U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog. U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. A new round of the weekly Security Affairs newsletter has arrived! Hackers reportedly hit Ukraine ‘s and Russia ‘s emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety. September 17, 2026 • All a sudden everyone is talking about the risk of an AI catastrophe or, in the case of President Trump, an AI “hoax.” Anthropic CEO Dario Amodei issued a call for a slowdown of frontier AI research over the weekend.
- Researchers found a chain of flaws that turned an ordinary public ChatGPT share link into attacker-controlled JavaScript running inside the victim’s signed-in session.
- “CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary commands, to conduct credential theft and data exfiltration,” the agency said .
- CEO admits service used for foreign exchange trading had holes company was slow to fix
- ICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children
- Beginning around October 2, he found about two dozen Cairn instances being used maliciously, which let him read the attackers’ work in real time.
“It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages,” the FBI said in a statement. Secret Service (USSS) and the Internal Revenue Service Criminal Investigation (IRS-CI), said it observed the threat actor converting stolen assets primarily into Ethereum (ETH). To do it, the attacker had to reach their HTTPS API over the network and have the trusted client’s public certificate. “The attackers attempted to dump sensitive databases and exfiltrate government mailboxes to access social media accounts.” T…
October 6, 2026 • Musk’s company, SpaceX, and Luckey’s company Anduril, could potentially benefit from recommendations made in the study about future autonomous weapon systems. The former head of the BND, Germany’s foreign intelligence service, was arrested on charges of treasonous espionage this week. October 15, 2026 • A crucial military communication system was disrupted in Ukraine this week, as Russian attacks pounded energy sites. Artificial Intelligence Data and Information Security Generative AI
FBI pins $6.3B Binance crypto heist on North Korean hackers
Host Maria Varmazis met with Yasrine Ibnyahya, VP of technology investments and partnerships at Viasat, to discuss Mobile Satellite Services Association (MSSA) Reference Architecture. U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel and Broadcom https://4equality.info/a-beginners-guide-to-4/ VMWare ESX flaws to its Known Exploited Vulnerabilities catalog. Binance probes suspicious crypto transfers worth up to $5.8 billion as Tether and Circle freeze $1.79 billion in stablecoins linked to the activity. The U.S. Cybersecurity and Infrastructure Security Agency …
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
FILE – The OpenAI logo is displayed on a cell phone in front of an image generated by ChatGPT’s Dall-E text-to-image model, Dec. 8, 2023, in Boston. The J. Edgar Hoover FBI Building is seen on Sept. 26, 2025, in Washington, D.C. Samuel Corum/Getty Images hide caption October 6, 2026 • The cuts come as a consequence of President Trump and FBI Director Kash Patel’s focus on violent crime and immigration, leaving other priorities understaffed.
Key comms cut-off in Ukraine / Zelenskyy sit-down / Russian diesel
Hosted by veteran journalist Joan Goodchild, Cyber Sessions brings candid conversations with top CISOs, strategists, and industry influencers. Zscaler CEO Jay Chaudhry on cybersecurity in the age of AI, company growth outlook Armadin CEO Kevin Mandia on defending against AI cyber threats, future of AI agents Aon CEO sees opportunity in AI infrastructure boom as cyber threats expose new insurance risks A Ukrainian national gets prison time for ransomware operations. Our guest is Josh Devon, Co-founder & CEO of Sondera, winner of the 9th annual DataTribe Challenge.
- Railway said the incident is likely part of a series of attacks designed to target platform companies with the ultimate goal of compromising artificial intelligence (AI) inference providers.
- An attacker who gained access to Keystone’s website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26.
- Cryptocurrency giant Binance said on Thursday that a “security incident” on its platform has impacted about $6.3 billion worth of assets.
- Unknown threat actors breached TeamUpdraft’s website and potentially gained unauthorized access to customers’ connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites.
- Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company’s Cambridge Analytica data scandal , which came to light in 2018.
- “Our team responded straight away and worked through the night to contain it – we closed the access route, signed out every account and replaced the keys and credentials that could have been affected.” As a result of the incident, threat actors are believed to have accessed its …
“The attackers behind this cluster of activity focused on Linux environments to conduct extensive reconnaissance and maintain persistent network access to support intelligence-gathering,” researchers Roey Porat and https://www.e-lib.info/the-9-most-unanswered-questions-about-2/ Tom Fakterman said . A notable aspect of the campaign concerns the use of large language models (LLMs) and/or automated artificial intelligence (AI) agents to generate payloads and execute malicious code. The attackers messaged and called employees on Teams while posing as the company’s own IT or help desk, working from outside tenants with support-themed names so the contact looked familiar. Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM.