October 8, 2026
DSA-6549-1 xz-utils – security update
High-severity Nvidia bug could crash GPU monitoring on exposed servers
Researchers found thousands of GPU servers exposing Nvidia’s DCGM Exporter to the internet, with hundreds potentially vulnerable to a high-severity [...]
October 8, 2026
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise
The credential-hijacking Shai-Hulud worm has struck again, this time burrowing its way into a popular AI agent platform SDK. Multiple security researchers [...]
October 8, 2026
Inside a brand deal scam targeting YouTube creators
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account
October 8, 2026
Fighting GenAI with GenAI: The New Email Security Landscape
The use of phishing emails as a means of stealing information or implanting damaging malware dates back to the mid-1990s. Although almost as old as the [...]
October 8, 2026
UK and Germany team up against Russian cyberattacks as Brexit rethink looms
Britain and Germany have announced a partnership to counter cyberattacks and sabotage, particularly from Russia, as Prime Minister Andy Burnham heads to [...]
October 8, 2026
AWS takes aim at runaway AI agent behavior with Strands Box
Amazon Web Services (AWS) has introduced an open-source sandbox for AI agents that allows developers to restrict their actions based on previous behavior, [...]
October 8, 2026
AI-powered data pipeline observability: Stop monitoring and start preventing
Devops tools are making it increasingly easy to monitor data pipeline failures. But in many cases, those alerts are already too late. Take marketing [...]
October 8, 2026
Cheapskates wouldn’t pay for security help, got hit by ransomware, and went bust months later
Welcome back to PWNED, the weekly column where we highlight some of the lowlights in corporate security. This week, we’ll talk about two scenarios, one [...]
October 8, 2026
Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead
The United States Department of Justice has charged a man with fraud after he allegedly told clients he could decrypt files locked up by ransomware but [...]
October 8, 2026
Smashing Security podcast #487: Clippy’s crypto comeback
October 7, 2026
DSA-6548-1 node-shell-quote – security update
October 7, 2026
DSA-6547-1 ruby-jwt – security update
October 7, 2026
DSA-6546-1 rails – security update
October 7, 2026
Attackers hijacked top-level domains, minted fake security certs for Google and other orgs
Imagine going to a Google website at its correct URL, only to be redirected to a crim’s illegitimate copy. Attackers hijacked top-level domains, [...]
October 7, 2026
AWS launches open-source AI agent sandbox to prevent YOLO mode disasters
AWS has offered multiple open-source strategies for holding AI agents accountable, and now it’s adding a full-on sandbox to this stack. Dubbed Strands Box, [...]
October 7, 2026
US states sue popular kitmaker TP-Link over China risks
The attorneys general of Florida, Iowa, Montana, and Nebraska have sued ubiquitous networking and smart home tech maker TP-Link, alleging its security [...]
October 7, 2026
How DNS, Firewalls and Endpoint Tools Block Websites
October 7, 2026
The quest for simplicity: Why SMBs want advanced protection without the complexity
The cybersecurity market is often making it tougher for SMBs to keep threats at bay
October 7, 2026
Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers
A suspected Italian attacker armed with a malware-controlling poem has infected more than 3,000 servers since April, breaking into enterprise AI [...]
October 7, 2026
FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks
The FBI and US Secret Service (USSS) say criminals using credentials linked to the FortiBleed campaign are locking organizations out of their Fortinet [...]
October 7, 2026
South Korean president calls for creation of tools that stop all cyber-attacks
South Korean president Lee Jae Myung has told the nation’s cabinet that it’s time to develop AI-powered defensive tools to combat AI-wielding attackers. [...]
October 7, 2026
Anthropic reconfigures its cool kids security program
Only a week after warning about the perils of competitor Z.ai’s GLM-5.3 model and its advanced cybersecurity capabilities, Anthropic has expanded its [...]
October 6, 2026
Karina Portugal Makes the Case for Know Your Agent
October 6, 2026
Trump Mobile customers’ data dumped – and some never even received their gold device
If you signed up for Trump Mobile, you may be part of an exclusive club of … ransomware victims. Criminals called BYOD claim to have broken into the [...]
