It is clear that keeping hackers out confidentiality and systems up availability is no longer enough. There’s a critical third pillar: Integrity. Organisations must be able to…

Read more →

Proton Drive is an end-to-end encrypted cloud storage service for storing, synchronizing, backing up, and sharing files. It also includes Proton Docs and Proton Sheets, allowing users to create and collaborate on documents and spreadsheets within the same encrypted environment. Proton Drive is available through the web and dedicated apps for Windows, macOS, iOS/iPadOS, and…

Read more →

Google DeepMind has built SynthID Bio, a watermark for AI-designed proteins, and shown in wet-lab tests on protein binders that it leaves their function intact. The method hides a signature in the amino acid sequence of a designed protein and in the atomic coordinates of a predicted 3D structure. DeepMind says the signature can be…

Read more →

New global subscription brings software updates, eLearning and support together in a single recurring service, giving customers a simpler way to keep mission-critical…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

October is Cyber Security Awareness Month, an opportunity for all Australians to strengthen their cyber security knowledge and take practical steps to protect their devices,…

Read more →

The risks of cognitive and emotional dependence, along with falling test scores, are fueling a backlash.

Read more →

2026 Trends in Access Controllers Report finds interoperability, cloud connectivity and AI are reshaping long-term controller strategies

Read more →

Newest capabilities help security teams build complete cryptographic inventories, understand dependencies, and act on risk as they prepare for crypto-agility

Read more →

Vistar Mediahttps://www.vistarmedia.com/our-story, the leading global provider of technology solutions for out-of-home OOH mediahttps://www.vistarmedia.com/blog/what-is-oohand…

Read more →

New Diligent Market Intelligence shows long-term incentives make up 45% of ASX 200 CEO pay, as boards tie rewards more closely to performance amid continued scrutiny

Read more →

Automated certificates built for today and hardened for the era of quantum computing, now available to everyone

Read more →

ClickHouse, the company behind the open-source, real-time analytical database that has become the data layer for the AI era, today at The European Microsoft Fabric + SQL…

Read more →

Peacock Grouphttps://www.peacocks.com.au/ is expanding its Victorian operations, with a new 8,000 sqm Dandenong South purpose-built facility set to bring Peacock Bros. and…

Read more →

Greg Brockman has faced backlash from employees who support stronger artificial-intelligence regulations.

Read more →

When social media first came out, many of us thought it was a wonderful, free way of connecting with friends and family. Suddenly, you could reconnect with long lost relations…

Read more →

Australian organisations are placing greater emphasis on AI security controls and threat detection than CISOs globally, according to new Gigamon research examining the security…

Read more →

Take control of your security outcomes.

Read more →

Three-year, USD$500 million contract vehicle supports accelerated deployment of counter-UAS capabilities for U.S. homeland defence

Read more →

A remittance product needs both a system for managing transfers and organisations able to move funds along the chosen route. Remittance software can record instructions, apply…

Read more →

Businesses need more video than they can produce. Marketing wants it, internal communications want it, training and product teams want it, and every channel that matters…

Read more →

Remote work turns every home router—and every airport hotspot—into a security risk. Before you choose a tool, remember the core differences: a traditional VPN encrypts all…

Read more →

OpenAI said it disrupted a “coordinated campaign” to distill and extract reasoning capabilities from its AI models, pointing the finger at a Chinese rival. On Wednesday, OpenAI said it first spotted low-level activity on July 1 that gradually increased until July 24 and 25, when it observed 16,000 prompts from 4,000 users that fit a…

Read more →

Washignton, DC, USA, 30th September 2026, CyberNewswire

Read more →

Nvidia CEO Jensen Huang was among the executives at Tuesday’s White House event who called out the Anthropic leader for his warnings about the technology’s capabilities.

Read more →

In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecting users.

