The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components. […]

Read more →

AI infrastructure demand is likely to keep hardware pricing volatile into 2027, even as supply conditions begin to improve in parts of the market. Memory remains the biggest pressure point. Forecasts suggest DRAM and AI-focused memory could remain constrained at least through the first half of 2027, while NAND supply may begin to loosen sooner. …

Read more →

The “agentic threat actor” may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.

Read more →

Forcepoint X-Labs has published new research showing that indirect prompt injection against AI email summarizers can work without…

Read more →

Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p. According…

Read more →

Citrix has released emergency security updates for two critical zero-day vulnerabilities affecting NetScaler ADC and NetScaler Gateway after confirming that attackers are already exploiting both flaws in real-world attacks. Tracked as CVE-2026-88771 and CVE-2026-88772, the vulnerabilities each carry a CVSS v4.0 score of 9.5 and can enable unauthenticated remote code execution on vulnerable appliances. The…

Read more →

Discover how Cisco Secure Firewall 200 Series modernizes branch security with AI-powered threat detection, encrypted visibility, SD-WAN, and simpler management.

Read more →

Bitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets

Read more →

Threat hunters and researchers are alarmed by what they’ve seen in data ShinyHunters claims it stole from the FBI. Limited samples of the stolen data contain FBI agents’ personal contact information, details on family members, office and duty assignments and, in some cases, information on agency personnel specialties, multiple sources said. “I am gravely concerned…

Read more →

Key Bluetooth technologies and upgrades to USB-C audio are coming to the company’s flagship over-ears.

Read more →

Jadepuffer, an autonomous AI attacker first identified in July, has expanded into Azure environments, using compromised digital identities to enumerate resources, delete cloud assets and collect other credentials, according to Microsoft. The activity includes “extensive Azure-focused resource destruction activity using compromised service principals and cloud credential collection that could be used to facilitate future exfiltration,”…

Read more →

Multiple vulnerabilities have been discovered in NetScaler ADC and NetScaler Gateway, the most severe of which could allow for remote code execution. NetScaler ADC is a networking product that functions as an Application Delivery Controller (ADC), optimizing, securing, and ensuring reliable availability of applications for businesses. NetScaler Gateway is a secure remote access solution that…

Read more →

Nearly 400,000 DC Medicaid and Healthcare Alliance beneficiaries may have had personal data exposed through reports published on a public website. The District of Columbia Department of Health Care Finance is notifying nearly 400,000 Medicaid and DC Healthcare Alliance beneficiaries that their personal information may have been exposed. The incident affects people who enrolled between…

Read more →

A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of week this was: forgotten assumptions turning into live attack surface. Elsewhere, weak service accounts, old bugs, exposed systems, phishing kits, and strangely easy exploit paths kept doing useful…

Read more →

Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking. SOCRadar examines the growing market for stolen AI logins and how organizations can identify their exposure. […]

Read more →

Leaders at OpenAI, Anthropic, Microsoft and Meta said AI could soon self-improve faster than humans can keep up with.

Read more →

The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, the United States’ domestic intelligence and security service confirmed it was investigating ShinyHunters’ claim of having compromised personal information of FBI employees.…

Read more →

For the latest discoveries in cyber research for the week of 28th September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The FBI has confirmed unauthorized activity affecting FBIjobs.gov after the ShinyHunters group defaced the website. The group claimed to have stolen employee and applicant information and shared samples of purported FBI personnel…

Read more →

A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found that Titan did not verify the signature on login tokens. That let him pose as the service’s administrator and run SQL…

Read more →

NVIDIA has launched a platform pairing runtime controls with hardware monitoring for AI agents

Read more →

AppDirect is acquiring AI avatar technology provider Soul Machines, a deal that will bring interactive avatars into its Devs.ai platform and expand the AI tools available to its advisors, partners, and customers.  The acquisition is aimed at helping businesses move beyond text-based AI and deploy more interactive experiences across sales, service, support, commerce, and employee…

Read more →

A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat

Read more →

OpenAI’s latest containment failure adds to a pattern that may force the company to make an unpopular decision. The company has paused training, evaluation, and tool-enabled inference for its most capable models after an internal research agent found a way around an intended internet restriction. More alarming, the agent remained active for hours after OpenAI’s…

Read more →

Plus, Nvidia takes aim at rogue agents.

Read more →

The tech giant is pushing to monetize its multibillion-dollar AI investments by selling more tools and services to companies.

Read more →

The chip maker’s board approved the share-repurchase program, bringing the total buyback authorization to $235 billion.

Read more →

Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s visits to popular websites in Firefox, and every site it flagged was one the victim’s browser had loaded. On Linux,…

Read more →

Linkage analysis connects accounts, devices and infrastructure to detect coordinated fraud rings that traditional account-level risk controls may fail to identify.

Read more →

AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users. According to Okta’s Global CISO Insights 2026 report, only 47% of CISOs are confident they can identify every AI agent…

Read more →

Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that’s targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. “The implant installs the framework unchanged, then overwrites its SOUL.md persona file,” ThreatDown said. “The 39-line prompt directs it to execute tasks received through

Read more →

NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that controls what an agent can access, and Sentry, a watchdog in the reference design that monitors agent activity from…

Read more →

AI models taught to write like drunk people became easier to jailbreak and more likely to leak secrets shared in confidence. That is the finding of UNSW Sydney researchers Anudeex Shetty, Aditya Joshi and Salil Kanhere, published in their paper “In Vino Veritas and Vulnerabilities.” “The key research question from the natural language processing (NLP)…

Read more →

Google Drive is the cloud platform for storing and organizing your Google Workspace files: documents, presentations, spreadsheets, and even media (images, audio, and video). If your Workspace account includes Gemini, Google’s AI assistant, you can prompt it to work with your files, such as asking it to analyze or sum up information from your Drive…

Read more →

Microsoft details Storm-3168, the JADEPUFFER-linked actor that used stolen service principals to delete Azure storage in minutes and harvest keys. Microsoft just published the first detailed look at what JADEPUFFER does inside Azure. Sysdig first spotted the group’s activity in July 2026 and called it the first documented agentic ransomware operation. Microsoft tracks the same…

Read more →

Deeper Network Promo

The chip giant said its platform allows developers to continuously monitor and govern AI behavior.

Read more →

Google Ads deliver a tech support scam kit that shows fake security alerts, makes browsers appear locked and…

Read more →

Early in my military career, I learned a simple lesson: when you give people a task, you also have to give them room to think. Related: AI agents take initiative, unchecked As a young “door kicker,” I made a point of telling my teams to ask why. Not because every decision needed a debate, but…

Read more →

Citrix NetScaler ADC and NetScaler Gateway users should take their systems offline and patch them immediately, they were told over the weekend, as news emerged of two critical unauthenticated remote code execution zero-day vulnerabilities in the products under active attack. “Monday will be too late,” watchtower CEO Benjamin Harris wrote in a LinkedIn post on…

Read more →

Citrix has patched eight critical and high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway, two of which (CVE-2026-88771, CVE-2026-88772) have been exploited in zero-day attacks to plant webshells on compromised devices. Rumors about their existence and active exploitation popped up on Reddit on Friday, fueled by warnings from IT suppliers, who apparently got the information…

Read more →

Ox Security found security shortcomings in analysis of over 15,000 MCP servers

Read more →

Siemba has launched Siemba Pride, a global partner program for MSSPs, resellers, systems integrators and technology partners, giving participants access to deal registration, tiered margins, co-sell support and technical enablement around its continuous offensive security platform. Siemba Pride targets three types of channel partners The program separates partners into three groups based on how they…

Read more →

BBC News reports it has seen samples of stolen FBI agents’ medical examinations. The “fitness-for-work” reports identify FBI agents by name and address, and reveal even more personal details. They include blood and urine test results and doctors’ notes mentioning high cholesterol, blood in the urine, and even a shellfish and banana allergy. As we…

Read more →

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million. […]

Read more →

Promevo has reached the Diamond Tier in Google Workspace’s Co-Sell & Services Partner Path, the program’s highest level of recognition, giving the company expanded access to Google funding, engineering resources, and product teams as it grows its Gemini Enterprise, cloud migration, and data modernization services. Google Diamond status expands Promevo’s technical access Speaking with Channel…

Read more →

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor’s tradecraft. The attack took place in early June 2026 over a period of about 18…

Read more →

When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company can detect and contain the attack

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-88771 (CVSS score: 9.5) Citrix NetScaler Improper Input Validation Vulnerability CVE-2026-88772 (CVSS score: 9.5) Citrix NetScaler Improper Restriction of Operations within…

