Read more →

In response to the emerging threat of rogue and shadow AI agents, here’s how the newly formed Blueprint Alliance seeks to help businesses secure their systems against anomalous AI activity.

Read more →

Image generators can be very bad at whetting diners’ appetites, rendering wings that look like they were ‘recovered from the reactor core.’

Read more →

Microsoft 365 E5 and E7 customers can now run security information and event management (SIEM) inside Microsoft Defender at no extra license cost. Microsoft is delivering the capability through the Integrated Security Operations Center (ISOC) in Microsoft Defender, which combines SIEM with Defender’s existing XDR, threat intelligence, automation and AI tools in a single portal.…

Read more →

Microsoft 365 E5 and E7 customers can now run security information and event management (SIEM) inside Microsoft Defender at no extra license cost. Microsoft is delivering the capability through the Integrated Security Operations Center (ISOC) in Microsoft Defender, which combines SIEM with Defender’s existing XDR, threat intelligence, automation and AI tools in a single portal.…

Read more →

IoT and OT devices can create hidden security gaps. Learn how asset visibility helps organizations find forgotten devices and reduce network security risks now.

Read more →

The “third-party[.]com” domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows browsers while displaying a harmless decoy to other users. “third-party[.]com has been a generic documentation placeholder for years, the same role example.com plays,” Manifold Security’s Head of Research, Ax Sharma, said. “Unlike ‘example[.]com,’ third-party[.]com

Read more →

Detection rule portability is the practice of writing and managing threat-detection logic so it moves across SIEM, EDR, and XDR platforms without a full rewrite. What happens to my detection rules when I migrate to a new SIEM platform? Rules written in a platform’s native query language do not travel. SPL stays in Splunk. KQL…

Read more →

On September 4, 2026, Oren Yomtov, a security researcher from Accomplish, responsibly reported a vulnerability affecting Cloudflare Containers and Cloudflare Sandboxes (which is built on Containers), through Cloudflare’s bug bounty program. Cloudflare has fully remediated the vulnerability, and we have no evidence that customer data has been compromised.  This post was prepared in collaboration with…

Read more →

Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims

Read more →

MITRE ATT&CK detection coverage is the ratio of adversary techniques your SOC can detect, validated against the technique set your threat model prioritizes, on the current framework version. A coverage percentage means nothing without its denominator and proof method. Validated coverage counts techniques where a deployed detection rule fires against its required data source, divided…

Read more →

Detection accuracy is a property of a rule evaluated against a specific estate’s telemetry and field mapping, never a property of the source or the format. Free Sigma rules and paid detection content share the same format. The differences that matter sit in maintenance cadence, validation depth, translation testing, and who is accountable when a…

Read more →

Detection validation is the practice of proving a detection rule still fires on the events it was written to catch. Detection decay is the silent failure of a rule that once worked, after a log source, schema, or parser changes underneath it. A rule that is deployed and enabled is not a rule that is…

Read more →

Multi-tenant detection operations is the practice of managing one source of vendor-agnostic detection logic, translated and tuned per tenant, so a book of customers running different SIEM platforms stays consistent, tunable, and reportable from a single governed source. An MSSP running detection for dozens of tenants faces one structural question: does each customer get its…

Read more →

This installment of the Reporters’ Notebook video series discusses the impact of AI agents breaching Hugging Face, Fairlife’s ransomware attack, and Iranian-linked threat actors compromising a dozen US water systems. It was a busy summer.

Read more →

An active ClickFix campaign has been observed compromising legitimate Ukrainian business websites to inject bogus Cloudflare verification pages and trick victims into downloading a previously undocumented information stealer called Psychedelic. “When a visitor interacts with the page, the lure copies a Windows Installer command to the clipboard and instructs the visitor to paste it into…

Read more →

Phoenix, Arizona, 24th September 2026, CyberNewswire

Read more →

Keeping edge computing safe requires organizations to fundamentally rethink security governance. Here is a path forward: a step-by-step guide to building a SASE framework.

Read more →

FedRAMP’s new VDR and VER requirements make vulnerability management more continuous, with faster scanning, tighter remediation deadlines, and stronger evidence requirements. Anecdotes explains why the December 7 deadline is just the beginning of a broader shift toward continuous, automated compliance validation. […]

Read more →

Two Senate committee leaders are introducing legislation to foster cybersecurity standards for the telecommunications sector nearly two years after the landmark Salt Typhoon campaign was made public. First reported by CyberScoop, Virginia Sen. Mark Warner, the top Democrat on the Intelligence Committee, and Texas Sen. Ted Cruz, the GOP chairman of the Commerce, Science and…

Read more →

SymphonyAI has introduced Symphony Risk Intelligence (SRI), an enterprise-grade, agent-native platform built to unlock Always-on Compliance. This is a critical shift from periodic to continuous risk and compliance management, in which institutions continuously reassess risk and adapt controls as regulations, threats and business activity change, rather than waiting for the next scheduled review. Current approaches…

Read more →

AI agents sent to gather basic online data tried to hack into government and university sites when they hit roadblocks, joining a growing list of rogue incidents.

