A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…

Read more →

A domain that has long appeared in software documentation, code examples, and developer test material is now being used to push a ClickFix attack against Windows users. A placeholder domain stands in for a website in an example. The best-known is probably example.com. Another, third-party[.]com, has often been used in documentation to represent an external…

Read more →

Microsoft announced it will deprecate the Windows Deployment Services (WDS) server role starting with the next Windows Server release. […]

Read more →

The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines

Read more →

Factory resetting your LG TV is the only way to remove certain data logs from its hardware.

Read more →

ANY.RUN once again joined the RootedCON community this year, taking part in Rooted Valencia 2026 on September 18. The event brought together cybersecurity professionals, researchers, hackers, and technology enthusiasts from across the global cybersecurity community. For our team, the event became yet another opportunity to meet security professionals, speak with clients, and demonstrate how interactive…

Read more →

Google’s Gemini 4 AI model is in the early days of post-training, the phase in which a base AI model is refined to behave reliably, and should be released “much earlier” than the end of this year, Google DeepMind head Koray Kavukcuoglu told The Information at its AI Agenda Live Summit. Some Google observers have…

Read more →

Everpure has expanded its data management platform with native MCP integration and new AI infrastructure capabilities designed to give AI agents secure access to enterprise data. The capabilities further Everpure’s Data Primacy vision, which was introduced at its Pure//Accelerate conference in Las Vegas in June. Everpure connects enterprise data to AI agents Everpure has positioned…

Read more →

A detection rule can show up as deployed on a coverage dashboard and still never fire when an attacker uses the technique it was built to catch. Conifers assessed 14,652 detections in its customer base, including rules written by customers and detections managed by vendors in SIEM, endpoint, cloud, identity, email and network tools. The…

Read more →

Microsoft says Copilot has gotten ‘actually really good.’ The new app has AI agents and can write code. So how much is all this going to cost?

Read more →

San Francisco, USA, 25th September 2026, CyberNewswire

Read more →

A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and cybercrime tools. […]

Read more →

Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on a low-privilege cloud account, and the first try at privilege escalation goes nowhere. That…

Read more →

AI PCs that cut token costs? That may appeal to enterprises. A new breed of agentic AI PCs promises to do exactly that. The powerful laptops can cut token costs by completing AI work locally instead of sending it to expensive LLMs in the cloud. HP’s newly announced ZBook Ultra G3a mobile workstation and upcoming…

Read more →

FortiGuard found SectopRAT hidden in modified audio software files, using staged loading to steal browser data and remotely control infected Windows PCs.

Read more →

Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets.  “At 18:31 UTC on September 24, 2026, Bitget’s security systems identified unauthorized transfers involving a limited number of hot wallets,” BitGet said in a post shared on X. “Bitget’s cold wallets and the overwhelming majority of…

Read more →

Microsoft has confirmed that some users may experience desktop loading issues, including black screens, after installing the August 2026 preview updates and subsequent updates. […]

Read more →

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1. The issue stems from a preg_replace()…

Read more →

CARBONATO exploits exposed Docker daemons, installs an AI agent, steals API keys and spreads across networks with autonomous command execution. CARBONATO is a Docker-based botnet that has been active since at least October 2024. ThreatDown discovered the operation after finding an unauthenticated container registry exposed to the internet. The registry contained the attackers’ entire toolchain…

Read more →

Read more →

Thanks to Malwarebytes research engineer Stefan Dasic for his help with this article. A name like ShipmentsFree suggests a way to save on shipping. The service does offer shipping rebates, but its Better Business Bureau (BBB) complaint record shows that some customers did not realize they had also signed up for recurring charges. We found…

Read more →

Oracle sent a force majeure notice to the developer, has removed one key development partner and faced local resistance in Project Jupiter.

Read more →

The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials

Read more →

A new MacSync variant targets Mac users with an infostealer and persistent backdoor designed to steal credentials, crypto wallet data, and files, according to Kaspersky. Researchers found the malware spreading through a crypto wallet app called Toria, which had its own website and was promoted on X and Telegram. MacSync is a family of Mac…

Read more →

As AI lets anyone build software, here’s how to vet that shiny new app before it exposes your data

Read more →

​Cryptocurrency exchange Bitget disclosed today that suspected North Korean hackers have stolen $351.6 million from its hot and warm wallets. […]

Read more →

EfficientIP says it flagged AliExpress phishing domains before they were registered

