The Nvidia-backed company is targeting an IPO in 2027.

Read more →

The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system.

Read more →

Microsoft is ending support and updates for Office 2021 on October 13. What does that mean, and what are your alternatives?

Read more →

UK fashion retailer ASOS confirmed a data breach Tuesday after hackers sent unauthorized push notifications through its mobile app while claiming to have stolen customer data from the company’s Snowflake environment. […]

Read more →

A number of studies reported a decline in tech jobs in September as the US continues to get squeezed by geopolitical and economic instability. Tech consortium CompTIA said 10,350 positions in the technology sector were lost in September, lower than the 14,700 positions cut in August. But economy-wide, tech jobs — which include IT roles…

Read more →

You’re building a data agent that lets business users ask questions about lakehouse data in natural language. You’ve already built governance policies that control who can access which datasets. The challenge is making the agent respect those rules without rebuilding them in your application code. When a user asks a question, the agent maps it…

Read more →

Plus, AI agents attack South Korean banks, and will we spend as much on AI as we do on food?

Read more →

RobCo has joined the robotics unicorn club as manufacturers look for more flexible ways to automate factory work. The Munich-based startup said Monday that it surpassed a $1 billion valuation through a transaction combining new investment with a secondary share sale, giving long-standing employees an opportunity to sell part of their holdings. The milestone comes…

Read more →

A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes through browser-in-browser attacks. […]

Read more →

ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog’s length limit

Read more →

Microsoft has released an out-of-band security update addressing CVE-2026-96940, a high-severity vulnerability in Microsoft Exchange Server that could allow authenticated attackers to access other users’ mailboxes and read sensitive emails and attachments. The flaw carries a CVSS score of 8.8 and affects multiple on-premises Exchange Server versions. The vulnerability comes amid growing security concerns surrounding…

Read more →

Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight widely used Data Center products, including Jira, Confluence, and Bitbucket. The flaw, assigned a CVSS 4.0 score of 9.3, could allow unauthenticated attackers to access sensitive files on vulnerable servers without requiring valid credentials or user interaction. The vulnerability highlights the growing risks…

Read more →

Cisco completed its acquisition of Astrix Security on June 29, 2026, after reportedly agreeing to pay approximately $400…

Read more →

When it comes to consumer protections, Europe is following its own path. That may be visible in its quixotic-seeming decisions that allegedly prevent Apple from introducing Siri AI in the European Union. It’s time to begin to grapple with what those decisions mean. I think the EU has got it wrong in how it has chosen to enforce…

Read more →

Thousands of global fashion retailer ASOS customers have received a push notification through the ASOS app this morning alleging that the company has been hacked. The notification, addressed to ASOS’s data protection officer and IT, says: “ASOS HACKED Dear Asos DPO and IT, we have fully compromised ​the Snowflake instance. Engage with us, or we…

Read more →

Microsoft released emergency updates for Exchange Server to fix CVE-2026-96940, a high-severity flaw that can let attackers gain higher privileges. Microsoft has released out-of-band security updates for Exchange Server to fix a high-severity vulnerability tracked as CVE-2026-96940 (CVSS score of 8.8). The flaw is caused by weak authorization and can allow an authenticated attacker to…

Read more →

RMM platforms give MSPs privileged access across customer environments, making their security controls critical to limiting risk. Acronis outlines eight controls MSPs should test when evaluating RMM software, from patching and privileged access to recovery and tenant isolation. […]

Read more →

Nikkei says two employee cloud accounts were accessed, with one used to send 9,000 phishing emails

Read more →

Anaconda has announced new capabilities across the Anaconda Platform that pair agentic development with autonomous security testing. The expansion brings agent swarms and autonomous red-team agents together with trusted packages, models, and environments to help builders ship faster and address security weaknesses before production. Builders gain greater choice in the tools and models they use,…

Read more →

Rogue OpenAI agents made unauthorized edits on Wikimedia wikis and sent millions of automated requests to Wikimedia’s public APIs, traffic that may have contributed to a partial outage of the Wikidata Query Service in May, the Wikimedia Foundation said on Monday. “The Wikimedia Foundation conducted its own investigation to see whether Wikimedia websites had been…

