Latest Cybersecurity News and Alerts

Security Week

• TigerByte Cyber Emerges From Stealth With $3 Million in Funding
  September 19, 2026
• In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
  September 18, 2026
• AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code
  September 18, 2026
• 23 Million User Records Compromised in Gyazo Data Breach 
  September 18, 2026
• Microsoft Patches 18 Vulnerabilities in AI, Cloud Products
  September 18, 2026
• NightmareStresser DDoS Service Disrupted in International Operation
  September 18, 2026
• Brevo Supply Chain Attack Injects Malware Into 100,000 Websites
  September 18, 2026
• Critical Orkes Conductor Vulnerability Exploited in Attacks
  September 18, 2026
• MIND Secures $72 Million for AI-Powered DLP
  September 18, 2026
• Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
  September 18, 2026

The Hacker News

• Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
  September 19, 2026
• Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
  September 19, 2026
• Identity Visibility in 2026: The Foundation of Identity Security
  September 19, 2026
• SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
  September 19, 2026
• Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
  September 19, 2026
• Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
  September 19, 2026
• CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
  September 19, 2026
• CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
  September 19, 2026
• Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
  September 18, 2026
• New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
  September 18, 2026
• Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
  September 18, 2026
• Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
  September 18, 2026
• An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
  September 18, 2026
• Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
  September 18, 2026
• WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
  September 18, 2026
• Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
  September 18, 2026
• RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
  September 18, 2026
• Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
  September 17, 2026
• ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
  September 17, 2026

Dark Reading

• [Virtual Event] Cybersecurity Outlook 2027
  December 3, 2026
• Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
  September 18, 2026
• Cisco Zero-Day Highlights API Endpoint Authentication Issues
  September 18, 2026
• EY Survey Finds Autonomous AI Implementation Outpaces Oversight
  September 18, 2026
• MFA Won't Save You From OAuth Consent Abuse
  September 18, 2026
• AI Agent Breaches Spanish Organization, Modifies Personal Data
  September 18, 2026
• CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus
  September 17, 2026
• China's FamousSparrow APT Spies on US Politics in Latin America
  September 17, 2026
• AI Security Spending Jumps as Fear Outpaces Proof of Value
  September 16, 2026
• Fighting Your Dragons Through Tough Tech Times
  September 16, 2026
• BragJack Attack Can Turn a Browser's Agentic AI Against It
  September 16, 2026
• Cyber Op Targets South Korean Media & Automotive Sectors
  September 15, 2026
• Microsoft Issues Emergency Fixes After Massive Patch Tuesday
  September 15, 2026
• Black Hat USA 2026 | OpenAI's Deep Dive Into Hugging Face Incident
  September 15, 2026
• VectraRAT Can Hack Windows Enterprises for $250 per Month
  September 15, 2026

CSO

• CISA is ending its monthly vulnerability bulletin
  September 18, 2026
• A zero-click RCE flaw in AI coding agents could have exposed enterprise systems
  September 18, 2026
• GhostCode attackers abuse device codes to take over Microsoft 365 accounts
  September 18, 2026
• Strong fundamentals make next-gen security possible
  September 18, 2026
• Cisco patches max-severity ISE flaw, the second critical zero-day this week
  September 17, 2026
• OpenAI admits six new misalignment incidents under new reporting framework
  September 17, 2026
• Security spending is growing — except for the typical CISO
  September 17, 2026
• Self-modifying AI agents expose a blind spot in enterprise security
  September 17, 2026
• 16 governance tools for securing your AI fleet
  September 17, 2026
• LinkedIn fights for the right to tell customers when the feds want their data
  September 16, 2026
• Big Tech’s AI safety rift signals disruption and disparity for enterprises
  September 16, 2026
• Oracle’s September patches put Fusion Middleware back in the hot seat
  September 16, 2026
• AI agent authorization risks remain a gap in new NIST-CISA token security guidance
  September 16, 2026
• You don’t have to join the hack-back program to inherit its risk
  September 16, 2026
• AI made software development unrecognizable. Is cybersecurity next?
  September 16, 2026

Krebs On Security

• Data Broker Radaris Loses Domains in Privacy Fight
  September 16, 2026
• Microsoft Plugs Nearly 1,000 Security Holes
  September 8, 2026
• FBI Probes Service Selling 153M+ Drivers Licenses
  September 1, 2026
• Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
  August 27, 2026
• Who’s Tracking You? Use This New Service to Find Out
  August 14, 2026

CISA Alerts

We Live Security

• ‘Nudify’ apps: What to do if someone makes a fake nude of you
  September 18, 2026
• Beware the SparroWock: The backdoor that bites, the commands that catch
  September 17, 2026
• Cyberthreats are moving faster than SMBs: Readiness must accelerate
  September 16, 2026
• GuardBreaker: Derailing AI-assisted malware analysis with a code comment
  September 10, 2026
• Safe word: What is it and why do you need one?
  September 9, 2026

Securelist Feed

CIS Security Advisories

• Multiple Vulnerabilities in Oracle Products Could Allow for Arbitrary Code Execution
  September 17, 2026
• Multiple Vulnerabilities in Cisco Secure Email Products Could Allow for Remote Code Execution
  September 15, 2026
• Multiple Vulnerabilities in Mikrotik Routers Could Allow for Admin Hijacking
  September 14, 2026
• A Vulnerability in GitLab Could Allow for Disclosure of Sensitive Data
  September 14, 2026
• Multiple Vulnerabilities in Ivanti Products Could Allow for Arbitrary Code Execution
  September 10, 2026

Deep Website Links