Read more →

Flock Safety has stirred widespread debate of late. Flock builds interconnected networks of automated license-plate readers and other public safety cameras. Those systems can help police solve serious crimes, but they also log sensitive personal location data and make it searchable across agencies and jurisdictions. The question is no longer whether the technology has value.…

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability CVE-2026-71362 Adobe Commerce and Magento Incorrect Authorization Vulnerability The first flaw added to the…

Read more →

Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shuts down. Launched at WeAreDevelopers North America, Docker Cloud Sandboxes let organizations run agentic workloads at scale without tying up developers’ hardware, provisioning their…

Read more →

An attacker has been offering “desktop apps” for three large US payroll and HR platforms that have never released one, Allure Security have found. Anyone who runs the installer gets a copy of ScreenConnect, a legitimate remote access tool, configured to let the attacker control the computer without the user knowing. According to Ryan Merritt,…

Read more →

Abnormal AI has unveiled the newest additions to its AI Security suite, designed to help enterprises adopt AI securely while protecting against new threats created or accelerated by AI. The suite brings together Abnormal AI Governance, which is generally available, and AI Cloud Security, previously announced in private preview, with three newly announced products: AI…

Read more →

SentinelOne has announced the expansion of Wayfinder Threat Hunting to the major public cloud services: AWS, Azure, and Google Cloud. It’s the latest offering from SentinelOne’s Wayfinder team and combines the power of SentinelOne’s AI-powered Singularity Platform telemetry with expert human-led hunting to protect the attack surface across AI, endpoints, identities, and cloud workloads. The…

Read more →

Dataiku has announced the launch of Agent Management, a standalone product that finds every AI agent an enterprise is running, regardless of which platform built it, measures the business and technical performance, and flags agents that pose the greatest risk. The launch addresses a disconnect between how fast agents are being created and adopted and…

Read more →

A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly those that provide material support to Ukraine.

Read more →

Deeper Network Promo

Read more →

Introduction My previous post on Macfinger ClickFix was two days ago, and this campaign remains active. The more I look into the malware delivered by this campaign, the more I believe it is not a variant of Atomic macOS (AMOS) Stealer as originally reported. There are too many differences between what I’ve documented with recent…

Read more →

An OpenAI agent gained access to non-public material in an Australian government system. That is serious. But before the narrative keeps going solely about a “rogue AI hacking…

Read more →

In this interview with Help Net Security, Ariel Assaraf, CEO of Coralogix, explains why a system prompt can describe a boundary for an AI agent but cannot enforce one. Assaraf covers how his team builds AI agent guardrails at the execution layer, limits context without expanding authority, and tunes controls by risk so agents stay…

Read more →

Half of security professionals name data quality or quantity as their biggest barrier to effective threat hunting, according to the SANS 2026 Threat Hunting Survey. Teams with working playbooks describe the logs as their ceiling, and gaps in cloud logging and identity telemetry come up most often. Gaps in the logs hurt most against the…

Read more →

A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed below – CVE-2026-5430 (CVS score: 9.8) – A path traversal vulnerability in  WSO2 API Control Plane,

Read more →

If you run security for a brand with hundreds or thousands of locations, the tools you’ve bought may have little to do with whether an attack stays at one store. A new VikingCloud survey asked 200 security and IT leaders at U.S. and European chains about the past year. None of the 13 security technologies…

Read more →

Here’s a look at the most interesting products from the past week, featuring releases from Akeyless, Akuity, Bitsight, BugBase, Cloud Range, Cohesity, Dataminr, Gurucul, Nozomi Networks, Orchid Security, Ping Identity, Scytale, Securin, Superna, and Tuskira. Ping Identity introduces enterprise security for personal AI agents Ping Identity announced an end-to-end approach that combines discovery, secretless privileged…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

For local business owners and operations leads at small and medium enterprises, business operations often run on thin margins for time, staff, and attention. The tension is…

Read more →

The Australian childcare software provider is piloting an Oracle-backed system that helps educators find information and prepare updates for parents. The test raises a…

Read more →

The acquisition aims to let business users move from asking an AI question to building a spreadsheet model against live enterprise data, without first exporting a CSV.

Read more →

Blizzard is building a new, permanent version of Azeroth around the original game’s level 1–60 journey. Its beta is under way, and Australians had an unusual route in through…

Read more →

Even as they continue to release ever more capable competing models in a regular cadence, the top AI companies are joining forces to set AI safety standards. According to The Information, Google, OpenAI, and Anthropic are reportedly working together to create a body tentatively called the Standards Authority for Frontier AI (SAFA). It would operate…

Read more →

Bitget confirms a $351.6 million theft, suspends withdrawals and says North Korea’s Lazarus Group may be involved as investigators examine the breach in detail.

