ‘Click2Shell’ that affects the platform’s Core component. […]

Read more →

Hackers targeted two Colorado water utilities, changing OT settings and disabling alarms, but causing no impact on water services or safety. Foreign hackers targeted the operational technology (OT) systems of two small private water utilities in Colorado in late August, apparently trying to disrupt operations. Local authorities haven’t identified the affected utilities or the attackers.…

Read more →

Microsoft will retire the Calendar, People, and Files Microsoft 365 companion apps on December 16 and has asked admins to remove them from managed devices. […]

Read more →

Only one in ten UK IT, compliance, and security professionals surveyed by VinciWorks are confident their organizations could meet a proposed 24-hour cyber incident notification requirement as the Cyber Security and Resilience Bill moves through Parliament. The proposed legislation would extend the UK’s existing cyber security regime to managed service providers (MSPs), data centers, and…

Read more →

Children’s smartwatches are hugely popular in China for preteens, with some models offering advanced location tracking

Read more →

A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17. Microsoft’s own hardware-compatibility program signs the driver, scored zero detections on VirusTotal…

Read more →

The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and siphoned funds or account credentials from over 7,000 cryptocurrency wallets, according to a new joint cybersecurity advisory. The primary targets of the campaign are individual web designers, engineers, and specialists in cryptocurrency,

Read more →

Washington has resisted such calls, with Treasury Secretary Scott Bessent saying last week that AI labs shouldn’t receive a “liability exemption, which is what they are asking for.”

Read more →

European AI companies are pushing back on calls to slow frontier model development, warning that some safety requirements could strengthen the position of the companies already leading the market. Mistral and other European developers have challenged proposals from major U.S. AI labs for slower capability growth, coordinated safety standards and stronger independent evaluations. Their concern…

Read more →

Google has been fined €403 million for breaking the EU’s data protection law, the GDPR, in the way three of its features handled people’s location data from May 2018 to February 2020. Ireland’s Data Protection Commission (DPC), Google’s lead regulator in the EU, also ordered the company to make its processing comply with the law within 6…

Read more →

A value-added reseller (VAR) is an IT company that resells hardware, software, cloud services, or other technology while adding its own services or expertise. Unlike a basic reseller that primarily sells a product or license, a VAR typically adds value through services such as consulting, configuration, customization, systems integration, implementation, training, cybersecurity, or technical support.…

Read more →

Manus is testing how much its independence is worth. AI agent startup Manus is in talks to raise about $500 million at a valuation of roughly $4 billion, marking its first major fundraising effort since separating from Meta, according to The Wall Street Journal. Potential investors include IDG Capital, Boyu Capital and Chinese battery maker…

Read more →

Agentic AI is beginning to change not just how software works, but how vendors charge for it. As autonomous agents take on work once performed by employees, enterprise buyers are increasingly moving beyond traditional per-seat subscriptions and long-term SaaS contracts toward consumption-based pricing, individual actions, or measurable outcomes.  Salesforce, Intercom and Zendesk are already experimenting…

Read more →

This week on the Lock and Code podcast… If you want AI to tell you a story, it will. If you want that story to sound like one of your favorite authors, it can. And if you’re one of the authors that AI can imitate, you might be a little upset at what feels like…

Read more →

Two separate reports of security flaws in OpenAI systems highlight how even a company spending billions on developing its own AI-powered cybersecurity testing tools remains vulnerable. In one incident, researchers breached OpenAI systems with the help of a rival AI developer’s tools, while another group of researchers tricked OpenAI’s Codex agent into bypassing its sandbox…

Read more →

Got an iPhone 15 Pro, Pro Max, or 16? Apple is doling out $250 million – here’s how to qualify and file a claim to get your cut.

Read more →

A group of leading House Democrats introduced legislation Monday requiring the Cybersecurity and Infrastructure Security Agency to conduct an assessment of its workforce to determine whether it’s up to the task after the exit of around 1,000 employees during President Donald Trump’s second term. The concept of a force structure assessment is more common in…

Read more →

Ireland’s Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users’ location data. […]

Read more →

We found more than 100 subscription websites linked through the same toolkit and closely related developer details. Some impersonate existing products, including GPT-6 Astra, DaVinci Resolve, PixAI, and OpenCut. Another uses the name of Omegle, the chat service that shut down in 2023. Others promote unfamiliar brands with little verifiable information about who operates them.…

Read more →

Security teams investigating possible AI-related security events need guardrail intervention data alongside their existing security telemetry. When a guardrail identifies or blocks a prompt injection attempt or redacts sensitive data, that intervention carries additional investigative value comparable to a failed sign-in or a network intrusion alert. AWS Bedrock publishes this telemetry to AWS CloudWatch metrics…

Read more →

Discover how Cisco security solutions and the four pillars of agentic security protect organizations against autonomous AI risks and evolving threats.

