What's happening in security
Breaches, credential dumps, actively exploited bugs and AI incidents — pulled from 5,645 items across public feeds, Have I Been Pwned and CISA KEV.
Biggest this week
- Westcon-Comstor posts record US$3.37B first-half sales as APAC demand for AI, cloud and cyber accelerates — Reseller News (NZ), 3d ago
- GitHub Octoverse 2026 — Simon Willison (AI), 4d ago
- Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen — The Hacker News, 3d ago
- Upwind Security Raises $400 Million at $3.8 Billion Valuation — SecurityWeek, 4d ago
- Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds — The Record, 3d ago
-
Cybersecurity Awareness Month 2026: Cybercrime Costs The World $20M Per Minute
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 7, 2026 October is Cybersecurity Awareness Month. CAM was established in 2004 by the U.S. Department of Homeland Security and the National…
-
FBI, Secret Service add to warnings of FortiBleed credential stealing campaign
Users of two types of Fortinet hardware should take steps to limit their exposure to a now-global credential stealing campaign, U.S. federal law enforcement says.
-
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secur…
-
SonicWall warns of max severity SSRF flaw in SMA1000 gateways
SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances. [...]
-
From Vientiane to Luang Prabang – in a helicopter, of course!
If you ever have the chance to choose exactly how to get, in daylight hours (ideally in the morning), from Vientiane, the capital of Laos, to Luang Prabang (which was the capital roughly half a millennium ago), then… well, first l…
-
Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains
Attackers who took control of three country-code top-level domains (ccTLDs) used that access to obtain HTTPS certificates for several Google domains and for domains run by other large organizations, Google disclosed on Tuesday. At…
-
Apple’s Verified Photography System
Apple just released a system called Reference Image. It can verify the image is exactly as taken by an iPhone new models only without tying it to a specific iPhone or photographer. It can also verify that multiple images came from…
-
The ASOS incident: When attackers use the channels customers trust
ASOS customers opened their phones to find a hostile push notification delivered through the retailer’s own app. The message claimed the company’s Snowflake environment had been compromised and directed ASOS to engage with the sen…
-
Your Windows PC can now reach other PCs through Windows App
Microsoft has made remote PC connections generally available in Windows App on Windows. Users can access physical or virtual Windows PCs alongside Windows 365, Azure Virtual Desktop, and Microsoft Dev Box resources. Windows App br…
-
Why you can’t afford to ignore supply chain security
Ernest Hemingway said, “the way to make people trustworthy, is to trust them”, but in the case of critical vendors our businesses rely on, can we really afford to apply that adage? Cyber risk no longer stops at the traditional bou…
-
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer (aka Psyche…
-
Even with OT network visibility, critical infrastructure operators struggle with legacy equipment
Large critical infrastructure operators run seven separate security tools on average, and most still cannot see every asset on their operational technology (OT) networks. That is the picture from a Palo Alto Networks survey of mor…
-
Quoting Jake Boggan
I was a graph theory junkie long ago and even moved to Budapest for awhile to study among the greats. While I was there I started working on Barnette's Conjecture which came to occupy my thoughts over the next 24 years of my life,…
-
Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System
The Arizona Supreme Court said the information was copied for people dating back as far as 30 years. The post Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System appeared first on Secur…
-
Reaching for the stars – PB Tech searches for singing talent
PB Tech is channelling the likes of America’s Got Talent and New Zealand Idol in its latest promotion, as it searches for top talent in its very own singing competition. The hardware reseller has launched PB Tech Star a contest in…
-
EmbeddingGemma 2
My comment on EmbeddingGemma 2 Hacker News. I really appreciate that EmbeddingGemma 2 is under the Apache 2.0 license. For embedding models in particular, I don't think it makes sense to use a closed, proprietary, hosted-only mode…
-
ClickFix Attacks Evolve to Better Hide Malicious Payloads
Threat actors are now hiding payloads by using DNS TXT records and browser cache pre-fetching, making it tougher to spot early attack stages.
-
Critical Healthcare Systems Aren't Quantum-Ready
A study of 2.5 million devices across 50 healthcare organization suggests the sector has a long way to go in getting ready for the post-quantum cryptography era.
-
Introducing Mistral Large 4: Le chonk
Introducing Mistral Large 4: Le chonk Mistral are back in the game. Today they're releasing a preview of Mistral Large 4, a 1 trillion parameter, 49 billion active parameter model trained on their own cluster of 3,800 NVIDIA Grace…
-
Wiretapping change sparks big privacy fight in the Golden State
An update to a state wiretapping law will end private lawsuits over some internet tracking and surveillance, pitting businesses against privacy groups and unions.’ The post Wiretapping change sparks big privacy fight in the Golden…
-
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
-
Using Parseable with Datasette for OpenTelemetry traces
TIL: Using Parseable with Datasette for OpenTelemetry traces I saw Parseable in a Show HN today - it's a new observability platform with both an open source (AGPL) Rust implementation (a single ~180MB binary), an "Enterprise" vers…
-
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to…
-
datasette-atom 0.11a0
Release: datasette-atom 0.11a0 A minor fix for compatibility with the latest Datasette alphas. This meant we could upgrade the datasette.io site to Datasette 1.0a41. Tags: atom , datasette
-
Alleged ATM malware creator appears in Nebraska court after arrest
Aguirre was added to the FBI’s “Top 10 Most Wanted Fugitives” list in March, becoming the first cybercriminal added to the list.