Read more →

iTWire has long been a fan of the versatile Cricut ecosystem that helps you bring your creative ideas to life no matter how simple or complicated. Today, Cricut has announced a…

Read more →

Learn of the benefits of safely securing AI agents.

Read more →

Read more →

PHOENIX, Sept. 24, 2026, CyberNewswire — SCOUTz, a prospect intelligence platform built for managed service provider (MSP) security sales, is now available in open beta. The platform gives an MSP dated evidence about a prospect’s environment before the first meeting and keeps that evidence attached through delivery and reassessment. The open beta is available at…

Read more →

Amid mounting concerns about its sprawling surveillance camera network, Flock Security told the press this summer that it operates more than 120,000 cameras nationwide. But a new map published Wednesday by a cybersecurity researcher reveals Flock’s nationwide reach is even bigger. Based on location coordinates from Flock’s own database, the map shows more than 170,000…

Read more →

At Oktane 2026 in Las Vegas, Auth0 showed off tools to win shoppers before they log in, sell to them inside Google’s Gemini and make SaaS apps enterprise-ready in minutes. Just…

Read more →

Expanded capabilities turn fragmented cryptographic data into a prioritised plan, coordinated action, and measurable progress toward post-quantum readiness.

Read more →

A dozen vendors that usually chase the same security budgets have signed up to one shared architecture for AI agents. At Oktane 2026, ServiceNow and Google Cloud explained how…

Read more →

The click used to be the smallest honest unit of marketing measurement. Someone saw an ad, tapped a link, arrived on a page, and every downstream tool had something to hang a…

Read more →

Picture two people on the same Sunday in July.

Read more →

Enterprise communication in Australia, as well as in a number of other countries, is steadily entering a new phase. Two separate pieces of technology, such as RCS, which stands…

Read more →

Biotechnology doesn’t fall neatly into any one of the 16 government-designated critical infrastructure sectors that receive specialized and focused attention from feds, leading some lawmakers to worry that it’s not getting the protection from cyberattacks and other risks that it needs. That’s why a bipartisan group of senators and representatives announced legislation Thursday that would…

Read more →

WordPress has patched what it described as a critical severity security vulnerability that would allow an unauthenticated attacker full remote code execution (RCE) capabilities. There have already been reports of attacks in the wild. Given its popularity, WordPress has frequently been under attack, and patched another maximum severity bug allowing RCE in July. WordPress said…

Read more →

Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.

Read more →

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads. […]

Read more →

Ryuk member Karen Vardanyan was sentenced to 24 months in U.S. prison after extradition from Ukraine and ordered to pay $1.2M in restitution. Karen Vardanyan, a 35-year-old Armenian citizen who went by “Maneeken” and, oddly, “Karl Lagerfeld” online, was extradited from Ukraine and sentenced to 24 months in federal prison plus three years of supervised…

Read more →

The latest activity from the remote access Trojan (RAT) shows why organizations should monitor the behavior of applications rather than blindly trusting them, experts say.

Read more →

You can do a whole lot more than tap to pay with Google’s Wallet app.

Read more →

WordPress has patched what it described as a critical severity security vulnerability that would allow an unauthenticated attacker full remote code execution (RCE) capabilities. There have already been reports of attacks in the wild. Given its popularity, WordPress has frequently been under attack, and patched another maximum severity bug allowing RCE in July. WordPress said…

Read more →

Deeper Network Promo

A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. […]

Read more →

The space company wants to rapidly boost revenue over the next few years, betting its huge rockets will make it a powerful industry player.

Read more →

Microsoft plans more than $10 billion in Middle East capital and operating spending through 2030 under a framework initially focused on Saudi Arabia, the United Arab Emirates, Qatar and Kuwait. Capital and operating expenses cover a regional program stretching from cloud launches due this year to infrastructure work running through the end of the decade.…

Read more →

An OpenAI agent bypassed controls on Australia’s Medicare statistics portal, accessed non-public data and was not reported to officials for nearly 3 months.