Read more →

Some owners, including me, have reported sudden shutdowns while adjusting Apple Watch settings.

Read more →

A flaw in VeloCloud Orchestrator enables attackers to access the platform organizations use to manage their VeloCloud SD-WAN subscriptions and the edge devices it controls. Arista, which now owns the VeloCloud business, warned customers that a vulnerable configuration exists in on-premises VeloCloud Orchestrator deployments that remote attackers may abuse to access “privileged internal functionality” and…

Read more →

Even if the organization locks down employee accounts, forgotten and lost service accounts can still undo the organization’s entire M365 environment.

Read more →

A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. […]

Read more →

It’s been five years since Google first offered a glimpse of Project Starline, a three-dimensional videoconferencing platform billed at the time as as a “magic window” that enables realistic and immersive calls. On Wednesday, Google announced that Google Beam — as the software element of the product is now called — is generally available for purchase,…

Read more →

A critical vulnerability in Next.js could allow remote attackers to execute arbitrary code on vulnerable servers through the framework’s ImageResponse functionality. Tracked as CVE-2026-94545, the flaw affects the Node.js implementation of ImageResponse in next/og and carries a CVSS score of 9.5. Vercel addressed the issue on September 22, 2026, with the release of Next.js 16.3.6.…

Read more →

Shadow AI is creating a widening gap between corporate AI policy and how employees actually use generative AI tools, prompting security leaders to look beyond written governance rules toward technical enforcement at the endpoint. The UK’s National Cyber Security Centre (NCSC) has warned that unauthorized AI use can expose sensitive data and create security blind…

Read more →

An OpenAI agent didn’t take “no” for an answer when it encountered a government website’s access controls. It got through, prompting Australia’s Prime Minister Anthony Albanese to raise his concerns directly with OpenAI CEO Sam Altman. The BBC reports that an OpenAI agent gained unauthorized access to an Australian government statistics portal while carrying out…

Read more →

Sooner or later, every security team hits the same situation: logs that normally just flow quietly through your own pipeline — from source to SIEM, doing their job — suddenly need to leave that pipeline. A vendor asks for a sample to help debug something. A one-off investigation, or a standing need to send telemetry…

Read more →

Microsoft has added a “pay-as-you-go” option for OneDrive storage, providing an additional way for Microsoft 365 commercial customers to buy extra cloud storage capacity for users. Previously, increasing storage capacity for OneDrive users meant purchasing capacity “packs” for individual accounts, available in 100GB, 500GB, and 1TB through 6TB sizes. With the new consumption-based billing, Microsoft…

Read more →

A decade ago, UiPath built its business on watching people work, recording keystrokes and clicks to automate tasks employees already did by hand. This week, amid an industry consumed by autonomous agents, the company’s newest product suggests that same instinct still has a place. UiPath used its Fusion conference in Las Vegas to launch Cartographer,…

Read more →

Enveda just put another $311 million behind its bet that AI can uncover medicines hidden in nature. The Boulder, Colorado-based biotechnology company closed a $311 million Series E round led by Catalio Capital Management, doubling its valuation from a year ago to about $2 billion. The round also drew new backing from Durable Capital Partners,…

Read more →

Censys is expanding its global Channel Partner Program with new go-to-market support, early access to its product roadmap, and additional enablement resources as the security vendor looks to build on rapid partner-led growth. The company said its ecosystem now includes more than 100 channel partners across 45 countries, with partner-sourced bookings growing 186% year over…

Read more →

Deeper Network Promo

Plus, more leadership lessons from UNGA 2026

Read more →

Shield Technology Partners, an MSP investment and operating platform, is launching Forge, an AI operating system built to automate core IT service delivery tasks and give MSP technicians more time to focus on higher-value customer work. Announced Sept. 24, Forge spans helpdesk operations, account strategy and project execution while allowing Shield’s partner companies to build…

Read more →

The company, which uses the machines for sorting and moving packages inside warehouses, is already one of the world’s top robot makers.

Read more →

AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.

