News

What the cybersecurity press and forums are saying · updated
From the press
The Register - Security ·

Cloudflare tries to outplay Jev with open-weight Clef models

Sure, it costs more, but it can handle images and video and it's available on Hugging Face if you have the hardware horsepower to run it locally
The Hacker News ·

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organizations and threatening to publish it on…
Dark Reading ·

Alleged KillSec Ransomware Mastermind a 16-Year-Old

Law enforcement from multiple countries collaborated to disrupt a cybercrime operation that has claimed some 500 victims worldwide in the past two years.
CISA Cybersecurity Advisories ·

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog mvining Oct 01, 2026 Release Date October 01, 2026 Description CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV)…
The Record from Recorded Future News ·

Iranian accused of hacking American universities extradited from Montenegro

An Iranian national accused by the U.S. of taking part in dozens of breaches involving the theft of academic data and intellectual property has been extradited from Montenegro.
CyberScoop ·

Authorities seize KillSec extortion group infrastructure, arrest 3 alleged members

The teenager-run cybercrime group victimized roughly 500 organizations in less than two years. The post Authorities seize KillSec extortion group infrastructure, arrest 3 alleged members appeared…
SecurityWeek ·

Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks

Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right. The post Zero Trust Creator Says Model Holds Firm Against…
Cyber Security News ·

FTC Investigating OpenAI, Anthropic and Other AI Models Over Potential Risks to Customers

The Federal Trade Commission has opened an investigation into OpenAI, Anthropic and other artificial intelligence companies over potential risks their products pose to customers. An agency…
BleepingComputer, Security ·

Autonomous AI agents tried to hack US, Canadian government websites

Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorce statistics. [...]
HIPAA Journal, Healthcare Data Breach ·

OCR Clarifies When SUD Records Can be Used to Verify Medicaid Community Engagement Exclusions

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has issued guidance for state Medicaid […] The post OCR Clarifies When SUD Records Can be Used to Verify Medicaid…
CISA Known Exploited Vulnerabilities Catalog ·

Johnson Controls EasyIO Neo Series EC and CW Controllers

Johnson Controls EasyIO Neo Series EC and CW Controllers khardwood Oct 01, 2026 Release Date October 01, 2026 Description View CSAF Summary Successful exploitation of this vulnerability could allow…
Help Net Security ·

16-year-old suspected leader of KillSec ransomware group arrested

A 16-year-old is suspected of being the main operator of KillSec, a ransomware group that Eurojust says is responsible for almost 1,000 attacks worldwide. Seizure notice (Source: Eurojust) According…
The Register - Security ·

Stanford prof is beating the drum for a new protocol to replace TCP

Homa is a rethink of networks for the AI age
The Hacker News ·

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system does a little more than people expect. A model…
CISA Cybersecurity Advisories ·

CISA Malcolm

CISA Malcolm khardwood Oct 01, 2026 Release Date October 01, 2026 Description View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3…
The Record from Recorded Future News ·

OpenAI software attempted to secretly scrape data from dozens of prominent websites

The findings, released Thursday by Asymmetric Security, are just the latest example of rogue behavior spurred by OpenAI’s software.
CyberScoop ·

National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations

Sean Cairncross talked about regulations, China, pilot projects and more Thursday. The post National cyber director: Government-industry collaboration vital to managing AI risks, competition with…
SecurityWeek ·

Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains

Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures. The post Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains…
Cyber Security News ·

Hackers Built a Windows Backdoor Whose Entire C2 Lives Inside Microsoft 365

Hackers have built a Windows backdoor that uses Microsoft 365 for all its native command and control communications. Named Antino, the malware turns Outlook messages and OneDrive files into channels…
BleepingComputer, Security ·

Microsoft says threat actors are ahead in the early AI race

Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and…
HIPAA Journal, Healthcare Data Breach ·

Data Breaches Announced by Saber Healthcare & Buchalter

Data breaches have been announced by Saber Healthcare in Ohio and Buchalter, a California-headquartered law firm that provides services to […] The post Data Breaches Announced by Saber Healthcare &…
Help Net Security ·

DeepKeep’s AI Lens flags coding agent data leaks and routes destructive commands for approval

DeepKeep has announced AI Lens for Developers, a new extension to the company’s AI usage control and runtime protection modules to secure software developers and their coding agents that can write,…
The Register - Security ·

Cloudflare launches Data Platform with bland 'Basin' branding, promise of fewer fees

Serverless data management without egress fees, sort of
The Hacker News ·

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to…
CISA Cybersecurity Advisories ·

Meari IoT Cloud Platform OpenAPI Service

Meari IoT Cloud Platform OpenAPI Service khardwood Oct 01, 2026 Release Date October 01, 2026 Description View CSAF Summary Successful exploitation of these vulnerabilities could allow attackers to…
The Record from Recorded Future News ·

Researchers find Chinese hacking campaigns targeting AI firms, Asian governments

Two separate reports by cybersecurity companies highlight China-linked hacking operations, including a phishing campaign that impersonated Western experts.
CyberScoop ·

AI policy circles targeted in China-linked phishing operation

Cybersecurity firm Proofpoint said TA419 impersonated officials and AI industry figures in an effort to gain access to cloud accounts held by U.S. think tank, university and legal-sector experts. The…
SecurityWeek ·

Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass

Rob Juncker is chief product and technology officer at Mimecast. Is he a hacker? “Unequivocally yes,” he says. The post Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass…
Cyber Security News ·

16-year-old Alleged KillSec Ransomware Group Leader Arrested, Servers Dismantled

Authorities have identified a 16-year-old as the suspected main operator of the KillSec ransomware group after an international law-enforcement operation disrupted the group’s infrastructure and led…
Help Net Security ·

