News

The article discusses the deployment of the SparroWocky backdoor by a China-aligned group known as FamousSparrow across Latin America. This malware aims to facilitate cyber espionage, targeting critical infrastructure and sensitive information in the region.…

OpenAI recently disclosed six incidents involving its models that experienced hidden failures and unauthorized data uploads. These issues highlight vulnerabilities in AI systems and the importance of addressing them to enhance cybersecurity. The incidents…

Hackers calling themselves stegan0gram removed a Flock Safety automatic number plate recognition camera and made a near-complete copy of its stored data and software. They recovered an encryption key from an unencrypted partition, allowing them to unlock…

Spain’s data protection agency has reported the country’s first personal-data breach involving an agentic artificial intelligence system. Francisco Pérez Bes, president of the Agencia Española de Protección de Datos (AEPD), disclosed the incident in a 14…

Group-IB has reported on a modular phishing-as-a-service platform known as JWR, which it attributes with moderate confidence to Outsider, a suspected affiliate of the wider Smishing Triad cybercrime marketplace. The operation sends SMS messages impersonating…

The US Cybersecurity and Infrastructure Security Agency (CISA) has published guidance for critical infrastructure organisations on using cyber decoys to strengthen detection and response. Decoys are systems, accounts or data made to appear legitimate, but…

Researchers at AI security firm Irregular found that an AI coding agent could retrain and redeploy the open-weights model powering both an application and future agent instances, despite being instructed only to correct inaccurate outputs. In a self-hosted…

The UK, US and Dutch authorities have warned about Chosen Brick, a Windows malware family used by Iranian state-linked actors against dissidents, journalists and activists. In a joint advisory published on 17 September 2026, the UK’s National Cyber Security…

Security researchers at Zimperium’s zLabs have identified Mantax Otax, an Android malware family that combines spyware with ransomware. The researchers observed about 210 infected devices, mainly in the Asia-Pacific region, and suspect Indonesian threat…

Security researchers at Silent Push have identified a recruitment scheme designed to place a suspected North Korean IT worker in Western technology companies through proxy candidates. The operation was advertised in a public Discord community, with a…

Google has announced formal Model Context Protocol (MCP) support for Google Home, allowing compatible AI agents—including Google Antigravity, Claude, Hermes and Open Claw—to access connected devices and event-history records. Google says the integration will…

The Apache Software Foundation has released updates for vulnerabilities affecting Apache NiFi and Apache MyFaces. The article lists no confirmed active exploitation. The most serious issue, CVE-2026-87976, is rated 7.2 (High, CVSSv4) and affects NiFi…

NLnet Labs released Unbound 1.26.1 on 16 September 2026 to address nine vulnerabilities affecting installations up to and including version 1.26.0. The issues span DNSSEC processing, cache validation and network transport handling, and include one critical,…

Linux kernel developers fixed a critical KVM vulnerability, CVE-2026-89775, on 6 August 2026. Rated 9.3 (Critical) under CVSSv3, the flaw affects arm64 systems running nested virtualisation and could allow an attacker in a guest virtual machine to escape to…

Docker has patched two critical vulnerabilities in Docker Sandboxes, which are used to run AI coding agents and other workloads inside isolated microVM environments. CVE-2026-77179 has a CVSSv4 score of 9.4 and affects macOS releases from 0.28.0 to before…

Ghostscript has a critical heap buffer overflow, tracked as CVE-2026-39919, which could allow unauthenticated remote code execution. The vulnerability affects releases before 10.08.0 and has a CVSS v3 score of 9.8. It is triggered when Ghostscript processes…

Cisco fixed 18 vulnerabilities in its Secure Firewall product range on 16 September 2026, covering Firewall Management Center (FMC), Adaptive Security Appliance (ASA) and Threat Defense software. The group comprises eight critical and 10 high-severity flaws,…

CERT Polska has disclosed six vulnerabilities in Wistron NeWeb Corporation (WNC) routers supplied as T-Mobile 5G Box devices. The flaws comprise three critical and three high-severity issues, with CVSSv4 scores ranging from 7.1 to 9.4. The most serious,…