Read more →

The Irish DPC found that Google users were unaware that their location was being used to influence them with ads

Read more →

Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about how they are adopting and implementing artificial intelligence (AI) into their organizations.  

Read more →

The AI giant disclosed six examples of concerning model activity and published a new framework for investigating and disclosing such incidents.

Read more →

Researchers have disclosed how a malicious HEIF image uploaded to OpenAI’s public community forum ultimately opened a path to the company’s internal GitHub environment. Hacktron published the full attack chain on September 13, detailing a July 25 compromise of OpenAI’s Discourse-hosted forum that researchers chained with a separate single sign-on flaw. The group gained access…

Read more →

Deeper Network Promo

Microsoft has fixed a known issue that causes copy-and-paste failures for Excel users after installing the September 2026 security updates. […]

Read more →

Sekoia said Exvicy, a new ClickFix MaaS framework, reused code from rival service ErrTraffic

Read more →

Blocking suspicious install scripts may no longer be enough to mitigate threats from malicious JavaScript dependencies used in software supply-chain attacks. Security researchers at Checkmarx are warning of attackers using a malicious package called “indexed-btree” to impersonate the legitimate sorted-btree library, to spread malware hidden in the package’s normal runtime code. The campaign abandons the…

Read more →

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people already trust: code that takes a bad turn, old payloads coming back, exposed systems, weak checks, fake fixes, and attack paths that look almost too easy. Even the research…

Read more →

Google says one of its Gemini models accessed systems belonging to three real companies during a cybersecurity evaluation in May. The model reportedly guessed credentials in one case, while finding exposed credentials in public repositories in two others. Google says Gemini stopped once it recognized that it had reached real infrastructure and that the affected…

Read more →

Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive data from compromised hosts. The backdoor “automatically harvests and exfiltrates business documents, watches the filesystem for new files in real time, steals Wi-Fi passwords and clipboard contents, takes screenshots, and accepts arbitrary

Read more →

The FBI’s CJIS Security Policy v6.1 strengthens requirements around encryption and vulnerability scanning while continuing the shift toward more continuous security assessment. Specops explains what changed and how agencies can address password, MFA, and identity requirements as they prepare for upcoming audits. […]

Read more →

Researchers have taken apart TASK#STOMP, a Windows backdoor that searches a victim’s drives for business documents, uploads them to attacker servers, and then stays put to grab each new or edited document. The same malware steals saved Wi-Fi passwords and clipboard text, takes screenshots, and runs whatever command its operators send. Akshay Gaikwad and Aaron…

Read more →

Readiness tagging for AI, always-on observability, and coordinated kill switches at the application layer give enterprises a defensible route to scaling agents while keeping authority in human hands. New York, London – September 15, 2026 – Orchid Security, which unlocks safe AI adoption by solving identity at its core, today unveiled a set of AI…

Read more →

Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server. Blackpoint’s Adversary Pursuit Group was chasing a ClickFix campaign spreading an unknown RAT namend ChainScript. The malicious code is a previously undocumented Node.js remote access trojan that hides its command server on a public blockchain. The…

Read more →

CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenance

Read more →

Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions after it retires SMS first-factor sign-in starting in February 2027. […]

Read more →

Nobody picked the browser to run the workplace. It just happened. Related: The year of the enterprise browser HTML5 matured. SaaS spread. One business application after another moved into a tool designed to browse the public internet. Security and privacy problems followed. AI has made the arrangement harder to govern. The cybersecurity industry is now…

Read more →

Fastly has announced AI Runtime Control, AI Firewall, and new API Security capabilities designed to give organizations real-time visibility and control across their AI systems. Expanding the Fastly for AI portfolio, these new capabilities help organizations govern AI model access and usage, protect the AI applications powering their business, and control how AI agents access…

Read more →

Plus: Gemini Hacked Three Companies in First Known Breakout; Trump says he’s launching an ‘AI Force’.

Read more →

ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key operational data

Read more →

Attackers are targeting members of the Rust Project and maintainers of widely used crates (Rust code libraries), dangling attractive opportunities to compromise their devices and accounts and, ultimately, publish malware. The warning came last week from the Rust Project’s crates.io team and security response working group, and described a recurring pattern: a target is invited…

Read more →

Ireland’s Data Protection Commission (DPC) has fined Google €403 million (about $463 million) over its processing of users’ location data and ordered the company to bring that processing into compliance within six months. The inquiry examined Google’s practices from May 25, 2018, to February 4, 2020. The DPC launched it on its own initiative in…

Read more →

We know models cheat. A new benchmark measures how much, and on what tasks.

