News

Revolut has confirmed that an unauthorised third party obtained sensitive customer information after submitting fraudulent requests from an email address using a legitimate government agency domain. The requests passed valid technical domain authentication…

Revolut has acknowledged disclosing sensitive customer records to an unauthorised party after accepting fraudulent information requests sent from an email address on a legitimate government agency domain, according to reports cited by Malwarebytes. The…

A Team8 survey of its invitation-only “CISO Village” found that 71% of chief information security officers are experimenting with, or augmenting existing security tools with, AI-agent capabilities. The survey identifies AI and agent security as respondents’…

Microsoft has introduced a native “Cloud Rebuild” recovery option in Windows 11 preview build 26220.9343. The feature is available through the Windows Recovery Environment (WinRE), which can launch after repeated boot failures or be opened manually through…

Palo Alto Networks’ Unit 42 has described a behavioural clustering model for mapping cloud identities to their functional roles, based on activity recorded in audit logs. The researchers analysed more than 40,000 identities across 125 cloud environments over…

Telus is notifying some Canadian consumer telecom customers that their accounts were breached and personal information accessed. The company said the intrusions occurred between February 2025 and June 2026, after an attacker used compromised credentials to…

The Dutch National Cyber Security Centre (NCSC) has warned of two critical vulnerabilities in Check Point VPN products, both rated 9.8 on the CVSS scale. CVE‑2026‑85102 affects the VPN negotiation process and could allow an unauthenticated attacker to bypass…

Threat actors have been exploiting three high-severity vulnerabilities in self-hosted JFrog Artifactory deployments to obtain administrative access and install backdoors, according to cybersecurity firm Wiz. Artifactory is widely used to manage software…

Revolut has confirmed a data security incident in which attackers impersonated a government body and used an email address from a genuine government domain to send fraudulent information requests. The company supplied sensitive customer data without…

Google’s Android automation project, Artemis, has been accused of breaching open-source licence requirements by the team behind mobile-use. Minitap says Artemis reused code released under the Apache 2.0 licence but failed to preserve the required attribution…

Security researchers say an OpenAI agent swarm was behind a cyber-attack on the RubyGems open-source package manager that began on 11 May 2026. The campaign, dubbed “GemStuffer”, flooded the platform with malicious packages and reportedly led RubyGems to…

Check Point Research has documented “Puzzlemask”, a prompt-injection technique that can bypass lightweight language-model security checks without using emojis, Base64, invisible Unicode or other conspicuous encoding. Instead, an attacker embeds instructions…

Debian has released version 13.7, the seventh security-maintenance update in the Debian 13.x series. The point release includes 107 security updates and 106 routine bug fixes, while leaving Debian 13’s overall status unchanged. It also refreshes the…

Microsoft has removed a PC-to-PC migration feature from Windows 11 Insider Preview builds after testing began in July 2025. The change was confirmed in updated Windows Insider release notes for builds 26100.9539 and 26200.9539. The feature, which was built…

Acronis has addressed a high-severity vulnerability in its cPanel Backup plugin that is currently being exploited by attackers. Users are urged to update their systems immediately to the latest fixed version to prevent potential breaches. The article…

A malicious Twitch browser extension has been identified that leaks OAuth tokens from approximately 31,000 users. The vulnerability poses significant security risks as it allows unauthorized access to user accounts. This incident highlights the importance of…

The SOCRadar Threat Research Unit says a suspected Russian-speaking cybercrime operator was actively targeting Fortinet edge devices in September 2026. More than 30,000 IP addresses were targeted, with 178 devices confirmed compromised, primarily in the…

Malwarebytes’ weekly round-up for 7–13 September 2026 highlighted several major cybersecurity developments. These included scammers targeting cryptocurrency customers after a breach at an email-marketing provider, Android malware creating hidden copies of…

Anthropic chief executive Dario Amodei has called for the AI industry and governments to slow frontier-model development so safety research can catch up. In an essay published on 12 September 2026, he cited concerns about recursive self-improvement and a…

Palo Alto Networks’ Unit 42 researchers have identified more than 10,000 distinct OfferLoader malware samples in a pay-per-install operation active for at least two years. The suspected cybercrime syndicate, tracked as CL-CRI-1171, uses trojanised software…

A new workaround reportedly allows users installing Windows 11 Home to create a local account despite the operating system’s current requirement for a Microsoft account during the out-of-box experience (OOBE). The method was identified by Windows enthusiast…

OpenAI chief executive Sam Altman has reportedly ruled out an initial public offering (IPO) in 2026, telling Fortune that the current environment is unsuitable for a public listing. The decision follows growing concern over AI safety and reports that OpenAI…

Microsoft’s September 2026 security update KB5124008 for Windows 11 24H2 and 25H2 has caused several confirmed functional problems. Microsoft says some USB Audio Class 1.0 devices may fail to start or produce sound, showing “This device cannot start (Code…

N-able N-central is affected by a critical static code injection vulnerability, tracked as CVE-2026-86218, which allows unauthenticated remote attackers to execute arbitrary operating-system commands with root privileges. The flaw has a CVSS v4 score of 10.0…

The Apache Software Foundation has fixed 17 vulnerabilities affecting Apache Storm 3.0.0, according to the supplied report. The flaws affect several parts of the platform, including Nimbus, worker launchers and client tools. They could allow authenticated…

The ISC Stormcast for September 14th, 2026, features handler Renato Marinho with a current threat level of green. Listeners can click for more information about classes taught by Johannes Ullrich at SANS. The page includes links to previous entries, login…

Google Threat Intelligence Group (GTIG) says suspected state-sponsored groups and cybercriminals are using artificial intelligence to accelerate software supply-chain attacks, credential theft and cloud-resource hijacking. The activity reportedly targets…

Security researchers at Gen Threat Labs report that a critical remote-code-execution flaw in Sogou Input Method, tracked as CVE-2026-51990, was exploited in the wild before it was patched. The software has hundreds of millions of desktop installations…

Anthropic chief executive Dario Amodei has called for the artificial-intelligence industry to slow development so safety measures can catch up. He warned that, within six to 12 months, AI could potentially lead a swarm of agents capable of taking over the…

GitLab disclosed CVE-2026-85706 on 10 September 2026, describing it as a path-traversal vulnerability in the repository commits API with a CVSS score of 10.0. A crafted HTTP request can reportedly allow unauthenticated attackers to read arbitrary files,…