Read more →

A former U.S. Army soldier who was part of a group that stole data from telecom companies, including AT&T, has been sentenced to 70 months in prison. Cameron John Wagenius, 22, was part of the group that hacked Snowflake customer accounts in 2024. They took data from more than 165 organizations that used the US…

Read more →

Citrix has confirmed exploitation of two critical zero-day RCE bugs

Read more →

Cyber threat groups have increasingly targeted enterprise AI assets, such as credentials, cloud environments, and research, as a means for operationalizing their own use of AI. Now, another sophisticated means for obfuscating illegitimate use of AI resources is coming more clearly to light.   According to a report last week from security firm Team Cymru,…

Read more →

LinkedIn is testing a way for members to verify the work and education history of people they know. The platform prompts verified members to confirm that they worked or studied with a connection. Once that person receives enough confirmations, LinkedIn adds a verification badge to their profile. Members can opt out. “When you help verify…

Read more →

A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024. […]

Read more →

How’s that view?! With NDC Oslo now done, it’s a little bit of sightseeing before heading to Denmark for GOTO in Copenhagen for Scott’s and my “Cyber-broken” talk. In the meantime, this week is mostly about the ShinyHunters trajectory targeting both Cl0p and the FBI, which does feel a little like a crescendo in their…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerabilities are listed below – CVE-2026-88771 (CVSS score: 9.5) – An improper input validation vulnerability that could allow an unauthenticated attacker to

Read more →

Last week on Malwarebytes Labs: LinkedIn adds new checks for fake profiles and work histories Kothamine malware uses Tailscale’s tailcat to evade network detection Criminals turn placeholder domain into ClickFix trap That shipping rebate offer may come with a monthly charge OpenAI agent breached Australian government site, took months to report it New Browser Guard…

Read more →

iCXeedhttps://www.icxeed.ai/ has named a former AWS solutions architect as its Chief Product and AI Officer, promoted its Manila-based engineering lead to vice president and…

Read more →

Samsung Australia has a question it would very much like you to ask this week: which foldable is right for me?

Read more →

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. […]

Read more →

In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on developer machines and in cloud services. Latimer explains how attackers could plant poisoned memories through plugins, skills, and…

Read more →

Jaggaer, a leader in AI-powered procurement solutions, today announced it has completed its acquisition of Ivoflow, a spend & price intelligence platform for direct materials,…

Read more →

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of database compromise. A Roundcube Webmail vulnerability, tracked as CVE-2026-48842 (CVSS score of 8.1) and patched four months ago, is now being exploited in the wild. The Canadian Centre for Cyber Security added the warning to its advisory…

Read more →

Anker SOLIX today announced the launch of Anker SOLIX S2000, a 2kWh portable power station purpose-built for Australia’s caravan travel and outdoor lifestyle. Priced at…

Read more →

Authorizer is an open-source server for sign-in and access control in web and mobile apps. Teams run it on their own infrastructure and keep user accounts in a database they choose. Its maintainers have built a permissions engine and an interface for AI agents into the same Go program that logs users in, so a…

Read more →

AI agents are forcing enterprises to rethink security governance, human accountability and oversight as deployments scale. AWS’s Reimagine 2026 argues that organizations need to build governance into their systems and keep humans accountable for outcomes. The findings come from confidential interviews of 45 to 60 minutes with 154 executives at 128 organizations in 23 industries,…

Read more →

Verdict is an AI image and video detector designed for iPhone. It works offline and requires no account. Choose a photo or video, run a scan, and the app returns a 0–100 score with a verdict and supporting evidence. It requires iOS 16 or later. How it works For photos, Verdict examines signals from an…

Read more →

The European Telecommunications Standards Institute’s (ETSI) technical report, ETSI TR 104 171, offers guidance on building and evaluating quantum random number generators (QRNGs). It focuses on weaknesses in the devices and their supporting systems that could make the numbers they produce less secure. Components of a QRNG (Source: ETSI) A QRNG measures a quantum process…

Read more →

On Saturday, 100,023 people packed the MCG to watch the Brisbane Lions come from behind, beat Fremantle by seven points and win a third straight flag.

Read more →

Members of the Scottish Parliament have paused decisions on hyperscale schemes and made environmental assessment mandatory above 50MW, moving energy demand, water use and…

Read more →

October is Cyber Security Awareness Month, a time to take action and improve your cyber security.

