2026-09-18 15:24 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-18 15:55 UTC
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tools called RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH. The activity has been codenamed Operation
P0
2026-09-18 15:19 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-09-18 15:30 UTC
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]
P0
2026-09-18 14:29 UTC
Security Journalism
The Record · indexed 2026-09-18 14:40 UTC
A report published Wednesday said that as of July, Vietnam, Laos, Pakistan and Argentina took meaningful steps to respond to allegations involving North Korea listed in an October study.
P0
2026-09-18 14:25 UTC
Security Journalism
Security Week · SecurityWeek News · indexed 2026-09-18 14:30 UTC
Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug exploited. The post In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw appeared first on SecurityWeek.
P15
2026-09-18 14:00 UTC
Security Journalism
BleepingComputer · Sponsored by tenfold Software · indexed 2026-09-18 14:15 UTC
Microsoft 365 makes sharing files easy, but access can remain long after its original purpose has ended, leaving organizations with little visibility into who can still reach sensitive data. tenfold Software explains how centralized access governance and owner-driven reviews can help identify and remove unnecessary access. [...]
P0
2026-09-18 13:58 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-09-18 14:15 UTC
Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with security threats to meet their company's security requirements. [...]
P0
2026-09-18 13:24 UTC
Security Journalism
The Record · indexed 2026-09-18 13:40 UTC
Over the past year, Russian cybersecurity firm Kaspersky said it investigated several incidents involving the group at Russian businesses.
P0
2026-09-18 13:10 UTC
Security Journalism
BleepingComputer · BleepingComputer · indexed 2026-09-18 13:45 UTC
Fast-growing companies face countless recommendations for securing Google Workspace, but not every control provides the same value. This webinar examines real-world breaches to explore which security controls matter most, which may be overrated, and where lean security teams should focus their resources. [...]
P0
2026-09-18 12:47 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-18 13:55 UTC
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0. "Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,"
P15
2026-09-18 12:45 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-09-18 12:50 UTC
Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts. The post AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code appeared first on SecurityWeek.
P0
2026-09-18 12:16 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-09-18 12:25 UTC
Microsoft has resolved a known issue that causes incorrect alerts warning that Defender Antivirus was turned off after installing recent updates. [...]
P0
2026-09-18 11:38 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-09-18 11:50 UTC
Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access. The post 23 Million User Records Compromised in Gyazo Data Breach appeared first on SecurityWeek.
P0
2026-09-18 11:01 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-18 13:55 UTC
In July 2025, someone registered a domain that used to belong to a content delivery network. The CDN had been wound down years earlier, and the domain it served assets from was allowed to expire. What it had not lost were its callers. Thousands of websites, code repositories, and documentation pages still carry hard-coded references to hostnames beneath it. The new owner holds
P0
2026-09-18 11:01 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-18 13:55 UTC
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agent installs for a malicious one, even when the agent locked that plugin to a specific reviewed version, security firm Air Security said on Thursday. The firm said Anthropic has patched the flaw in Claude Code 2.1.179 and OpenAI in Codex 0.146.0, that GitHub Copilot has no
P0
2026-09-18 10:57 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-09-18 11:10 UTC
Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority. The post Microsoft Patches 18 Vulnerabilities in AI, Cloud Products appeared first on SecurityWeek.
P10
2026-09-18 10:40 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-18 11:00 UTC
Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new malware family, per OpenSourceMalware, exhibits functional overlaps with two malware strains associated with the Democratic People's Republic of Korea's (DPRK) Contagious Interview campaign: BeaverTail and
P0
2026-09-18 10:12 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-09-18 10:30 UTC
Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world. The post NightmareStresser DDoS Service Disrupted in International Operation appeared first on SecurityWeek.
P0
2026-09-18 10:04 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-09-18 10:50 UTC
RatHat combines AI-driven screen control, Android debugging abuse and advanced credential theft to give attackers deep control of infected phones. RatHat is the new Android trojan you should know about. Zimperium researchers just published a breakdown of a strain they’ve traced to China-based operators, and what makes it different isn’t the credential theft, which is […]
P0
2026-09-18 10:00 UTC
Vendor Research
Palo Alto Networks Unit 42 · Niv Rabin · indexed 2026-09-18 10:10 UTC
Analysis of how default configurations in AWS AgentCore Harness allow prompt injection to exfiltrate credentials, and key steps to secure your agents. The post A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity appeared first on Unit 42.
P0
2026-09-18 09:46 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-09-18 09:50 UTC
Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts. The post Brevo Supply Chain Attack Injects Malware Into 100,000 Websites appeared first on SecurityWeek.
P0
2026-09-18 09:34 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-09-18 09:45 UTC
Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems. [...]
P15
2026-09-18 09:18 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-18 09:30 UTC
A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven via the npm package registry. "The developer likely wrote the malware using a large language model (LLM), an assessment made with high confidence based on verbose comments, placeholder code, and statistical token-analysis patterns,"
P0
2026-09-18 09:00 UTC
Other
ESET · indexed 2026-09-19 05:10 UTC
Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images
P0
2026-09-18 08:42 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-09-18 08:50 UTC
CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions. The post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.
P40
2026-09-18 07:52 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-09-18 08:10 UTC
Check Point fixed CVE-2026-91843, a critical flaw that could let attackers run code as root on Security Management and Log Servers with no login needed. Check Point addressed CVE-2026-91843 (CVSS score of 9.8), a critical vulnerability in its Security Management and Log Servers. The flaw could let an attacker with no account run code as […]
P15
2026-09-18 07:35 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-09-18 07:45 UTC
Microsoft has fixed a known issue that causes copy-and-paste failures for some Excel users after installing the September 2026 KB5002914 security update. [...]
P5
2026-09-18 07:25 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-09-18 07:30 UTC
The company will use the funding to accelerate platform development and expand its presence in key enterprise markets. The post MIND Secures $72 Million for AI-Powered DLP appeared first on SecurityWeek.
P0
2026-09-18 07:14 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-09-18 07:30 UTC
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges. The post Check Point, Kaspersky, Tanium Patch Product Vulnerabilities appeared first on SecurityWeek.
P25
2026-09-18 07:00 UTC
Security Journalism
Dark Reading · Nate Nelson · indexed 2026-09-18 07:10 UTC
AI-driven cyberattacks used to be exotic. Soon, it'll be odd if threat actors aren't using agents to do all of their bidding.
P0
2026-09-18 06:17 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-18 06:30 UTC
Cybersecurity researchers have flagged a new Android malware called RatHat that's assessed to be operated by China-based threat actors and features an artificial intelligence (AI)-powered system to navigate and control compromised devices. "Distributed primarily via targeted smishing (SMS/text phishing) and malvertising campaigns leading to deceptive third-party download portals, RatHat uses
P0
