News

The UK’s National Cyber Security Centre (NCSC), the FBI and the Netherlands’ General Intelligence and Security Service (AIVD) have warned that opponents of Iran’s regime may be targeted by a Tehran-backed spyware campaign. Their advisory, published on 15…

CenterPoint Energy has confirmed that an unauthorised third party obtained personal information belonging to some of its customers through an external-facing system. The Houston-based utility, which serves about 7 million electricity and gas accounts across…

Oracle has released its September 2026 Critical Security Patch Update (CSPU), containing 673 new security patches. The fixes address 672 unique CVEs across 17 risk matrices, while Oracle says patches for other flaws resolve more than 130 additional CVEs,…

Researchers at Zscaler ThreatLabz have analysed SloppyRAT, a remote-access tool linked to suspected ransomware operators and discovered in June 2026. The malware targets Windows endpoints and relies on social engineering rather than a software vulnerability.…

Group-IB researchers have identified Vwork, a malicious Android utility used alongside the Gigabud banking trojan by the GoldFactory cybercrime group. The campaign targets mobile banking users in 11 countries: Brazil, Colombia, Egypt, Indonesia, Laos,…

FortiGuard Labs has identified a campaign using the Casbaneiro banking trojan against financial consumers in Argentina, Peru, Colombia and Mexico. The suspected Latin American cybercriminal group distributes phishing emails and malicious PDFs posing as court…

Attackers are exploiting a vulnerability in the WooCommerce Wholesale Lead Capture plugin, allowing them to plant PHP web shells on affected sites. This compromise can lead to severe security risks, including unauthorized access and control over the web…

The article discusses active exploitation attempts targeting the WSO2 API Manager through JWT bypass using forged admin tokens, highlighting an increasing trend in API security vulnerabilities. Key points include the method of exploitation, potential impacts…

Google’s 16 September 2026 Pixel Update Bulletin addresses three Android vulnerabilities, including CVE-2026-58704, which Google says may be undergoing limited, targeted exploitation. The flaw affects the cellular modem firmware and is rated 8.0 under…

A report by 404 Media says OpenAI operates an initiative known as Project Lily, in which hundreds of outsourced prompt reviewers manually read genuine ChatGPT conversations. The reviewers are reportedly asked mainly to assess response style, including…

Google has unveiled two voice-focused AI models, Gemini 3.8 Live and Gemini 3.8 Live Extended Thinking, aimed at real-time conversations and more complex reasoning. The company says Gemini 3.8 Live is designed for large-scale, cost-efficient deployment and…

Google has announced an “Opening Night” event for 5 October in New York City, where it plans to publicly showcase its new Googlebook laptop range. The announcement follows confirmation that pre-orders will open on 21 September. Acer, ASUS, Dell, HP and…

The Apache Software Foundation has released updates for four Apache ZooKeeper vulnerabilities affecting versions 3.8.0 to 3.8.6 and 3.9.0 to 3.9.5. The flaws could affect distributed coordination clusters used by platforms including Apache Hadoop and Apache…

Google says its AI technologies and products now support more than 300 languages, potentially reaching up to 7 billion people, or about 86% of the world’s population. In an announcement attributed to senior vice-president James Manyika, the company also…

Google’s September 2026 Pixel Drop expands scam detection beyond Google Messages to notifications from third-party chat applications. The feature is rolling out in 10 markets: the United States, United Kingdom, Australia, Canada, Singapore, India, Germany,…

CISA has disclosed two vulnerabilities in mySCADA myPRO Manager, affecting installations running version 2.1 and earlier. CVE-2026-73807 is rated critical, with a CVSS v3 score of 9.8, while CVE-2026-82567 has a score of 6.3. Both are classified as…

Hewlett Packard Enterprise (HPE) issued a security advisory on 15 September 2026 covering four critical vulnerabilities in the API of its Networking EdgeConnect SD-WAN Orchestrator. The most severe, CVE-2026-76670 and the related CVE-2026-76669, are…

The content provides information about the ISC Stormcast for Wednesday, September 16th, 2026, including the handler on duty, Johannes Ullrich, and the current threat level, which is green. It includes links for further engagement such as discussions, classes…

The Apache Software Foundation has released fixes for six vulnerabilities in Apache Syncope, an open-source identity-management platform. The flaws affect the 3.0, 4.0 and 4.1 branches: versions 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0…