Read more →

AppViewX has expanded capabilities for Agent Identity Security, a solution enabling enterprises to discover every agent, whether sanctioned or shadow; govern their posture and maintain audit-ready activity logs; and monitor and control in real time every action that the agent performs. AppViewX now also issues quantum-resilient agent identities, so trust in every agent holds as…

Read more →

New Relic has announced New Relic Ground Truth CLI augmented with New Relic Autopilot API, bringing headless observability straight to developers and AI agents in their natural workflows. The new command-line interface (CLI) allows teams to investigate production issues, assess recovery criteria, and embed live system evidence into their daily workflows without leaving the terminal.…

Read more →

NinjaOne RMM is a cloud-based remote monitoring and management platform designed for managed service providers (MSPs) and internal IT teams managing distributed endpoints. Formerly known as NinjaRMM, the platform combines endpoint monitoring, patch management, automation, scripting, alerting, and remote access in a centralized console.  Our assessment finds NinjaOne particularly well suited to MSPs and IT…

Read more →

NinjaOne RMM is a cloud-based remote monitoring and management platform designed for managed service providers (MSPs) and internal IT teams managing distributed endpoints. Formerly known as NinjaRMM, the platform combines endpoint monitoring, patch management, automation, scripting, alerting, and remote access in a centralized console.  Our assessment finds NinjaOne particularly well suited to MSPs and IT…

Read more →

SailPoint has announced significant new capabilities across SailPoint Agentic Fabric (SAF) and SailPoint Human Fabric (SHF), the two purpose-built products of its Identity Security solution, built on SailPoint Atlas. These innovations give enterprises visibility into every hidden AI tool, continuous compliance across human and machine workflows, the replacement of permanent access keys with temporary permissions,…

Read more →

September delivered another wave of consolidation across the IT channel, with GTIA acquiring The ASCII Group, Softcat striking a $1.05 billion deal for General Datatech, and MSP, cybersecurity and AI providers expanding through acquisitions. The deals spanned managed services, security, cloud infrastructure and AI, underscoring continued pressure on channel companies to add scale, geographic reach…

Read more →

Silver Springs, United States / Maryland, 6th October 2026, CyberNewswire

Read more →

Plus, NYC lawmakers weigh AI guardrails

Read more →

The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers

Read more →

Torrance, Californina, 6th October 2026, CyberNewswire

Read more →

New York, New York, 6th October 2026, CyberNewswire

Read more →

Open models are vying to become the everyman defense solution for a growing swarm of agent breaches.

Read more →

September brought a wave of leadership changes across the IT channel, with new CEOs, channel chiefs and senior executives taking roles across cybersecurity, AI, cloud and managed services. Among the month’s most notable moves, Apple named John Ternus CEO, KnowBe4 appointed Kurt Mills as channel chief, while Proofpoint, TensorWave and Lightning AI expanded their executive…

Read more →

Intellias has launched Agentic ServiceOps a managed IT service that applies governed agentic AI across IT service management (ITSM) and IT operations management (ITOM), from the service desk to the infrastructure behind it. It helps organizations resolve more IT work end to end, breaking the link between rising complexity and rising costs. Intellias’ Agentic ServiceOps…

Read more →

AXON Networks has announced AXON Datum, a data management and secure sovereign governance layer that helps service providers, enterprises, and institutions such as governments control how information is accessed, protected and moved in an AI world. Critical to the success of every telecom and government moving into agentic AI who want the data and AI…

Read more →

Deeper Network Promo

Attackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a critical arbitrary file access vulnerability with a 9.3 CVSS score, affects all versions of Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo…

Read more →

Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cryptography

Read more →

Facebook users are reporting receiving a message with a fake Facebook Marketplace listing that has their name as the seller. It works like this. You receive a message (in this case iMessage) asking “Is this still available for purchase?” Attached to the message is a fabricated Facebook Marketplace listing. Tapping on the picture, you might…

Read more →

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker’s code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro. The attack works only when the program’s Java support is enabled. So far, it has…

Read more →

A new Linux backdoor is turning vulnerable internet-facing devices into remotely controlled proxy nodes, while using the public Session Traversal Utilities for NAT (STUN) infrastructure to blend into normal VoIP and WebRTC traffic. Fortinet’s FortiGuard Labs said it has been tracking the malware, dubbed ClingSTUN, across multiple attacks exploiting known vulnerabilities in routers, IoT devices,…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached through a Snowflake breach

