Cisco's Quantum Network Controller Automates Entanglement Delivery
A new research prototype treats quantum entanglement as a schedulable network service, moving beyond manual point-to-point links.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
Engineer gets 32 months for locking 3,000 employer devices
A former infrastructure engineer was sentenced to prison for a ransomware-style attack that locked thousands of devices on his employer's network.
NPM Malware Campaign MALFEX Hits 40,000 Downloads
A long-running supply chain attack on the NPM registry has amassed tens of thousands of downloads through eight malicious packages.
Spreadsheet Flaws in LibreOffice and OpenOffice Enable Silent Code Execution
A proof-of-concept attack chains normal spreadsheet features to run arbitrary Java code without user consent, with LibreOffice patched and OpenOffice still vulnerable.
Cybersecurity M&A Roundup: 39 Deals in September 2026
SecurityWeek's monthly roundup counts 39 cybersecurity mergers and acquisitions announced in September 2026, with notable activity from Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind.
Report: iOS Automatic Reboot Bypass Exploited by Cyber-Weapons Maker
A reported exploit from a cyber-weapons arms manufacturer may defeat Apple's automatic reboot protection for iPhones.
Webroot Mobile Security adds text scam filtering and breach monitoring
The app bundles device hardening, Safari protection, SMS scam filtering, and breach alerts for subscribers.
Cybersecurity Job Roundup: IAM, DFIR, and AI Security Roles Open
A new Help Net Security roundup shows the range of open cybersecurity positions, from entry-level IAM work to director-level strategy roles.
The Challenge of Patching a Flawed Security Fix
Google Project Zero examines the tricky process of releasing emergency patches when the original fix is itself flawed.
Transcend Rails enforces runtime policies and budgets for AI agents
A new agent-management layer answers whether an agent can take a specific action in real time, closing a gap left by identity and access tools.
SailPoint adds AI agent discovery and automated identity defense
New capabilities aim to close the gap between AI agent adoption and the identity security tools needed to govern them.
AppViewX expands agent identity security to curb shadow AI
New discovery, runtime control, and quantum-resilient identity features aim to help enterprises govern AI agents that operate outside sanctioned channels.
Osaka Metropolitan University cancels classes after suspected ransomware attack
A suspected ransomware attack forced one of Japan's largest universities to shut down its network and cancel classes, with data of over 130,000 people potentially exposed.
Healthcare IoT Devices Unprepared for Post-Quantum Era
A large-scale study of 2.5 million devices across 50 healthcare organizations finds critical systems are not ready for post-quantum cryptography.
Ninja Forms, WPC Product Bundle Flaws Exploited in WordPress Attacks
Stored XSS vulnerabilities in two WordPress plugins are being used to install backdoors and create rogue admin accounts, according to BleepingComputer.
ASOS shares drop after unauthorized push notification
A mysterious unauthorized push notification to ASOS customers spooked investors and sent shares tumbling.
Pwn2Own Ireland: 32 Zero-Days Exploited on Day One
Security researchers earned $388,500 by exploiting 32 zero-days, including two successful hacks of the Samsung Galaxy S26, on the first day of Pwn2Own Ireland.
ClickFix campaign compromises 100+ Ukrainian sites to deliver Lunex stealer
Ukraine's CERT-UA warns that a ClickFix campaign injected malicious code into over 100 websites, while separate research details the Lunex stealer's browser and file-system access.