-
How to secure RMM software: 8 controls MSPs should test
RMM platforms give MSPs privileged access across customer environments, making their security controls critical to limiting risk. Acronis outlines eight controls MSPs should test when evaluating RMM software, from patching and pri…
-
SMB1001: How Huntress Maps to Each Tier
SMB1001 gives small businesses a cybersecurity standard with a finish line. See how its five tiers work and where Huntress maps to each control.
-
Cyber Incidents Put U.S. Water Infrastructure And Public Safety At Risk
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 6, 2026 – Listen to the Podcast Episode A new study shows that malware stealing employee passwords has put more than a thousand U.S. water…
-
FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware
An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026. The post FBI Arrests Most Wanted Developer of Ploutus ATM Malware appeared first on Secur…
-
Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
Significant cybersecurity M A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek .
-
Long-Running NPM Malware Campaign Accumulates 40,000 Downloads
Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign. The post Long-Running NPM Malware Campaign Accumulates 40,000 Downloads appeared first on SecurityWeek .
-
Blinder Tunnel Campaign Targets Iraqi Infrastructure
Analysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure. The post Blinder Tunnel Campaign Targets Iraqi Infrastructure appeared first o…
-
Social Engineering Detection Moves Into the Live Conversation
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering. The post Social Engineering Detection Moves Into the Live Conversation appeared first…
-
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a r…
-
Dicker Data acquires Sektor for NZ$138M
Dicker Data has acquired Asia Pacific distributor, Sektor Group for NZ$138 million, marking a significant milestone in its ambitions to break into the South-East Asia market. Sektor was established in 2009 and specialises in point…
-
Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark's national population register, the country's digitalization ministry sa…
-
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache. "Instead of downloading and executing remote payloads like the typical attack pattern, …
-
Cybersecurity jobs available right now: October 6, 2026
Associate IAM Engineer New York City Office of Technology Innovation USA On-site View job details As an Associate IAM Engineer, you will support daily identity and access management operations in Microsoft Entra ID and related pla…
-
Shares in British clothing company ASOS dive after hackers apparently send push notification
Several mysteries surround what appeared to be an unauthorized push notification sent to customers of London-based clothing company ASOS.
-
Wellington’s SSS partners with Palo Alto Networks for managed security services
Wellington-based managed security service provider Scientific Software and Systems (SSS) has launched a managed security offering based on the Palo Alto Networks platform. According to SSS, the service combines its local security …
-
ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.
-
Alleged ShinyHunters member reportedly detained in Jordan, assisting law enforcement
Saif al-Din Khader is cooperating with the FBI, reports said, as the bureau responds to a massive breach that exposed employee data.
-
Breach of Confidence — 05 October 2026
I ve been trying to explain to my kids why I won t let them use certain apps, and they ve started calling me paranoid. Am I? ShinyHunters Takes Up a New Hobby The 24-year-old Dutch suspect allegedly behind ShinyHunters has been mo…
-
How Huntress Detects and Responds to a ClickFix Attack
ClickFix attacks leave no file to scan or block, which is why most endpoint tools miss it. See how Huntress Attack Disruption kills the chain in under a second.
-
5th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 5th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Arizona’s state court system has suffered a phishing-led cyberattack after an emp…
-
Malwarebytes Scam Link Check analyzes URLs and explains potential risks
Malwarebytes has launched the Malwarebytes Scam Link Check, a free web tool that lets anyone check whether a website link is safe or dangerous before clicking it. Users paste any suspicious URL, the kind that arrives by text, emai…
-
Belarusian hacktivists spent two years inside Russian healthcare network, researchers say
Russian cybersecurity researchers attributed a quiet two-year espionage campaign to the Belarusian Cyber Partisans, a group better known for public attacks against governments and infrastructure.
-
tenfold CE: Our free Identity Governance tool just got 2 new features
tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new features help teams manage Microsoft 365 sharing and investigate suspicious ide…
-
Japanese media group Nikkei discloses cyberattack targeting journalistic sources
The Japanese media giant Nikkei disclosed a cyber incident involving an employee email account that may have compromised journalistic sources.
-
Bank CISO On Social Engineering Defense
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 5, 2026 – Listen to the Podcast Episode Kevin Novak is the CISO at Evansville, Ind.-based Old National, the sixth largest commercial bank …
Last fetch 19m ago · 1 new · 1 source error(s)