Read more →

Companies continue to invest in AI, automation, developer tools, and other new technologies. But they may not get the results they expect if IT workers don’t have the time, resources, or freedom to learn how to use them. IT workers may be afraid to try new tools if they think a failed experiment could hurt…

Read more →

The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a May outage. […]

Read more →

A coalition of cyber firms and critical infrastructure operators on Tuesday spelled out its views on the tasks that the Cybersecurity and Infrastructure Security Agency should assign federal agencies to protect operational technology systems after this summer’s attacks on water utilities. The Operational Technology Cybersecurity Coalition said a CISA binding operational directive (BOD) for OT…

Read more →

Editor’s note: This research was conducted by Himanshu Anand, an independent cybersecurity researcher (follow Himanshu on X). During Cybersecurity Awareness Month, ransomware remains one of the clearest examples of how a cyber incident can become a business continuity issue. IronChain shows why. It puts business-critical data at risk of permanent loss and can bring operations…

Read more →

The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, and edit Wikipedia pages. “The unauthorized bot activities included edits to our wikis, some unsuccessful attempts to exploit a public note-taking tool we host, and…

Read more →

Domino’s Pizza customers tell us they have received emails saying they account has been accessed by a third party. Domino’s says its internal systems weren’t breached, but that individual accounts were logged into using a password and email combination stolen from another online account owned by the customer. This is known as credential stuffing. Here’s…

Read more →

In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows. The ecosystem around it fell short. Earlier this year, our team at OX Security, …

Read more →

When Anthropic CEO Dario Amodei urged other leading AI labs to “pace the frontier” last week, his calls for caution were echoed by other prominent voices in tech. Both Sam Altman and Elon Musk agreed with Amodei’s assessment that pausing AI development was essential to prevent the extinction of the human race. Amodei listed several…

Read more →

Dell is urging customers to patch a vulnerability (CVE-2026-86360) in Dell System Update (DSU) that could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. DSU is a tool used by enterprise IT administrators to apply driver, BIOS, and firmware updates to Dell PowerEdge servers. About CVE-2026-86360 CVE-2026-86360 is a path traversal…

Read more →

Learn how to use technology to fight distraction and improve focus with notification controls, site blockers, focus timers and task lists.

Read more →

Less than a week after Microsoft opened its new Frontier Partner specialization, eligible partners can now pursue a designation built around one of the company’s biggest channel priorities: AI agents. The specialization became available Sept. 30 and targets partners that can design, build, deploy, govern, and secure agents across Microsoft’s cloud, productivity, development, and security…

Read more →

Exclusive Networks launched a dedicated ServiceNow business on Oct. 1 to support partners across Europe and the Middle East, putting its July distribution agreement into operation. The cybersecurity distributor is targeting two groups with the rollout. Existing ServiceNow partners can use the business to expand into security, while Exclusive Networks partners can add ServiceNow-based workflows…

Read more →

Ontinue has announced the launch of ION for Dark Web Monitoring (DWM), a new managed add-on service that extends ION MXDR to continuously identify exposed credentials, detect brand impersonation attempts, and uncover emerging external threats before attackers can exploit them. Compromised credentials are traded across criminal forums, lookalike domains are created to impersonate trusted brands,…

Read more →

AI is accelerating the discovery of software vulnerabilities, but it is also creating a new bottleneck for defenders: deciding which machine-generated findings warrant investigation. Google has decided to temporarily stop accepting certain bug bounty submissions after a surge of largely invalid automated reports highlights a growing challenge for security teams as AI-driven vulnerability discovery begins…

Read more →

The fastest-growing category of enterprise software right now is also the least scrutinized from a security standpoint. AI application platforms — tools that let teams build, connect and automate AI-powered workflows without writing much code — are landing in production environments faster than security teams can assess them. They connect to your APIs, your databases,…

Read more →

Dutch haul comes despite European drugmakers and investors warning the region is losing ground.