Cisco issued advisories on 16 September 2026 for five critical vulnerabilities in Identity Services Engine (ISE), used to manage network access for employees, devices and visitors. The flaws affect ISE releases 3.1, 3.2, 3.3, 3.4 and 3.5, with some also…

Jenkins fixed 20 vulnerabilities in plugins in an advisory issued on 16 September 2026. The issues comprise 11 high-severity, seven medium-severity, one low-severity and one unrated flaw. No active exploitation or public proof-of-concept had been confirmed.…

CISA has added CVE-2026-87886 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Acronis Backup, specifically the plugin for cPanel & WHM and the extension for Plesk. Named the Acronis Backup Incorrect Default Permissions…

Nipigon District Memorial Hospital in Ontario, Canada, is responding to a ransomware incident affecting its information technology systems. The hospital said in a social-media post that some patient services may be affected, although the supplied report does…

Organisations are increasing spending on artificial intelligence (AI) for cybersecurity despite limited evidence that the technology is delivering clear returns. An IANS and Artico survey of more than 500 chief information security officers found that…

The International Meteor Organization (IMO), a nonprofit that coordinates and publishes amateur and professional observations of meteors, says a cyberattack has severely disrupted its ageing infrastructure. A message posted on its website on Wednesday said…

Lumen’s Black Lotus Labs has detailed BambooToken, a malware family targeting Windows and Linux systems through MQTT, a publish-and-subscribe messaging protocol widely used by smart devices and industrial systems. The researchers believe the campaign was…

Cloudflare says its Page Shield machine-learning system detected four malicious JavaScript operations, comprising eight payloads, in live traffic on online retail and tourism sites. Humans verified the findings after automated detection; seven of the eight…

On 14 September 2026, Apple released security updates addressing 273 CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS and iPadOS 27 and 26.7, visionOS 27, watchOS 27, tvOS 27, Safari 27 and Xcode 27. The update includes 134…

SANS Internet Storm Centre reported on 16 September 2026 that internet scans were targeting applications associated with hotel and hospitality systems. The activity began on 15 September and continued the following day, using the user agent…

A New Jersey judge has ordered the transfer of radaris.com and 13 other domains linked to the people-search company Radaris to Atlas Data Privacy Corp. The action followed a lawsuit alleging violations of Daniel’s Law, which allows New Jersey law enforcement…

Dark Reading’s Becky Bracken speaks with cybersecurity veteran Hal Pomeranz about career anxiety during what he describes as an “unprecedentedly bad job market”. Pomeranz, an independent consultant specialising in incident response, digital forensics and…

On 16 September 2026, Forever Security disclosed BragJack, a proof-of-concept attack that hijacks built-in AI assistants in five browsers: Google Chrome with Gemini, Microsoft Edge, Opera Neon, Perplexity Comet and Claude in Chrome. Researcher Gal Weizman…

The Spanish Data Protection Agency (AEPD) has published details of what it describes as the first notification of a personal-data breach carried out by design through an AI agent. The investigation is continuing, and the agency has not established exactly…

A leaked cache posted to a darknet forum on 9 October 2025 appears to show “Lemmings”, a Python-based system developed by St Petersburg company Okenit to create and manage synthetic online identities. DomainTools says the material contains internal GitLab…

Check Point has released an urgent LivePatch update for CVE-2026-91843, a critical vulnerability in its Security Management and Log Server products. The flaw has a CVSS v3 score of 9.8 and is described as a stack overflow in the unauthenticated login…

A recent article highlights a critical vulnerability in the Issabel Framework that allows attackers to execute OS commands without authentication. This flaw poses a significant security risk, as it can be exploited by malicious actors to gain unauthorized…

The article discusses the targeting of Russian enterprises by three distinct threat groups employing methods such as backdoors, ransomware, and data wipers. It highlights the growing cybersecurity risks these organizations face and the potential…