Autonomous AI Hacks Test Legal Accountability Limits
Legal experts say criminal investigations into autonomous AI-driven hacks face an extremely high burden, leaving accountability unclear.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
Russia's Mobile Internet Shutdowns Hinder Drone Attack Warnings
New reporting shows Russian restrictions on mobile internet and cellular service are interfering with public alerts about incoming Ukrainian drone and missile attacks.
SANS ISC Sept 21 Stormcast Released, Details Behind Link
The daily SANS ISC threat briefing is out, but the available excerpt does not reveal which security topics it covers.
RemControl Android malware spreads via fake TVTap app
A new Android banking malware-as-a-service is hitting Europe and Canada through malvertising that impersonates the TVTap IPTV app.
Microsoft: September Updates May Break File History Backup
Microsoft's warning signals a potential disruption to a built-in backup tool for some Windows users after the September 2026 updates.
Industrial Firms Call Cyber Risk a Top Growth Barrier
A new study finds that more than a third of industrial organizations view cybersecurity risk as a major obstacle to growth, prompting increased investment.
Elsevier Domains Hijacked to Redirect to LAPSUS$ Page
A brief hijack of three Elsevier web portals redirected visitors to a LAPSUS$-branded taunt, underscoring the ongoing risk of domain-level attacks against major publishers.
F5 Patches Actively Exploited BIG-IP APM OAuth Zero-Day
A critical heap overflow in F5 BIG-IP APM used as an OAuth authorization server is under active attack, with hotfixes now available.
Process Parameter Poisoning Lets Attackers Evade EDR Defenses
A newly detailed injection technique abuses process initialization structures to bypass endpoint detection without triggering monitored Windows APIs.
Placeholder domain in dev docs now pushes ClickFix malware
A commonly used placeholder domain in developer documentation has been hijacked to serve fake Cloudflare checks that trick Windows users into running malicious PowerShell commands.
Vibe-Coded Storefront and Flock Camera Teardown Show Security Gaps
A podcast episode pairs an AI-generated shop's bizarre inventory with a physical attack on a license-plate camera, highlighting overlooked security risks.
GitLab Email Token Lets Anyone Push Code as You if Leaked
A single leaked GitLab issue-email token can be used to commit code and run CI jobs with the victim's permissions.
Ryuk ransomware affiliate gets 24-month prison term
A federal sentence shows U.S. courts are now reaching individual ransomware operators, not just the groups they work for.
Windows Defender zero-day blocks antivirus updates
A newly disclosed Windows Defender exploit prevents Microsoft's antivirus from updating, potentially leaving systems unprotected.
Check Point Patches Actively Exploited Management Server Zero-Day
Emergency hotfixes address a critical flaw that allowed attackers to run arbitrary scripts on Security Management Servers.
Rogue External MFA Providers Can Steal Passwords in Login Attacks
Researchers show that attackers with privileged access can register a malicious external MFA provider that harvests passwords during otherwise legitimate logins.
Canada Probes IDScan After Breach of 153M Driver's Licenses
Privacy Commissioner opens investigation into IDScan.net's security practices and breach notifications after stolen ID scans of 153 million people appeared on the dark web.
AI Relay Servers Mask Chinese Access to US Frontier Models
More than 80,000 AI relay servers are helping users in China hide their identities while accessing cutting-edge US AI models, likely to clone them.