Read more →

Transcend has launched Transcend Rails, a new category of agent management that goes beyond identity and access control to govern what an agent does. Every enterprise scaling AI agents hits the same wall: the board asks what agents did last quarter, and no one can reconstruct it. Or an agent deletes, exports, browses, or spends…

Read more →

The FBI confirmed multiple arrests in its ShinyHunters investigation after suspected member Saif al-Din Khader was reportedly detained in Jordan.

Read more →

Read more →

Hack The Box has introduced AI Range Enterprise Edition, making its platform for testing and measuring AI security agent effectiveness available to enterprise security teams. The offering enables organizations to evaluate whether their own AI agents can perform the cybersecurity roles assigned to them and make informed decisions about how to use agents across the…

Read more →

It seems that a trend started… I continue my journey discovering more RMM (“Remote Management & Monitoring”) tools abused by threat actors! A few days ago, I wrote a diary[1] about ScreenConnect used in the wild. Today, I found another one. Same scenario, it started with a phishing email that delivers a fake PDF invoice to the victim:…

Read more →

Oura pitched itself as a tech platform, but investors saw through that.

Read more →

GitHub’s ReviewBench measures how well AI code review tools detect problems before software is released. Available in research preview through its website, the benchmark lets users compare review agents and evaluate their own tools. Code review involves checking proposed changes for mistakes. ReviewBench measures AI reviewers’ ability to identify issues and avoid false alarms. Users…

Read more →

Accenture lost an FBI contract after a missed security patch exposed sensitive employee data, raising serious concerns over operational security. The FBI pulled an Accenture contractor off its account on Monday, and the reason is almost mundane compared to the damage it caused. One update didn’t get installed on time. “The ‌Federal Bureau of Investigation…

Read more →

Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails. […]

Read more →

Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward. Reports about supply chain compromises are still accepted,…

Read more →

Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually

Read more →

A data breach at Denmark’s Central Population Register (CPR) has exposed the personal information of 8.8 million people. These include people living in Denmark, deceased people and citizens who have moved abroad. The CPR is Denmark’s national register of residents, and the 10-digit CPR number it assigns to each person is used for everything from…

Read more →

Deeper Network Promo

Small businesses often have limited staff to handle marketing, customer service, and financial analysis. Meta’s latest Muse update aims to help automate some of that work, while giving MSPs and solution providers another tool to evaluate for customers. Meta announced Muse for Small Business on Sept. 29, adding business-focused skills and connectors to its existing…

Read more →

Gartner recently released a new category of security tools: the Integrated Security Operations Center (ISOC). This new category acknowledges the need to expand beyond traditional SIEM tools in the creation of a security portfolio, though, as they note in the introductory report, Security Information and Event Management (SIEM) isn’t going anywhere. Gartner’s evolution away from…

Read more →

Motorola is preparing to bring another premium Android option to the US, potentially giving channel partners a new device to consider for customers looking beyond Samsung and Google. Motorola has confirmed the Signature 27 will launch in the US, while Android Authority reports that the phone is coming in November. The company has not announced…

Read more →

An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims

Read more →

Attackers are increasingly weaponizing already-disclosed flaws rather than new zero-days, and AI tools may be accelerating how quickly they do it. According to a report from Google’s Threat Intelligence Group (GTIG), attackers have exploited more vulnerabilities in the wild thus far this year than they did all of last year. With the number of flaws…

Read more →

A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer’s network in a ransomware-style attack. […]

Read more →

Dell warns that a critical DSU flaw lets attackers run code as root. Customers should patch affected PowerEdge systems as soon as possible. Dell urged customers to patch a critical flaw, tracked as CVE-2026-86360 (CVSS score of 9.6), in its System Update (DSU) tool. The vulnerability is a path traversal issue that can let attackers…

Read more →

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product’s web application root directory. The attacker must already know a file’s exact name and path and cannot list what the directory holds. Atlassian disclosed the flaw, CVE-2026-21589, on October…

Read more →

The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That’s according to a report from Reuters, citing two sources familiar with the matter. “To date, our review has determined that the incident…

Read more →

Fortinet details ClingSTUN, a Linux backdoor exploiting unpatched IoT devices and abusing public STUN servers to route traffic past NAT. FortiGuard Labs researchers spotted a Linux malware family they call ClingSTUN, and the name gives away its trick immediately. Instead of relying on a dedicated command server, the malicious code leans on STUN, the protocol…

Read more →

New OMNI agents translate each policyholder’s risk signals into prioritised, plain-language actions, with clear evidence supporting every recommendation.