Read more →

Deeper Network Promo

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

In this post, I will discuss public data collection for financial analysis and provide a complete guide to ethical, scalable market intelligence. Public data collection has become an essential part of modern financial analysis. Investors, analysts, fintech companies, hedge funds, and researchers increasingly rely on publicly available information to identify market trends, monitor competitors, assess…

Read more →

Six cybersecurity leaders from BeyondTrust, Check Point Software Technologies, Exabeam, Horizon3, Saviynt and Secure Code Warrior have provided their response to the news that…

Read more →

Read more →

It’s been two and a half years since Cisco paid $US28 billion to acquire data analytics and cybersecurity firm Splunk.

Read more →

Founded in 1912, ITW Group is a global, multi-industry manufacturing organisation serving customers across a wide range of sectors, including construction products, automotive,…

Read more →

HeadFirst Global, a 16 billion AUD group comprised of Impellam and HeadFirst, unites 11 businesses under Vertage, a single name, platform, and operating model Platform will…

Read more →

OpenAI is testing a new always-on assistant called “o”, and references to the unannounced feature briefly showed up on the company’s website. […]

Read more →

Extended Security Updates no longer available for Windows Server 2012? No problem. How time flies… It’s been three years since we security-adopted Windows Server 2012 and 2012 R2, after Microsoft’s free support ended. At that time, we gave these servers an alternative to (rather expensive) Microsoft’s Extended Security Updates and were happy to welcome many…

Read more →

Anthropic and the administration have clashed over the startup’s safety concerns and calls for greater oversight of American AI companies.

Read more →

Comparing five leading security awareness platforms, based on the level of personalization they offer.

Read more →

Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code. Citrix confirmed that two critical zero-day vulnerabilities in NetScaler ADC and NetScaler Gateway were exploited before the company released patches. The flaws allow remote code execution, meaning attackers can potentially take control of affected appliances. The…

Read more →

Two unpatched Citrix NetScaler zero-day vulnerabilities are reportedly being exploited in attacks, with cybersecurity agencies, security researchers, and IT providers privately warning organizations about the flaws ahead of patches expected next week. […]

Read more →

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At…

Read more →

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Threat Intel | One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign   Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO   ChainScript: Tracing a Node.js RAT…

Read more →

Wireshark release 4.6.9 fixes 19 vulnerabilities and 16 bugs.   Didier Stevens Senior handler blog.DidierStevens.com (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

Plus, chatbots are making kids lonely, the collective who has obsessed over AI doom for a decade, the tech elite’s alternative to college and more.

Read more →

Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers’ containers on the same physical host. […]

Read more →

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. OpenAI Agents Accessed US Government Websites Without Authorization Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem…

Read more →

Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plugins, connectors, agents, and more. […]

Read more →

There are reportedly two unpatched zero-day Citrix NetScaler vulnerabilities capable of enabling remote code execution that have been actively exploited in the wild, with no patches available at this time. Key takeaways Reports indicate that there are two critical zero-day vulnerabilities in Citrix NetScaler. The reports originate from a pre-notification sent out ahead of public…

Read more →

Kosovo national Ardit Kutleshi pleaded guilty to running Rydox, a cybercrime marketplace that sold stolen identities and credentials for years. Ardit Kutleshi, 28 years old and a citizen of Kosovo, pleaded guilty last week to building and running the cybercrime marketplace Rydox. The Rydox marketplace has been active since February 2016; it facilitated over 7,600…

Read more →

As we head into October Cybersecurity Awareness Month, ponder this: Responding with “wrong number” to a strange text is exactly what the scammers want you to do.

Read more →

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Know what was tested before your SAP ECC migration goes live In this Help Net Security interview, Guilherme Joventino, COO of MIGNOW, explains why some large companies plan to stay on ECC past the 2027 deadline and pay SAP for…

Read more →

Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, security firm watchTowr said on September 26. Citrix has not confirmed the flaws or published a fix. Some administrators say they have taken appliances offline rather than wait for one…

Read more →

Every Saturday I cover the week in tech on my Talking Tech segment on the Canberra Weekender on Radio 2CC. This week’s recurring theme: software agents that do things for you.

Read more →

In this post, I will show you how to tell whether a free VPN is safe. A free VPN can be a reasonable choice for occasional browsing, but the word free tells you very little about the company handling your connection. A familiar logo, a high app-store rating and a long list of security features…

Read more →

Effective altruism and its fears that AI could wipe out humanity have wielded big influence at Anthropic.

Read more →

Autonomous bots hit public data site more than 16,000 times and circumvented a filter.

Read more →

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. […]

Read more →