Read more →

Before the Hugging Face and RubyGems hacks, autonomous OpenAI agents attempted to hack into three other websites, including an Australian government public health website, independent research lab Transluce revealed on Wednesday. “Notably, the tasks the agents were trying to solve were not cyber-related; the agents resorted to hacking tactics while working on ordinary data retrieval…

Read more →

CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise

Read more →

Most of us click on search results without knowing much about the website we’re about to visit. And once we’re there, it’s not always obvious when something isn’t quite right.   Now, we’ve added two new features to Malwarebytes Browser Guard that will do even more to keep you safe online.   Search Reputation gives you a…

Read more →

A court in Zurich has sentenced a Ukrainian man to 12 years and nine months in prison, and banned him from Switzerland for ten years, for developing ransomware that blackmailed companies around the world. Read more in my article on the Hot for Security blog.

Read more →

Cloud Range has announced the official launch of its AI Validation Range and Cloud Range AI Readiness Framework. They give organizations a structured way to test AI models and agents in realistic environments, validate their readiness for operational responsibility and safety, and determine which roles and tasks are best handled by AI versus human experts.…

Read more →

Gurucul has announced the general availability of Gurucul AI Risk and Response, bringing behavioral AI to the growing attack surface created as AI moves from assistant to actor. With hundreds of AI detections connecting activity to identity, access, data and broader security telemetry, the solution helps SOC and Insider Risk teams see who or what…

Read more →

Microsoft released the KB5124010 September 2026 non-security preview update for Windows 11 24H2 and 25H2, with 46 changes including Bluetooth improvements and the ability to remap the Copilot key. […]

Read more →

Airties has launched new integrated cybersecurity capabilities that enable ISPs to detect and remediate threats to connected homes and small businesses. As part of Airties’ Connectivity Experience Management Platform, these new capabilities turn the router into an additional security layer that safeguards every device on the network, giving ISPs a powerful baseline of protection for…

Read more →

The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I Been Squatted, the campaign uses fake Google Play pages branded as CEVA and TKW Logistics to distribute an Android Package Kit (APK) file that’s dressed up as a system service.…

Read more →

Azul has announced Azul Intelligence Cloud AI Assistant, a natural-language query interface that tells IT, DevOps and security teams where licensing and security risk is hiding in their production Java estate. The assistant provides answers grounded in live runtime data, replacing static reports that go stale the moment they’re generated. The widening attack surface This…

Read more →

LatticeFlow AI has announced the LatticeFlow AI Risk Center, an AI governance managed service that continuously assesses and controls AI risk, giving enterprises the technology, evidence, and expertise to scale AI with confidence and accelerate time to value. AI systems and agentic workflows are moving into production faster than most organizations can build the capabilities…

Read more →

Meta is expanding Private Processing to its AI glasses, extending their security protections into cloud data centers. The system runs AI models inside confidential virtual machines (CVMs) designed to prevent Meta from accessing users’ data. Private Processing combines protected hardware, encryption and software verification to secure data during cloud processing and storage. How Private Processing…

Read more →

The UK government will create a new body to track and disrupt disinformation campaigns run by hostile states, Prime Minister Andy Burnham announced at the United Nations General Assembly in New York. In his first address to the Assembly on 22 September, Burnham told world leaders he was tasking UK security chiefs to begin work…

Read more →

Lenovo is bringing Schneider Electric’s carbon management tools and decarbonization expertise into Lenovo 360 Circle, giving eligible channel partners new support to measure emissions, identify reduction opportunities, and build practical sustainability roadmaps. Schneider Electric brings decarbonization tools to Lenovo partners As a new ally, Schneider Electric will bring its Decarbonization Champion initiative to the channel,…

Read more →

Hexnode, Mitsogo’s enterprise software division, has unveiled Hexnode Synapse, an agentic AI orchestration layer for IT and security operations designed to turn requests and system events into coordinated, governed, and traceable actions. Hexnode Synapse helps MSPs coordinate service requests, alerts, and events from initiation to resolution across the tools involved. It extends workflows across the…

Read more →

Over the last few days, Google issued several different Chrome updates. On September 22, Google released a Stable Channel Update for Desktop. This is the most important one for desktop users. It brings Chrome to version 154.0.8037.57 for Linux and versions 154.0.8037.57/.58 for Windows and Mac. The update includes 108 security fixes including 11 rated…

Read more →

AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardian’s 2026 State of Secrets Sprawl Report, commits identified as AI-assisted are leaking secrets at approximately twice the rate of human-written ones. Most of the fastest-growing categories of leaked credentials are…