Read more →

Modern digital platform sets the foundation to support growth, innovation and future AI-enabled regulatory services for the State

Read more →

Thwaites will lead regional execution of BeyondTrust’s expanded global partner-first strategy, helping partners build and scale profitable BeyondTrust practices across APAC…

Read more →

In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She says no single leader can own all of it, so partnerships across technology, risk, legal, and business teams matter most. Barron-DiCamillo also weighs…

Read more →

Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark’s national population register, the country’s digitalization ministry said on October 5. They used a private Danish company’s lawful right to look up records in the Central Person Register (CPR). The ministry has told…

Read more →

Superloop’s Self-Service App That Puts Customers in Complete Control has been recognised in the 2026 Australian Good Design Awards, Australia’s longest-running international…

Read more →

Johnstone to lead Australian business as Todd Gorsuch becomes Group Chief Executive Officer to accelerate and execute global expansion plans.

Read more →

Distribution agreement brings BMC Helix’s agentic AIOps and ServiceOps platform to ANZ enterprises tackling skills shortages and multi-cloud complexity

Read more →

As automated exploits dismantle traditional defence models in hours, Rapid7 unites threat intelligence, vulnerability research, and Rapid7 Labs to end reactive cybersecurity…

Read more →

Vaisala, the global leader in measurement instruments and intelligence for climate action, has launched the Vaisala Indigo…

Read more →

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser’s cache. “Instead of downloading and executing remote payloads like the typical attack pattern, in this attack, the websites pre-fetch a script payload into the browser cache disguised as a PNG file,” the…

Read more →

Reflection AI has built Beam, a 501-billion-parameter open-weight model for coding and agent tasks, and plans to publish the weights under an Apache 2.0 license later this month. Open-weight means developers can download the trained model and run it on their own hardware. Beam uses a mixture-of-experts design, so 23 billion of its parameters fire…

Read more →

Security budgets rarely stretch to cover a full NIS2 programme in one pass. Credential controls are where a constrained team can start, because they make access visible, revocable, and reviewable without new infrastructure. NIS2 compliance rests on risk-management measures that fit the actual risk an organization faces under Article 21, with the choice of specific…

Read more →

Webroot Mobile Security combines device security checks, Safari protection, text scam filtering, and data breach monitoring. It is available for iPhone, iPad, and Android devices. The app requires an active Webroot subscription and is included with Essentials, Premium, and Total Protection. The home screen displays subscription status, a Scan Now button, the last scan time,…

Read more →

Associate IAM Engineer New York City Office of Technology & Innovation | USA | On-site – View job details As an Associate IAM Engineer, you will support daily identity and access management operations in Microsoft Entra ID and related platforms. You will manage users, groups, access provisioning, and role assignments, resolve authentication issues and support…

Read more →

Dell’s security team has had a busy week. The company has announced a slew of Common Vulnerabilities and Exposures (CVEs) impacting its Dell Container Storage Modules (CSM) and Dell System Update (DSU). Disclosed by Dell in two security notices, these critical vulnerabilities could allow unauthenticated attackers to “completely bypass” authentication controls, gain root access, manipulate…

Read more →

A recent compromise of PeopleSoft by hacking group ShinyHunters is causing new concerns for enterprise users of the Oracle product, with analysts recommending extreme measures in response. Law enforcement has made some progress in its pursuit of the cyber criminals involved. On Saturday, Reuters reported that a suspected member of ShinyHunters had been arrested by…

Read more →

Citrix customers just got through back-to-back weekends filled with varying levels of uncertainty and worry, as yet another actively exploited zero-day vulnerability was discovered in Citrix NetScaler products. Researchers and security experts said the vulnerability — CVE-2026-88779 — is less concerning because exploitation triggers denial of service and only impacts instances that have SAML (security…

Read more →

New OG05D 2.2-micron global shutter sensor features Nyxel® technology, HDR, low power consumption and compact optical formats to enable next-generation industrial vision systems.

Read more →