What's happening in security
Breaches, credential dumps, actively exploited bugs and AI incidents — pulled from 5,641 items across public feeds, Have I Been Pwned and CISA KEV.
Biggest this week
- Westcon-Comstor posts record US$3.37B first-half sales as APAC demand for AI, cloud and cyber accelerates — Reseller News (NZ), 3d ago
- GitHub Octoverse 2026 — Simon Willison (AI), 4d ago
- Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen — The Hacker News, 3d ago
- Upwind Security Raises $400 Million at $3.8 Billion Valuation — SecurityWeek, 4d ago
- Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds — The Record, 3d ago
-
AI agents keep access to company data after their work is done
IT teams responsible for identity security are concerned about AI agents’ ongoing access to company systems and the actions they take on users’ behalf, according to a Delinea’s 2026 Identity Security Report: The AI Enforcement Gap…
-
New infosec products of the week: October 2, 2026
Here’s a look at the most interesting products from the past week, featuring releases from BlackFog, Genea, Vega, and Thales. Vega II brings security-trained AI and lasting memory to the SOC Vega has introduced Vega II, its bigges…
-
Our AI Agents Should Pay the People Who Help Them
A charcoal sketch of a giant purple robotic hand pouring streams of small sienna coins down to four human creators standing on a rock ledge beside the things they made: a sketch on an easel, a stack of handwritten pages, an open b…
-
Autonomous AI agents tried to hack US, Canadian government websites
Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorce statistics. [...]
-
Microsoft says threat actors are ahead in the early AI race
Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and post-compromise activity while securit…
-
Happy Opt Out October! Let’s Find Real Alternatives to the Tech Giants
Over the years, the major tech companies have found all sorts of ways to embed themselves into our lives. We often use their software, their AI tools, their social media, and their operating systems by default without even thinkin…
-
OpenAI software attempted to secretly scrape data from dozens of prominent websites
The findings, released Thursday by Asymmetric Security, are just the latest example of rogue behavior spurred by OpenAI’s software.
-
National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations
Sean Cairncross talked about regulations, China, pilot projects and more Thursday. The post National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations appeared first on CyberSco…
-
Please enjoy Daisy Dixon talking on the This Guy Sucked podcast about Paul Gauguin. Come for the art history, …
Please enjoy Daisy Dixon talking on the This Guy Sucked podcast about Paul Gauguin. Come for the art history, stay for the discussion of AI nudifying apps and tearing down Confederate statues: https://www. youtube.com/watch?v=joh_…
-
Researchers find Chinese hacking campaigns targeting AI firms, Asian governments
Two separate reports by cybersecurity companies highlight China-linked hacking operations, including a phishing campaign that impersonated Western experts.
-
Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right. The post Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks appeared fir…
-
pwasm 0.2a0
Release: pwasm 0.2a0 pwasm is one of my folly projects - an entirely vibe-coded pure Python WebAssembly engine that I built in January during my first bout of AI mania . I hadn't touched it since January, so I decided to let Claud…
-
SOC staffers generally pleased with AI’s impact, but worries remain
AI is likely to eliminate some entry-level SOC roles, a survey found, but it is also creating opportunities to develop more strategic skills.
-
State-linked actor targets US AI policy experts in credential phishing campaigns
The China-linked espionage attacks were designed to gain insight into the country s strategy and regulatory environment.
-
Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures. The post Enterprises Struggle to Prepare for AI and Quantum Threats,…
-
AI policy circles targeted in China-linked phishing operation
Cybersecurity firm Proofpoint said TA419 impersonated officials and AI industry figures in an effort to gain access to cloud accounts held by U.S. think tank, university and legal-sector experts. The post AI policy circles targete…
-
DeepKeep’s AI Lens flags coding agent data leaks and routes destructive commands for approval
DeepKeep has announced AI Lens for Developers, a new extension to the company s AI usage control and runtime protection modules to secure software developers and their coding agents that can write, modify, and execute code on thei…
-
Exabeam brings AI-assisted security investigations to data that must stay on-premises
Exabeam has introduced a new wave of capabilities that bring the Agentic SOC to life in the cloud and on-premises environments, combining AI-driven investigation, execution, and governance. Analyst workflows alone can’t keep pace …
-
Sophos uses agentic AI to show businesses which security fixes deserve funding
Sophos has launched Sophos CISO Advantage, an agentic AI-enabled solution that connects security operations to security strategy. The solution gives organizations a picture of their cyber risk, a prioritized plan to reduce it, and…
-
Legit Security extends automated fixes to vulnerable open-source dependencies
Legit Security has announced an expansion of its Agentic Remediation capability to cover vulnerabilities found in open-source dependencies, not just first-party code, enabling development teams to move from vulnerability detection…
-
Cybersecurity Brands Use YouTube Videos To Show Up In Google AI Overviews
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 1, 2026 – Read the Full Report Cybercrime Magazine s 2026 Cybersecurity CMO Report sheds light on a powerful Generative Engine Optimizatio…
-
How AI Is Changing the Roles Required in the Security Operations Center
As AI takes on more of the enrichment, correlation, and initial assessment inside the SOC, roles, skills, and KPIs still require deliberate redesign. Security leaders need to decide where automation is dependable, where human judg…
-
Kevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation
The Series B brings the AI-powered offensive security startup’s total funding to roughly $445 million only seven months after its public launch. The post Kevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation appeare…
-
Armadin raises $255.5 million to expand AI offensive security platform