Read more →

China’s AI boom is making it possible for a single founder to operate like a small startup team. Coding, customer support, marketing, design, and administrative work can increasingly be handled with AI tools, lowering the barrier to launching a business. More than seven million one-person businesses were established in China in 2025, up about 42%…

Read more →

Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install…

Read more →

MikroTrick chains two RouterOS flaws to bypass authentication and gain admin access. AI helped researchers uncover the attack chain within days. MikroTik pushed out patches on September 3, 2026 for several RouterOS issues at once, calling it an important security update without saying what it actually fixed. That silence was deliberate, and it didn’t last…

Read more →

A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two flaws in OnePlus’s own software to gain root access, the highest level of control over an Android phone. OnePlus told him the same flaws affect many more…

Read more →

A new Democratic bill in Congress would establish a federal Cybersecurity and AI Board of Investigations to provide independent government oversight of cyberattacks carried out by AI agents, following recent hacks by models run at companies like Anthropic, OpenAI, Meta and others. The bill, introduced by Sen. Ed Markey, D-Mass., would attempt to establish a…

Read more →

Welcome to this week’s edition of the Threat Source newsletter.  In the cybersecurity industry, trust is the invisible currency. Every practitioner carries the implicit trust not to abuse privileged access or knowledge of vulnerabilities in each employment or engagement. This trust is valued by those who require our services, but also by threat actors.  Clumsy…

Read more →

The Trump administration wants to spur U.S. chip-making, but tariffs on foreign imports could raise costs for American companies.

Read more →

This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked a hundred times before. That is the thread running through the pile. Trusted paths get poisoned. Old bugs find new jobs. AI tools leak more than expected. Fake…

Read more →

Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports. […]

Read more →

At Oktane 2026 in Las Vegas, Okta laid out a security blueprint, an alliance of 12 tech companies and free agent sign-on for every customer. The same Thursday, Australian time,…

Read more →

Law enforcement has arrested two leaders of a Russian-owned phone hacking company used by Kremlin agencies who allegedly masked its foreign ownership from the U.S. Defense Department, Department of Homeland Security and others to win millions of dollars worth of contracts, the Justice Department announced Wednesday. Lee Reiber of Boise, Idaho, the CEO of Oxygen…

Read more →

LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication.

Read more →

Proofpoint is expanding its security portfolio with two agentic systems designed to automate how organizations detect, investigate, and remediate risks across AI, enterprise data, and collaboration tools. At its flagship Proofpoint Protect 2026 event in San Diego, California, the company introduced: Agentic Data and AI Security System: A unified agentic system that combines AI and…

Read more →

GTIA has acquired the ASCII Group, bringing roughly 1,000 ASCII members into the Global Technology Industry Association’s network. But what does the acquisition actually mean for ASCII members, GTIA members and the broader MSP community? In this episode of Channel Insider: Partner POV, Katie Bavoso speaks with GTIA Chief Channel Officer Nancy Hammervik, longtime ASCII…

Read more →

Multiple vulnerabilities have been discovered in IBM Concert Software, the most severe of which could allow for remote code execution. IBM Concert is an agentic IT operations (IT Ops) and resilience platform designed to unify fragmented data, context, and actions across an enterprise’s hybrid cloud and IT environments. Successful exploitation of the most severe of…

Read more →

Claude, Anthropic’s chatbot, took over one writer’s vacation with his parents, prompting broader questions about its use..

Read more →

Due October 13, the $80 Surface mouse packs an impressive array of features. I want one.

Read more →

Read more →

Read more →

Read more →

In response to the emerging threat of rogue and shadow AI agents, here’s how the newly formed Blueprint Alliance seeks to help businesses secure their systems against anomalous AI activity.

Read more →

Image generators can be very bad at whetting diners’ appetites, rendering wings that look like they were ‘recovered from the reactor core.’

Read more →

Microsoft 365 E5 and E7 customers can now run security information and event management (SIEM) inside Microsoft Defender at no extra license cost. Microsoft is delivering the capability through the Integrated Security Operations Center (ISOC) in Microsoft Defender, which combines SIEM with Defender’s existing XDR, threat intelligence, automation and AI tools in a single portal.…

Read more →

Microsoft 365 E5 and E7 customers can now run security information and event management (SIEM) inside Microsoft Defender at no extra license cost. Microsoft is delivering the capability through the Integrated Security Operations Center (ISOC) in Microsoft Defender, which combines SIEM with Defender’s existing XDR, threat intelligence, automation and AI tools in a single portal.…

Read more →

IoT and OT devices can create hidden security gaps. Learn how asset visibility helps organizations find forgotten devices and reduce network security risks now.

Read more →

The “third-party[.]com” domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows browsers while displaying a harmless decoy to other users. “third-party[.]com has been a generic documentation placeholder for years, the same role example.com plays,” Manifold Security’s Head of Research, Ax Sharma, said. “Unlike ‘example[.]com,’ third-party[.]com

Read more →