2026-10-01 16:55 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-01 17:15 UTC
Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organizations and threatening to publish it on its leak site unless they paid. The 16-year-old was one of 3 people arrested on September 30, when police also took control of that site. Investigators identified him as KillSec's suspected
P15
2026-10-01 16:45 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-01 17:15 UTC
This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system does a little more than people expect. A model check can run code. A cache can mix up requests. A public secret can stay useful for years. That is the lesson running through the list. Attackers do not always need a brilliant new trick. They can
P40
2026-10-01 16:00 UTC
Vendor Research
Google Security Blog · Il-Sung Lee · indexed 2026-10-01 16:20 UTC
A woman with Advanced Protection on Android enabled on her phone
P0
2026-10-01 15:55 UTC
Security Journalism
The Record · indexed 2026-10-01 16:15 UTC
European police said raids against the KillSec ransomware-as-a-service operation included the arrest of a high-profile teen suspect.
P15
2026-10-01 14:37 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-01 14:50 UTC
Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the "SC_" markers present in the injected content. Sucuri has described the malware as a "self-healing mesh" that's
P0
2026-10-01 14:30 UTC
Security Journalism
Security Week · Kevin Townsend · indexed 2026-10-01 14:40 UTC
Rob Juncker is chief product and technology officer at Mimecast. Is he a hacker? “Unequivocally yes,” he says. The post Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass appeared first on SecurityWeek.
P0
2026-10-01 14:30 UTC
Security Journalism
Security Week · Kevin Townsend · indexed 2026-10-01 14:40 UTC
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures. The post Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says appeared first on SecurityWeek.
P0
2026-10-01 14:25 UTC
Security Journalism
BleepingComputer · Lawrence Abrams · indexed 2026-10-01 14:30 UTC
An international law enforcement operation dubbed "Operation KillSwitch" seized the KillSec ransomware gang's data leak site and servers, led to three arrests, and identified a 16-year-old as the group's alleged administrator. [...]
P15
2026-10-01 14:17 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-10-01 14:20 UTC
Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims. The post Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader appeared first on SecurityWeek.
P15
2026-10-01 14:01 UTC
Security Journalism
BleepingComputer · Sponsored by Specops Software · indexed 2026-10-01 14:15 UTC
Zero Trust can verify users once they are established, but onboarding creates a gap where organizations must decide who to trust before strong authentication exists. Specops explains why identity verification should begin before credentials, MFA methods, and access are issued. [...]
P0
2026-10-01 14:00 UTC
Vendor Research
Microsoft Security Blog · Matthew Thomas · indexed 2026-10-01 14:40 UTC
According to this year’s Microsoft Digital Defense Report, government agencies and services were the sector most impacted by cyber threats in 2026, accounting for 27% of observed activity, up from 17% in 2025. The post Preparing governments for an era of interconnected cyber risk appeared first on Microsoft Security Blog.
P0
2026-10-01 14:00 UTC
Vendor Research
Microsoft Security Blog · Terrell Cox · indexed 2026-10-01 14:40 UTC
Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to grow more interconnected. The post Insights from the 2026 Microsoft Digital Defense Report appeared first on Microsoft Security Blog.
P0
2026-10-01 13:51 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-01 14:00 UTC
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security solution. [...]
P5
2026-10-01 13:33 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-02 07:20 UTC
Google unveils Gemini 4 Argon, a frontier AI model built for coding, enterprise work, and autonomous cybersecurity defense, rolling out to trusted testers. Google announced Gemini 4 Argon, and it’s not going straight to the public. It’s rolling out first to a set of trusted cyber defenders through what Google calls the Fairwind Program, which […]
P0
2026-10-01 13:33 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-01 14:40 UTC
Google unveils Gemini 4 Argon, a frontier AI model built for coding, enterprise work, and autonomous cybersecurity defense, rolling out to trusted testers. Google announced Gemini 4 Argon, and it’s not going straight to the public. It’s rolling out first to a set of trusted cyber defenders through what Google calls the Fairwind Program, which […]
P0
2026-10-01 13:15 UTC
Security Journalism
Security Week · Joshua Goldfarb · indexed 2026-10-01 13:40 UTC
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. The post AI Has Changed Attack Speed, Not Security Fundamentals appeared first on SecurityWeek.