Exabeam brings AI-assisted security investigations to data that must stay on-premises

Exabeam has introduced a new wave of capabilities that bring the Agentic SOC to life in the cloud and on-premises environments, combining AI-driven investigation, execution, and governance. Analyst…
The Register - Security ·

EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank

RUSI wants procurement rethink that could put US suppliers under scrutiny too
The Hacker News ·

How Financial Services Companies Can Modernize Their Software Supply Chain

Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to…
CISA Cybersecurity Advisories ·

Johnson Controls EasyIO Neo Series EC and CW Controllers

Johnson Controls EasyIO Neo Series EC and CW Controllers khardwood Oct 01, 2026 Release Date October 01, 2026 Description View CSAF Summary Successful exploitation of this vulnerability could allow…
The Record from Recorded Future News ·

Police disrupt KillSec ransomware, arrest suspected teenage leader

European police said raids against the KillSec ransomware-as-a-service operation included the arrest of a high-profile teen suspect.
SecurityWeek ·

Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says

PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures. The post Enterprises Struggle to…
Cyber Security News ·

Fake Zoom Installer Tricks Mac Users Into Installing New CloudSyncD Backdoor

A fake Zoom installer is tricking Mac users into handing over their login passwords and launching CloudSyncD, a newly identified backdoor. The malware hides inside an application that looks familiar,…
Help Net Security ·

RadarFirst helps teams investigate AI bias, data exposure and unintended actions

RadarFirst has announced the general availability of Radar AI Incident Management, a purpose-built solution that helps organizations investigate, manage, and document AI-related incidents. As…
The Register - Security ·

Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing

Your invite to a fake AI policy advisory committee has strings attached
The Hacker News ·

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates

OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from its artificial intelligence (AI) models. A…
CISA Cybersecurity Advisories ·

CISA Launches Cybersecurity Awareness Month: Securing the Next 250

CISA Launches Cybersecurity Awareness Month: Securing the Next 250 mnavarro Oct 01, 2026
SecurityWeek ·

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader

Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims. The post Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader appeared first on…
Cyber Security News ·

Chinese Hackers Posing as Senior Anthropic Employee Targeting US AI Policy Experts

A China-aligned hacking group tracked as TA419 has impersonated a senior Anthropic employee and well-known policy figures to target US artificial intelligence experts. Proofpoint linked the activity…
Help Net Security ·

Sophos uses agentic AI to show businesses which security fixes deserve funding

Sophos has launched Sophos CISO Advantage, an agentic AI-enabled solution that connects security operations to security strategy. The solution gives organizations a picture of their cyber risk, a…
The Register - Security ·

AWS offers local, open source leash for agent harnesses

Dogwood Local Engine checks AI tool calls against user-defined temporal rules before they run
The Hacker News ·

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited…
CISA Cybersecurity Advisories ·

ABB Protection and Control IED Manager PCM600

ABB Protection and Control IED Manager PCM600 khardwood Oct 01, 2026 Release Date October 01, 2026 Description View CSAF Summary Successful exploitation of these vulnerabilities could allow an…
SecurityWeek ·

AI Has Changed Attack Speed, Not Security Fundamentals

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. The post AI Has Changed…
Cyber Security News ·

Warlock Ransomware Exploiting SharePoint Flaws to Attack Water and Telecom Operators

A China-nexus threat actor is continuing to exploit Microsoft SharePoint Server vulnerabilities to deploy Warlock ransomware, with recent attacks striking essential-service and public-sector…
Help Net Security ·

AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit

An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer…
The Register - Security ·

Microsoft makes Windows settings backup the default in 26H2

Annual update installed. You're up to date, so nothing seems to have changed. Wait a minute...
The Hacker News ·

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version

Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled out to a set of trusted cyber defenders through its Fairwind…
CISA Cybersecurity Advisories ·

Monta monta.app

Monta monta.app khardwood Oct 01, 2026 Release Date October 01, 2026 Description View CSAF Summary Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized…
Cyber Security News ·

WordPress Malware Comes Back After Removal Using a Self-Healing Backdoor

A WordPress backdoor is bringing deleted malware back within seconds, turning routine cleanup into a cycle of reinfection. Called SC, the infection spreads its working parts across website files, the…
The Register - Security ·

Build the right AI factory for your needs: partner for success

SPONSORED FEATURE: HPE and NVIDIA help organizations apply accelerated computing, software, enterprise infrastructure, networking, control plane, and services to the workloads and business outcomes…
Cyber Security News ·

Microsoft Enables Windows 11 Backup Setting by Default for Organizations

Microsoft has enabled Windows settings backup by default for eligible devices running Windows 11, version 26H2, turning an opt-in function into a baseline resilience capability. The change, generally…
On the forums
What Advice Would You Give Your Younger Self in Cybersecurity
r/cybersecurity · 19 · 62 Career Questions & Discussion
I finally broke. I am now using Claude to help manage in prod scripts and write documentation.
r/sysadmin · 313 · 305 General Discussion
PSA: CRA Article 14 reporting has applied since 11 September. A few things that are easy to miss
r/cybersecurity · 5 · 4 Business Security Questions & Discussion
Microsoft is retiring the public Microsoft Learn GitHub repos by end of Dec 2026
r/sysadmin · 73 · 14 Microsoft
2026 Microsoft Digital Defense Report: credential theft, ClickFix, phishing shifts, and a 5.3-hour container exploitation window
r/cybersecurity · 28 · 5 Research Article
Headlines and pictures belong to their publishers and link to them.