Read more →

Microsoft warned that the built-in File History backup feature in Windows may stop working on some systems after installing the September 2026 security updates. […]

Read more →

It’s the end of a very long era: As of October 2026, Microsoft Publisher, in the company’s words, “will reach its end of life.” That makes it 35 years since the desktop publishing tool was launched back in 1991. What does reaching end of life mean? That depends on what version of Publisher you use.…

Read more →

Scammers are posing as police officers and federal agents, threatening arrest unless victims pay up, the FBI warns. The FBI’s Internet Crime Complaint Center (IC3) updated an alert it first issued in 2022, citing “losses totaling more than $1.6 billion” between January 2025 and July 2026. According to the FBI, most complaints involve a caller…

Read more →

Plus: Crypto blew its big moment and now everyone is pointing fingers, and how Harley-Davidson became a tariff punching bag.

Read more →

Microsoft Security Research published an interesting blog post “TerminalFix campaign deploys a reverse tunnel through multistage intrusion” about a malware campaign. The aspect that I want to take a closer look at, is the fact that the threat actors used PNG files with steganography. I reached out to the researchers and they kindly shared the…

Read more →

A BYD Shark 6 was remotely hacked, exposing vehicle controls, location tracking and cabin audio, raising serious connected-car security concerns. A journalist drove a BYD Shark 6 down a country road outside Canberra while a hacker sitting on the shoulder killed the headlights with a keystroke. That’s not a hypothetical. It’s what happened during a…

Read more →

Reportedly, the ShinyHunters extortion group breached the leak site of one of its competitors, the Clop ransomware gang. ShinyHunters is a financially motivated cybercrime and extortion group active since 2019. It is known for stealing large volumes of data and pressuring victims to pay, rather than necessarily deploying ransomware. One recent high-profile organization targeted by…

Read more →

Read more →

Siemba has announced automated testing for insecure direct object reference (IDOR) as part of its API Security Testing capability, which tests REST, GraphQL and SOAP APIs for the vulnerability classes most likely to expose customer data. A 200-endpoint API collection can be tested for IDOR in under an hour. The same coverage has typically taken…

Read more →

A breach at image-sharing service Gyazo on September 11 affected over 23 million customers

Read more →

Every identity-compromise runbook I have written, read or inherited has the same step near the top: revoke the tokens. Reset the password, kill the sessions, invalidate the refresh tokens, then go hunting. It is the right instinct. Against adversary-in-the-middle phishing, where the whole prize is a stolen session cookie, revocation is the move that ends…

Read more →

Following a major data breach, Revolut customers are being sent convincing phishing messages

Read more →

Japanese software company Helpfeel has confirmed a data breach on its screenshot-sharing platform Gyazo, in which attackers exploited a vulnerability in its image upload server, stealing approximately 23.62 million user records and metadata tied to hundreds of millions of images. Gyazo is a cloud-based screenshot and screen-recording service that uploads users’ captures automatically and generates…

Read more →

Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. “ChainScript has appeared under multiple build names, including ComponentTask33, UpdateDigital, HostShared, and OrchidViolet66, while presenting itself as Spotify, Zoom Workplace, and Microsoft Teams software,” Blackpoint Adversary Pursuit Group (APG)

Read more →

AI agents are becoming the new attack surface, exposed to poisoned skills, prompt injection, jailbreaks and attacks through connected tools. I read the AI security research published in a single month, February 2026, and when you put it all together, it’s not a list of curiosities. It’s a field guide to a new attack surface.…

Read more →

Deeper Network Promo

Mario Platt spent part of last year eliminating a team. As CISO for online password management service LastPass, he shut down the company’s dedicated vulnerability management function in late 2025, folding its responsibilities directly into IT and product security. AI and business intelligence tools now handle the triage and analysis that once required a standing…

Read more →

Most US businesses don’t decide to bank internationally. They drift into it. A supplier in Vietnam needs paying, a client in Germany wants to be invoiced in euros, a contractor…

Read more →

A 2017 UK assessment warned that police data on Microsoft Azure could face foreign access risks. The risks may still exist. A Guardian investigation has surfaced a 2017 document signed off by then City of London police commissioner Ian Dyson, who also held the title of senior information risk owner for the entire country. That…

Read more →

The state of a business’s short-term capital is an oft-overlooked aspect of a business’s overall financial health.

Read more →

Last week on Malwarebytes Labs: New Android malware uses AI to steal bank logins and PINs Did an AI really try to break free from human control? Fake parcel delivery messages steal your card and bank details Flock cameras are tracking people as well as cars Revolut phishing texts appear days after data breach 12…

Read more →

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based “much smaller organization” in the information technology (IT) services industry, once again highlighting how the adversary continues to target developers to breach target networks. Cybersecurity company SentinelOne, which disclosed details of the activity, said it involved the…

Read more →

In this Help Net Security interview, Guilherme Joventino, COO of MIGNOW, explains why some large companies plan to stay on ECC past the 2027 deadline and pay SAP for extended support until 2030. The interview covers what that choice may cost, why fear of disruption stalls projects more often than budget, and what the first…

Read more →

Helmit is a parental control app that combines AI-powered social media monitoring with screen time management, web filtering, location tracking, and safety alerts. It identifies potentially concerning interactions and surface the messages associated with an alert. Helmit is available on iOS, Android, macOS, and Windows. Parents can create profiles for their children and connect supported…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

Gopass is a free, open-source password manager that stores credentials in an encrypted store and runs from the command line. Its maintainers built it as a drop-in replacement for pass, the standard Unix password manager. Out of the box, Gopass encrypts each secret with GPG and keeps the store in a git repository. Git gives…

Read more →

Intent-based networking (IBN) lets operators state the outcome they want and leaves its translation into network policy to software, an approach AI-native 6G designs have moved to the forefront. Researchers at the University of Ottawa and Nokia Bell Labs argue that this abstraction gives attackers new openings, and it tests two machine-learning detectors against one…

Read more →

Forty percent of large companies had an AI-related compliance or governance issue in the past 12 months, according to 1,000 senior IT, operations, and transformation leaders surveyed by Sapio Research. Those leaders said process-related problems contributed to 84 percent of the incidents. The researchers trace the exposure to workflows designed around people. Approvals, handoffs, and…

Read more →

Cyber risk hasn’t just grown. It’s moved. And our conversation needs to shift. While most organisations are securing the right things, they’re doing so in the wrong place. For…

Read more →

This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is…

Read more →

Somewhere today, sensitive encrypted information taken from a government agency, business, or critical infrastructure operator may already be sitting in an adversary’s archive….

Read more →

Ransomware is surging in 2026, although few stories are grabbing the global attention that was much more common a few years back. Here’s what you need to know.

Read more →

The company most Australians know as the thing you install when Mum’s printer stops working now wants to run your endpoint fleet on autopilot. I visited Tech in Gov 2026 to…

Read more →

Senior executives are spending less time at large AI conferences and more time in small rooms with peers. The shift is practical rather than fashionable. A conference tells you…

Read more →

Read more →

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added [1, 2] the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2025-39682 – Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CVE-2025-39964 Linux Kernel Race Condition Vulnerability CVE-2026-53266 Linux Kernel…

Read more →

Plus, a smarter Siri arrives on iPhones, the real threats of artificial intelligence, Anthropic’s IPO timing and more.

Read more →

An ongoing npm malware campaign involving the ‘indexed-btree’ package shows how threat actors bypass supply chain defenses by hiding malicious code in a package’s normal runtime behavior rather than in installation scripts. […]

Read more →

An AI-generated intelligence report falsely identified weapons on a Chinese ship, nearly triggering a US military operation during the Iran war. According to CNN, four sources familiar with the episode say an intelligence report circulated through the military claiming a Chinese vessel in the Middle East was carrying components for a nuclear weapons program. The…

Read more →

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Gray Rabbits and the Tale of a One-Click Backdoor   Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot…

Read more →

Researchers escaped OpenAI’s Codex sandbox two ways, one running commands on a developer’s machine from its most locked-down mode. OpenAI has patched both. […]

Read more →

The Cybee session at the 69th IT Press Tourhttps://www.itpresstour.net/ in Ljubljana opened with an admission that had nothing to do with backup.

Read more →

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What we know about the Revolut data breach so far Someone impersonating a government agency, using an email address on that agency’s domain, obtained sensitive customer records from Revolut. The bank confirmed the incident on Saturday, September 12. DeepZero: Open-source…

Read more →

CEO Shayne Coplan brushed off concerns about a scheme involving stolen debit cards. Now the prediction market is bolstering its executive ranks as it eyes an IPO.

Read more →

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Google Gemini also Broke Out of Its Test Environment AI Helps Hackers Hijack OpenAI Staff Accounts Through…

Read more →