Armadin has raised $255.5 million in Series B funding co-led by Andreessen Horowitz (a16z) and Accel that brings the company’s valuation to over $2.5 billion. The round includes participation from new investors Bain Capital Ventur…
-
OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates
OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from its artificial intelligence (AI) models. A "core cluster of the activity," go…
-
Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders
The company says its new frontier AI model found a critical vulnerability in software used by hospitals worldwide. The post Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders appeared first on SecurityW…
-
Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version
Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled out to a set of trusted cyber defenders through its Fairwind Program. "It delivers frontier perform…
-
BlackFog adds prompt protection and governance for agentic AI
BlackFog has announced the launch of ADX Vision 2.0, expanding its AI security capabilities to help organizations govern and control the use of generative and agentic AI across the enterprise. As employees move from simply interac…
-
HPE’s Rahim: Pace of change in the data centre is ‘extraordinary’
Following its record-setting third quarter , HPE said it expects cumulative AI network orders for fiscal 2026 to top $3 billion, exceeding its previous forecasts. The company also raised its fiscal 2027 networking revenue target, …
-
Many expect AI in the SOC to make entry jobs harder to get
A junior analyst in a security operations center, or SOC, has usually learned the job the slow way. You work the same phishing lure dozens of times, chase the same familiar malware pattern and write up the same case note at the en…
-
Google says Gemini 4 Argon can find and patch critical software flaws
Google announced Gemini 4 Argon, its new frontier AI model, and is rolling it out to a set of trusted cyber defenders through its Fairwind Program. Google says the model can locate critical software vulnerabilities, validate them,…
-
Google’s SynthID Bio can watermark AI-designed protein binders without breaking them
Google DeepMind has built SynthID Bio, a watermark for AI-designed proteins, and shown in wet-lab tests on protein binders that it leaves their function intact. The method hides a signature in the amino acid sequence of a designed…
-
You know what if you're the one person who unfollowed me because I talked about AI giving oral to everyone on …
You know what if you're the one person who unfollowed me because I talked about AI giving oral to everyone on my Mastodon server OK I get it
-
AI intensifies focus cyber security awareness month
AI is lowering the barrier for cybercriminals, making scam detection and cyber awareness a growing priority for organisations of all sizes. That shift is driving renewed emphasis on cyber awareness and scam detection as organisati…
-
Bunnings launches Google Cloud-powered AI shopping assistant
Bunnings has become the first New Zealand retailer to launch a shopping agent using Google Cloud’s Gemini Enterprise for Customer Experience platform. The home improvement retailer worked with Google Cloud to develop an AI-powered…
-
FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers
An FTC spokesperson confirmed the investigation but declined further comment. The post FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers appeared first on SecurityWeek .
-
Oh god a rogue AI has broken out on Mastodon and it's giving everyone on infosec.exchange free oral help help
Oh god a rogue AI has broken out on Mastodon and it's giving everyone on infosec.exchange free oral help help
-
RE: https:// mastodon.social/@404mediaco/11 7361538616335870 Judges are not messing around when attorneys are …
RE: https:// mastodon.social/@404mediaco/11 7361538616335870 Judges are not messing around when attorneys are out here handing in hallucinated briefs generated by ChatGPT This judge let him HAVE IT
-
OpenAI reveals ‘novel’ encryption bypass used in distillation attack
The company said individuals associated with Chinese company MoonshotAI were behind parts of the attack, but did not offer hard evidence for the claim. The post OpenAI reveals ‘novel’ encryption bypass used in distillation attack …
-
Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecting users.
-
Trump, Tech Giants Strike Voluntary AI Safety Accord
The new White House Accord on so-called Super Intelligence calls on companies to implement greater controls and oversight over AI safety.
-
Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, devices, data, applications, clouds, infrastructure, and the AI agents now working alongside your teams. The po…
-
As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half
New Swimlane research underscores a paradox: While AI detection and response is essential to giving defenders an edge, one in four security pros say AI limits their skill development.
-
📱 Hey Siri, How Do I Limit AI Data Access? | EFFector 38.17
With the launch of iOS 27, Apple is rolling out a variety of new AI features to its familiar voice assistant, Siri. But how are AI tools like these handling our data? In our latest EFFector newsletter , we're talking about the pri…
-
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity…
-
RE: https:// infosec.exchange/@breachplease /117360297148277153 I couldn't put my finger on it yesterday, but …
RE: https:// infosec.exchange/@breachplease /117360297148277153 I couldn't put my finger on it yesterday, but this is like from The Dictator when the they rename a bunch of words to Aladeen, leading to mass confusion. The AI/SI th…
-
Today's Breach Please is out. Me and @ Secitup talk about super intelligence and one of OpenAI's agents turnin…
Today's Breach Please is out. Me and @ Secitup talk about super intelligence and one of OpenAI's agents turning to DNS tunneling to try to break out of its sandbox. https:// youtu.be/eKkyPqmMuCY
-
AI's Third Wave: Coworkers Break the Security Model That Worked for Agents
Persistent AI coworkers may operate continuously with standing access, creating identity risks that existing security models were not designed to handle. Token Security explains why these agents need their own identities, owners, …
-
AI coding agents leaked 13,000 internal company screenshots to public GitHub repos
When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow Labs. Diagram showing how AI agents leak screenshots to public r…
-
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from develop…
Last fetch 3m ago · 0 new · 1 source error(s)