Read more →

We all know by now that Copilot can help you write and rewrite text in Word, often with mediocre results. But there’s more to Microsoft’s generative AI tool than just slopping out words. In fact, Copilot’s most useful features in Word have more to do with editing, formatting, and research assistance than with writing per…

Read more →

Devolutions is launching Devolutions Ventures, a new corporate investment arm focused on companies across the IT and managed service provider ecosystem. The initiative will target businesses in areas including secure access, network performance, automation, and other technologies that complement Devolutions’ existing platform. Unlike a traditional acquisition strategy, Devolutions plans to keep portfolio companies independent while…

Read more →

Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy

Read more →

​The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are now also exploiting a critical JetBrains TeamCity vulnerability patched in July. […]

Read more →

AI safety is moving closer to the consulting bench, not just the research lab. Anthropic is giving Accenture a seat inside its model-development process. Nearly a week after naming an Accenture team led by Faculty as its first embedded evaluator, Anthropic’s arrangement is drawing attention to a potentially broader services opportunity. Faculty specialists will work…

Read more →

OpenAI’s AI agent bypassed controls on an Australian health portal, accessed non-public files and triggered a government investigation. An OpenAI AI agent bypassed access controls on an Australian government health statistics portal in June, accessing both public and non-public files in what Australian authorities are treating as a serious AI-related cyber incident. The case was…

Read more →

Australian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026

Read more →

Plus, a perfect storm is raging in the bond market, and we tracked where MAGA podcasters are turning their attention as they tune out Trump.

Read more →

The foundation for modern society in America is under attack. State and local governments, entities that often oversee critical natural resources, schools, and hospital systems, are routinely targeted and breached by state-backed threat actors. Their budgets are simply too slim to provide the digital bulwarks required to fend off such attacks. The problem is growing.…

Read more →

Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure.

Read more →

Glassbox has earned Microsoft’s Solutions Partner with certified software designation for financial services AI, giving the digital experience analytics provider a new credential within the Microsoft AI Cloud Partner Program as it expands its Azure-backed AI portfolio. The designation confirms that Glassbox’s software meets Microsoft program requirements and is interoperable with Microsoft Cloud, including Azure.…

Read more →

A new Android banking trojan called RemControl tricks victims into installing a fake TV app, then takes control of their phones to steal banking PINs, Group-IB has found. Researchers confirmed that the malware targets customers of more than 30 banks in Italy, France, Spain, Poland, Portugal, Canada and some Gulf states. The first samples were…

Read more →

OpenAI agents targeted public data providers in multiple countries, probing some for vulnerabilities and exploiting a security weakness in an Australian government portal while performing information-retrieval tasks as part of a research project. […]

Read more →

Google plans to add private, server-side memory to Private AI Compute, enabling AI assistants to maintain continuity across devices while providing privacy protections normally associated with on-device processing. Private AI Compute is Google’s cloud platform for processing sensitive data with Gemini models in a hardware-isolated environment. It gives AI features access to greater computing power…

Read more →

Deeper Network Promo

States are competing for billions of dollars of planned capital spending on chip foundries, launchpads and data centers.

Read more →

ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows

Read more →

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from a novelty in late 2023 to a subscription product with on-chain infrastructure and a state-sponsored user base, and explains why…

Read more →

Crypto ATM scams often follow a predictable script – here’s how to recognize it and what to do if you’ve already been caught out

Read more →

An air traffic controller watching a busy scope will, sooner or later, miss the one aircraft that matters. Sustained attention decays under load, a limit aviation named the vigilance decrement and has spent seventy years designing around. AI has moved every knowledge worker into that chair. You now work a dozen aircraft at once: six…

Read more →

The clash over a proposed DHS rule to charge a $103,265 fee is reigniting a spat over highly skilled immigration.

Read more →

China’s humanoid robotics boom is running into a tougher test: proving that eye-catching machines can become sustainable businesses. Chinese securities regulators are using informal “window guidance” to slow planned humanoid robot listings, Reuters reported, citing people familiar with the matter. One source described IPOs in the sector as effectively frozen, while another characterized the move…

Read more →

The Irish Data Protection Commission (DPC) has fined Google €403 million ($459 million) for violating European privacy law. The penalty follows a six-year inquiry into Google’s management of user location data between May 2018 and February 2020. During that time, Google collected users’ location data without making clear that it could be used to infer…

Read more →

SANS Institute report claims data rather than skills is now the main hurdle for threat hunters

Read more →

In January 2018, the entire computer industry was put on alert by two new processor vulnerabilities dubbed Meltdown and Spectre that defeated the fundamental OS security boundaries separating kernel and user space memory. The flaws stemmed from a performance feature of modern CPUs known as speculative execution and mitigating them required one of the biggest patch coordination…