Read more →

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed “RedFlick” to deploy its signature CosmicPulse backdoor. […]

Read more →

Microsoft Copilot and AI agents are opening new opportunities for small and midsize businesses — but adoption also creates new questions around security, data governance, compliance and cost. Channel Insider Managing Editor Victoria Durgin speaks with Bruno Lecoq, Co-Founder, CEO & CISO at BEMO, a Microsoft-focused cybersecurity and compliance firm, about what SMBs and their…

Read more →

The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. […]

Read more →

WatchGuard fixes 15 Fireware OS flaws, including a critical RCE bug that could give attackers root access to vulnerable Firebox appliances. WatchGuard has released security updates for Fireware OS that address 15 vulnerabilities, including a critical code injection flaw, tracked as CVE-2026-86131 (CVSS score of 9.2), that could allow an attacker to execute commands with…

Read more →

CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,…

Read more →

OpenAI unveiled its long-rumored productivity software suite Tuesday with the launch of Pages, a collaborative document editor for ChatGPT. A slides app is also on the way, the company announced at its DevDay event. The Pages app is accessed via a new Space tab, which OpenAI describes as a “new home for your team to…

Read more →

New Swimlane research underscores a paradox: While AI detection and response is essential to giving defenders an edge, one in four security pros say AI limits their skill development.

Read more →

GTT Communications is expanding its security portfolio with Defense Halo, a new network defense platform that embeds AI-driven threat detection and remediation capabilities into the company’s global network infrastructure. Converging network, cloud, and security operations GTT Defense Halo is an AI-native network defense platform, built on GTT’s AI factory and deployed as a dedicated instance…

Read more →

More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform’s security measures to prevent accidental leaks of sensitive data. […]

Read more →

Deeper Network Promo

One of the more secure Linux distributions has added another feature to help further lock it down.

Read more →

A vulnerability has been discovered in Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) that could allow for authentication bypass. Cisco Catalyst SD-WAN Manager is the centralized dashboard used to monitor and manage SD-WAN fabric devices, in some deployments up to several thousand devices from a single console. An attacker could exploit this vulnerability by sending…

Read more →

A vulnerability has been discovered in Apple products that could allow for arbitrary code execution. macOS Sequoia (macOS 15) is an operating system version for Mac computers released by Apple in late 2024. macOS Tahoe (macOS 26) is an operating system version for Mac computers released by Apple in late 2025. iOS is Apple’s mobile…

Read more →

Agency aims to use its consumer-protection powers to examine whether AI labs have misled the public about dangers from the technology.

Read more →

Answer this without checking: how many AI agents are running in your environment right now? Most security leaders give an estimate and a shrug. That is a fair response, because agents get spun up by an engineer solving a problem on a Tuesday afternoon, through a path that puts them on nobody’s radar. In August…

Read more →

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system command injection flaw that can lead to remote code execution when Simple Network Management…

Read more →

Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. “Once executed, the legitimate MSP360 installer, distributed under a deceptive file name established remote management access on affected

Read more →

OneTrust is launching CORIE, a new AI governance layer designed to enforce enterprise policies as AI agents operate, as the company expands its platform to address governance challenges created by increasingly autonomous AI systems. Announced as part of TrustWeek 2026, CORIE—short for Contextual Orchestration for Reasoning, Intelligence and Evidence—draws on an organization’s existing privacy, consent,…

Read more →

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service condition. […]

Read more →

New with iOS 27 (and iPadOS 27) is a setting called Impersonation Risk Detection that aims to warn you of suspicious activity that could trap you in a scam.

Read more →

Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware and extort large enterprises.

Read more →

“Arizona’s court system was targeted by a cyber attack from criminal hackers or their bots.” This is how the Arizona Supreme Court announced that hackers had attacked the state’s court system and stolen the personal information of “many Arizonans.” The court says the attack began with a phishing email containing a malicious link that a…

Read more →

Healthcare AI gives partners a deployment challenge that extends beyond getting the software running: helping clinicians use it in their daily work. Microsoft announced on September 22 that eligible partners can earn its new Clinical Applications specialization starting September 30. The recognition covers proven expertise in deploying Dragon Copilot for healthcare customers and can open…

Read more →

Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager’s API as the admin user. Fixed releases are available, and there is…

Read more →

The APT actor is using a new tactic, dubbed “RedFlick,” against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its CosmicPulse backdoor.

Read more →

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity in late September 2026, said it marks the abuse of yet another feature in trusted artificial intelligence (AI) platforms. Prior campaigns have…

Read more →

Hanneke Faber on “begging and borrowing” her way through the AI-drive squeeze and applying the lessons learned at Unilever and P&G to tech.