Google has released Chrome version 153, fixing 42 security defects, including three vulnerabilities highlighted in the report. CVE-2026-91749 is rated critical with a CVSSv3 score of 9.6 and involves an out-of-bounds read in the WebGL component.…

Security researchers have disclosed CVE-2026-90711, a critical IP-spoofing vulnerability in the Node.js `proxy-addr` package. The flaw is rated 9.1 under CVSSv3 and affects versions before 2.0.8, including version 1.1.0. `proxy-addr` is used by applications…

IBM X-Force has disclosed two vulnerabilities in Langflow OSS, including a critical flaw rated CVSS 9.6. CVE-2026-12944 affects versions 1.0.0 through 1.10.0 and results from an incomplete security-scanner blocklist. Although dangerous Python modules such as…

A likely North Korean advanced persistent threat group has targeted South Korean media and automotive organisations, with some compromises reportedly active since early 2025. Rapid7 attributed the activity to North Korean groups with medium confidence,…

Three vulnerabilities in the Squid caching proxy could enable HTTP request smuggling or out-of-bounds writes, potentially allowing cache poisoning and the delivery of malicious content to clients. The request-smuggling issue, CVE-2026-61642, stems from…

WHMCS released maintenance updates on 3 September 2026 to address two vulnerabilities affecting its web-hosting billing and provisioning platform. CVE-2026-67399 is rated critical, with a CVSS v4 score of 9.3, and involves forged payloads being submitted…

The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-76461, a critical Cisco Secure Email Gateway vulnerability with a CVSS score of 9.8, to its Known Exploited Vulnerabilities (KEV) catalogue. Cisco disclosed the zero-day in…

Microsoft has agreed with the American Federation of Teachers (AFT) to adopt privacy and safety standards for its artificial-intelligence tools used in schools. The legally binding agreement requires third-party audits and will apply from 1 November to all…

Microsoft issued out-of-band updates on 14 September 2026 to address several problems linked to its record-setting September Patch Tuesday release. The update addressed 974 unique CVEs, compared with 909 CVEs patched during all of 2023. Microsoft said some…

Security and compliance assessments based on annual audits and sampling may no longer give organisations a reliable picture of their current cyber risk, according to SecurityWeek contributor Sravish Sridhar, founder and chief executive of TrustCloud. He…

The supplied material describes a planned Black Hat USA 2026 talk, dated 15 September 2026, in which OpenAI security engineers and researchers will reconstruct an incident involving Hugging Face. According to the event description, frontier models operating…

The article discusses a new strain of banking malware known as Kreml, which targets Chrome and Edge browsers to steal user credentials and session tokens. The malware employs techniques to bypass security measures and install itself undetected. It exploits…

SOCRadar researchers have uncovered VectraRAT, a previously undocumented malware-as-a-service platform offered for $250 per month. The service includes a Windows implant, Linux command-and-control (C2) infrastructure and an operator panel, all reportedly…

Iranian hackers are utilizing malware controlled through Telegram to spy on dissidents and journalists. This tactic highlights the ongoing threat of cyber espionage, particularly within politically sensitive environments. The use of readily accessible…

Vercel’s two-week sandbox bug-bounty challenge generated 1,285 reports from HackerOne researchers conducting black-box testing and Trail of Bits engineers performing white-box assessments. The programme ran from 18 August to 1 September with a $1 million…

OpenAI has slowed training for some frontier AI models as part of a broader internal reorganisation focused on safety and security, according to co-founder and president Greg Brockman. Speaking on Bloomberg’s *Odd Lots* podcast, Brockman described the change…

IoT cybersecurity startup Exein has announced a $270 million funding round, taking its total funding to more than $600 million and valuing the Italy-based company at $1.7 billion. The oversubscribed round was led by Headline, with participation from Sofina,…

Malwarebytes reported on 15 September 2026 that 404 Media had found OpenAI hiring hundreds of contractors to review real users’ ChatGPT prompts and responses under a programme reportedly called “Project Lily”. Contractors score or critique answers to help…

Texas utility CenterPoint Energy has confirmed that an unauthorised third party obtained personal information belonging to some of its customers. The Houston-based company, which supplies electricity and natural gas to roughly 7 million customers in Indiana,…

SANS Internet Storm Center researcher Johannes Ullrich examined the network activity generated by a macOS 27 “Golden Gate” system during its first boot, before a user logged in. The capture contained about 300 packets, although Ullrich said this was probably…