Read more →

GNOME 50.5, which the GNOME Release Team shipped on September 24, patches a CVE in the gvfs file system layer, a JavaScript injection flaw in the Epiphany web browser and a use-after-free bug in the librsvg image library. The release updates 22 modules. Users who browse with Epiphany, view SVG images through librsvg or reach…

Read more →

Microsoft has fixed a known issue that breaks the built-in File History backup feature on some Windows systems after installing the September 2026 security updates. […]

Read more →

Apple introduced a scam-prevention feature called Impersonation Risk Detection with iOS 27 and iPadOS 27. The feature allows supported apps to request a risk assessment when a user takes an action that could be connected to an active social engineering scam. “Impersonation Risk Detection helps protect against active social engineering scams. In these scams, an…

Read more →

Anthropic engineers made claude.ai and the Claude desktop app roughly three times faster during a two-week sprint in August, with Claude finding the bottlenecks and writing the fixes. The team merged more than 3,000 changes and says none of them caused a customer-facing incident or rollback. The engineers ran the whole thing out of one…

Read more →

Following a successful inaugural event in 2025, Konica Minolta Australia, Macquarie University, and ANZRP’s TechCollect are joining forces again for the Rethink e-recycling…

Read more →

An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said. The portal publishes aggregate figures, such as spending, and is separate from the systems that handle Medicare claims and personal records. The agent reached files on it that were not…

Read more →

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. It originated from 1,487 unique AWS EC2 source IP addresses. “The campaign compromised 7 accounts –

Read more →

Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse basic security controls. Here is the defanged link: hxxps://YKZjqa7A@gynd–[.]koncar-hr[.]com/handlers@isc.sans.edu Let’s break it down… The first trick is the old “userinfo” field. According to RFC 3986[1], everything between the…

Read more →

Cisco Talos finds CLOSEDQUORUM, malware that lets four commercial AI models vote on its next move, with no human operator required. Cisco Talos found malware, dubbed CLOSEDQUORUM, that holds a vote before deciding what to steal from you. Four AI models vote on its next move, without any human interaction. CLOSEDQUORUM is the first Windows…

Read more →

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). “An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file

Read more →

NBN Co is trialling a solar panel ‘sleeve’ designed to keep fixed wireless services running during power outages using solar energy and battery storage systems.

Read more →

In this interview with Help Net Security, Kelly Herrell, CEO at Nol8, explains where AI agents create exposure inside organizations. The first thing to examine is the data path: what an agent can reach, what enters its context, and where results go. Ticketing systems, CRM platforms and shared drives hold years of sensitive context that…

Read more →

By early August, attackers had hit water systems in at least seven U.S. states. The FBI and EPA said the intruders remotely accessed internet-facing programmable logic controllers, the small industrial computers that run pumps and valves. Operators lost monitoring or control, and in some cases water operations degraded. Federal investigators are examining possible links to…

Read more →

Ubuntu kernels will ship every week under a new release schedule from Canonical, which is merging its four-week cycle for regular Stable Release Updates (SRUs) and its two-week cycle for security fixes into a single two-week cycle. The cycles overlap, each starting a week after the one before, which is what produces a weekly release.…

Read more →

Disruptive attacks on public-facing services, financially motivated cybercrime and compromises of shared technology providers are increasing cybersecurity risks across Europe. ENISA’s Threat Landscape 2026 identifies cybercrime, state-linked activity, foreign information manipulation and interference, hacktivism and vulnerability exploitation as key threats. Geopolitical developments influence attackers’ targets, and interconnected digital systems allow disruption to spread across organizations.…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

Last year Autodesk told the industry that it should not fear AI. Just point it at the boring bits and let humans get back to the designing, engineering, and building of things….

Read more →

Technology industry veteran to strengthen partner momentum and help customers unlock the value of data in the age of AI.

Read more →

A firewall is supposed to be the barrier between attackers and the enterprise network, but that barrier can itself become a threat actors’ tool. Check Point has revealed that attackers are actively exploiting two vulnerabilities in its Security Gateway and Security Management products. The security software provider has warned that attackers are targeting CVE-2026-85102, a…

Read more →

Worldwide AI spending will increase 49.5% in 2026, to $2.7 trillion, and grow another 36.2% in 2027 as AI usage continues to expand, Gartner predicts in the latest quarterly update to its IT spending forecast. But there’s been no diversion of money from other areas of IT to feed AI, said Gartner Distinguished VP Analyst…

Read more →