Read more →

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges. […]

Read more →

Tel Aviv, Israel, 30th September 2026, CyberNewswire

Read more →

OpenAI is giving enterprise customers another place to put money they have already committed to AI. The company launched OpenAI Marketplace at DevDay 2026, allowing eligible enterprise customers to apply part of their existing OpenAI commitment toward qualifying software from approved partners. The initial roster includes 32 vendors spanning cybersecurity, customer experience, development, legal technology,…

Read more →

US President Donald Trump has ordered the federal government to call artificial intelligence “Super Intelligence,” while keeping the technology’s legal definition unchanged and relying on industry to set the rules for its use. In an executive order, the White House administration said modern systems “far exceed what was envisioned when the term ‘Artificial Intelligence’ first…

Read more →

Persistent AI coworkers may operate continuously with standing access, creating identity risks that existing security models were not designed to handle. Token Security explains why these agents need their own identities, owners, scoped permissions, and lifecycle controls. […]

Read more →

AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise

Read more →

True to its name, AI-model-training tool Unsloth would do more work than it was asked to when developers checked out a model: It would also allow arbitrary code to execute on their machines. Pillar Security found that simply selecting a model in Unsloth Studio caused the application to download and execute Python code from the…

Read more →

If you’ve not done so recently, you should update your Apple systems now as the company continues to fight sophisticated, targeted hacks. The latest patch protects against what the company called “an extremely sophisticated attack against specific targeted individuals.”  Apple recently published an emergency security patch for users on iOS 26 and iPadOS 26 to fix…

Read more →

Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month. […]

Read more →

DOJ charges against Oxygen Forensics reveal the Russian-linked firm also sold forensic software to EU projects and European police forces for years. Last week’s Justice Department indictment of Oxygen Forensics looked, at first, like an American procurement scandal. CEO Lee Reiber and Russian co-founder Oleg Davydov stand accused of hiding that the company was Russian-owned…

Read more →

Sherweb is bringing Irish IT solutions provider MicroWarehouse fully under its brand and making Ireland its European headquarters as the Canadian cloud distributor expands its MSP business across Ireland and the UK. The move follows Sherweb’s 2024 acquisition of MicroWarehouse, which continued operating under its existing name while gaining access to Sherweb’s broader resources. Sherweb…

Read more →

Auvik and Acronis are partnering to bring network monitoring and management directly into Acronis RMM, expanding the platform’s capabilities as MSPs look to consolidate more of their IT management stack. Under the OEM partnership announced Sept. 30, Auvik’s network management capabilities will be natively integrated into Acronis RMM, the remote monitoring and management offering within…

Read more →

ESET has revamped its ESET PROTECT portfolio with three new security tiers designed to help channel partners shift from selling standalone cybersecurity products toward recurring, service-based security offerings. The updated portfolio combines MDR, AI security, ransomware and phishing protection, and additional services, including guided onboarding, cybersecurity awareness training, and a cyber warranty that provides up…

Read more →

Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight

Read more →

Deeper Network Promo

Plus, three questions for Toshiba America’s CIO

Read more →

“Advanced and suspected state-sponsored threat actors” are likely to be behind the initial targeted intrusions that leveraged CVE-2026-88772, one of the two recently disclosed NetScaler vulnerabilities that have been exploited as zero-days, says Mandiant CTO Charles Carmakal. Mandiant and Google Threat Intelligence Group (GTIG) know of dozens of impacted organizations across North America and Europe,…

Read more →

Pearson has agreed to acquire Workera to help businesses assess employees’ AI skills and target training where it’s needed most.

Read more →

Remote access software company TeamViewer warned customers on Tuesday to immediately patch a set of high-severity vulnerabilities affecting its client and host software. […]

Read more →

Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer

Read more →

Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, with the entire attack chain from initial access to exfiltration playing out in the browser. Here are the six most dangerous…

Read more →

When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow Labs. Diagram showing how AI agents leak screenshots to public repos (Source: Glow Labs) The researchers found more than 13,000 internal images published openly on GitHub…

Read more →

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released. In most cases, they sat…

Read more →

Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Google

Read more →

A study testing 21 cars from 19 brands and 30 companion apps found connections to advertising and tracking companies, and evidence that some apps shared sensitive personal data. Modern cars can unlock remotely, route around traffic, stream entertainment, summon roadside help, and cool or heat the cabin before you get in. But those conveniences come…

Read more →

An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit card details from unsuspecting customers.