P0
2026-10-01 13:04 UTC
Vendor Research
Cloudflare Security · Carly Ramsey · indexed 2026-10-01 13:20 UTC
AI sovereignty is not a zero-sum game, but many governments now believe it is. Cloudflare's answer: more local open-source models, model-agnostic security tools, and a commitment to giving nations genuine choice.
P0
2026-10-01 13:00 UTC
Security Journalism
Huntress · indexed 2026-10-01 13:50 UTC
The Huntress Tragic Quadrant ranks the cyber threats hitting businesses most, from RMM abuse to AiTM, ClickFix, using real SOC data.
P0
2026-10-01 13:00 UTC
Vendor Research
Rapid7 · Rapid7 · indexed 2026-10-01 13:20 UTC
As AI takes on more of the enrichment, correlation, and initial assessment inside the SOC, roles, skills, and KPIs still require deliberate redesign. Security leaders need to decide where automation is dependable, where human judgment should remain decisive, and how teams should be measured when alert handling is no longer the center of the operating modelThe Gartner® report, The Roles Required for the AI-Enabled Security Operations Center (SOC), examines the roles and capabilities Gartner expe…
P0
2026-10-01 13:00 UTC
Security Journalism
Dark Reading · Nate Nelson · indexed 2026-10-01 13:00 UTC
A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places.
P15
2026-10-01 12:55 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-10-01 13:00 UTC
Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction. The post Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure appeared first on SecurityWeek.
P25
2026-10-01 12:30 UTC
Security Journalism
The Record · indexed 2026-10-01 12:45 UTC
One of Poland’s major online invoicing platforms suffered a data breach that may have exposed information belonging to its users, their customers and business partners.
P0
2026-10-01 12:08 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-01 12:40 UTC
Apple patched a CoreGraphics zero-day that may have been exploited in targeted attacks. A public PoC for the flaw is now available. Apple patched a zero-day vulnerability, tracked as CVE-2026-86950, in CoreGraphics that attackers may have exploited to target specific individuals. The flaw is an out-of-bounds write that can lead to arbitrary code execution when […]
P30
2026-10-01 12:05 UTC
Other
Group-IB · indexed 2026-10-01 14:20 UTC
Milk Dragon, also known as NaiLong is an Adversary-in-the-Middle (AiTM) phishing kit active since October 2025. Unlike conventional phishing tactics that rely on fear and urgency, Milk Dragon lures victims with big discounts on consumer goods distributed via Facebook and TikTok marketplace advertisements.
P0
2026-10-01 12:05 UTC
Other
Group-IB · indexed 2026-10-01 12:40 UTC
Milk Dragon, also known as NaiLong is an Adversary-in-the-Middle (AiTM) phishing kit active since October 2025. Unlike conventional phishing tactics that rely on fear and urgency, Milk Dragon lures victims with big discounts on consumer goods distributed via Facebook and TikTok marketplace advertisements.
P0
2026-10-01 12:00 UTC
Government
NIST Cybersecurity Insights · CheeYee Tang , Robert Stea, John Wiltberger · indexed 2026-10-01 13:15 UTC
Recent cyberattacks on the U.S. water and wastewater systems (WWS) sector are highlighting the escalating threat to our nation’s critical infrastructure and the practical challenges of securing it. These incidents underscore an important challenge: the connectivity that utilities depend upon must be designed and operated with security as a core priority rather than a secondary consideration. They also provide a critical insight — that effective cybersecurity protections require a broad-based un…
P0
2026-10-01 11:45 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-01 12:25 UTC
Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out the regression testing. Somebody else raises the change-freeze calendar. The finding gets an exception, a compensating control, and a date
P0
2026-10-01 11:40 UTC
Security Journalism
Security Week · Mike Lennon · indexed 2026-10-01 12:00 UTC
The Series B brings the AI-powered offensive security startup’s total funding to roughly $445 million only seven months after its public launch. The post Kevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation appeared first on SecurityWeek.
P0
2026-10-01 11:14 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-01 11:30 UTC
Microsoft announced that Windows settings backup and restore is now enabled by default on all Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems upgraded to Windows 11 26H2. [...]
P0
2026-10-01 10:51 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-10-01 11:00 UTC
The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme. The post Treasury Blacklists Most-Wanted ATM Malware Developer and His Network appeared first on SecurityWeek.
P0