October 6, 2026
One week to TechCrunch Disrupt: What’s next for AI and software development
First AI gave us code completion, predicting the lines of code, functions, and boilerplate we needed based on what we’d already typed. Then came code [...]
October 6, 2026
Microsoft extends the Outlook naughty step with two more file types
Microsoft is adding two extra file types to its Outlook block list to strengthen security. The file types are .msix and .msixbundle, used for Windows [...]
October 6, 2026
5 Astrix and Aembit Alternatives for AI Agent Identity Security
October 6, 2026
Aembit Extends Access Controls to Personal AI Agents
October 6, 2026
Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets
GitHub Copilot CLI may reveal developer secrets if it comes across instructions that tell it to do so, depending on the underlying model. The coding agent [...]
October 6, 2026
ServiceNow takes aim at enterprise AI’s workflow bottleneck with AI Workflow Factory
ServiceNow has launched two AI solutions that can help enterprises identify business processes ripe for automation, build the workflows to address them, [...]
October 6, 2026
Asos app delivers a data leak threat instead of fast fashion
Asos customers have reported receiving a rogue app notification claiming the online clothing retailer’s Snowflake instance has been compromised and [...]
October 6, 2026
Denmark’s ID register spills more people’s details than the country has residents
An unauthorized party abused a private Danish company’s legitimate access to the country’s Central Population Register (CPR), exposing names, [...]
October 6, 2026
Search Exposure Linux Security Threats Impacting Personal Data
Search-indexed personal data increases security risk in Linux environments. When email addresses, usernames, phone numbers, and role information are easy [...]
October 6, 2026
Understanding Internal vs External Pen Testing for Your Business
Penetration tests are like fire drills for your network. They expose weak spots, test defenses, and help prevent real damage when threats come knocking. [...]
October 6, 2026
Using Technology to Fight Distraction and Improve Focus
October 6, 2026
FBI Confirms Multiple Arrests in ShinyHunters Investigation
October 6, 2026
Money can’t buy enterprise trust
I thought the AI boom was producing a new level of bad behavior, what with MongoDB CEO CJ Desai peacing out, not to mention Google’s earlier controversial [...]
October 6, 2026
Don’t buy a consultant’s AI framework
Every major consulting firm offers its own prebuilt architectural framework, model, or reference architecture for generative AI and agentic AI. The pitch [...]
October 6, 2026
Linux Kernel Vulnerability Fixed in Binder Device Creation
Linux developers have merged a fix for a Linux kernel vulnerability that can leave Binder device creation writing to memory the kernel has already released.
October 6, 2026
Citrix NetScaler Vulnerability Is Being Exploited: Check SAML Systems
Citrix has confirmed targeted attacks involving a Citrix NetScaler vulnerability and urged affected customers to update.
October 6, 2026
OpenOffice Vulnerability Can Run Code From Malicious Documents
Apache is asking OpenOffice users to turn off its Java integration after warning that a malicious document could run code on their computer.
October 6, 2026
Apache Thrift 0.25.0 Adds Memory Limits for Network Messages
Apache released Thrift 0.25.0 on Sep 30, 2026 with memory checks for several C++, Java, and Python components.
October 6, 2026
Apache Directory LDAP API 2.1.9 Security Update for CVE-2026-103877
Apache’s release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities.
October 6, 2026
OpenSSL Vulnerability Can Leak Server Memory Through DTLS
OpenSSL issued fixes on Sep 29, 2026 for an OpenSSL vulnerability that can send unrelated program memory to another party during secure connection setup.
October 6, 2026
Fedora 45 Kernel 7.2.9 Important Fixes Advisory 2026-8dc7d1def3
October 6, 2026
Fedora 45 Unison Critical Remote Code Exec Vuln 2026-403bcf6fd8
October 6, 2026
Fedora 45 opam Critical Buffer Over-Read Fixes 2026-403bcf6fd8
October 6, 2026
Fedora 45 ocaml-zmq Critical Remote Exec Flaws 2026-403bcf6fd8
October 6, 2026
Fedora 45 ocaml-uuseg Security Bugs Advisory CVE-2026-28364
October 6, 2026