Read more →

Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products. […]

Read more →

ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure. By combining Microsoft 365 session theft with remote-access tool deployment, CSuite can turn a phishing incident into broader account compromise, fraud

Read more →

Attackers have compromised a self-hosted JFrog Artifactory instance operated by OpenInfra Europe, the regional hub of the OpenInfra Foundation warned in a security notice prominently displayed on its homepage. OpenInfra Europe’s security incident notice “Anyone who downloaded or installed artifacts from https://artifactory.nordix.org/ from August 28 and September 15, 2026 should immediately stop using them, remove…

Read more →

A Pentagon personnel database was breached for nine months without anyone noticing. Over three million people are affected. Read more in my article on the Hot for Security blog.

Read more →

Security teams are being told they have hours to patch. Related: AI agents have a Lord of the Flies problem The warning has a real basis. In June, Anthropic’s frontier red team demonstrated an AI model building working exploits from freshly patched Firefox and Windows kernel vulnerabilities, one of them in 31 minutes. Meanwhile ZeroDayClock,…

Read more →

Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a previously undocumented backdoor referred to as “Antino” in developer artifacts.  Talos first observed UAT-11587 activity in September 2025. By July 2026, Talos had identified at least 16…

Read more →

For nearly a decade, multi-factor authentication has been the control every security leader points to when asked how they’ve reduced account takeover risk. It sits on almost every compliance checklist and nearly every cyber insurance questionnaire, and for good reason — adding a second factor to a password login closed off an enormous share of…

Read more →

The computers that automate water treatment systems across the country were built for durability, not for an internet-connected world. Many still accomplish their fundamental function, but as cyberattacks on the sector mounted this summer, water industry officials say those aging systems, especially internet-exposed operational technology and programmable logic controllers, remain among the easiest ways for…

Read more →

Phishing investigations put pressure on SOC teams at several points at once: analysts need to uncover hidden activity, make a confident decision from incomplete evidence, prepare the case for escalation, and then determine whether the threat extends beyond a single incident. Every manual step adds time to the response. It also ties up analyst capacity…

Read more →

One of the most rewarding parts of being a Certified Android Explorer™ is the geeky pleasure that comes with uncovering a hidden shortcut Google snuck somewhere into its smartphone software. One of the most exhausting parts, in contrast, is realizing that Google randomly changed a bunch of the shortcuts you’d found and developed the muscle…

Read more →

Signal users who switch from an Android phone to an iPhone, or the other way around, can take their message history with them, and backups can be restored on Android, iOS, Linux, macOS and Windows. The option is part of a set of backup updates the company finished rolling out with Signal for iOS version…

Read more →

In team meetings, group texts and over lattes, people are catching themselves using ‘prompt speak.’

Read more →

Threat actors abused fake ChatGPT Custom GPTs and ClickFix to deliver a multi-stage RAT. ChatGPT’s Custom GPT feature is the latest legitimate surface being turned into a delivery mechanism, and Huntress researchers caught it in action across at least 40 incidents. A Custom GPT (now simply called a GPT) is essentially a version of ChatGPT…

Read more →

AI containment is essential, but security leaders should assume every boundary can fail once an agent can communicate, use tools, and act on real systems. On September 17, podcaster Steven Bartlett asked four AI experts an unusual question: Could you build a jail for a digital Einstein? The panel on The Diary of a CEO…

Read more →

Compare 8 top red teaming providers for enterprise adversary emulation, from DeepSeas and Mandiant to CrowdStrike, IBM, SpecterOps, TrustedSec and NCC Group.

Read more →

Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine

Read more →

Insight Global’s John Dickson had a problem familiar to many CISOs today. Employees were embracing AI tools faster than his security team could track them, and new AI agents and service integrations spread rapidly across the environment alongside them. Dickson and his security org had plans to build visibility into those non-human identities (NHIs), tracking…

Read more →

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG) in September 2026, has targeted government, financial services, technology, education, and legal and professional

Read more →

A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires. The leak or crash can happen when such…

Read more →