#security on 2026-10-07

1. 01:45 <Sentinel> SecurityWeek | Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System Associated Press · 12m ago · 3 min read A cyberattack on Arizona’s court system stole personal data on more than a million people and is believed to be the result of a phishing attack. Read full story
2. 06:46 <Sentinel> SecurityWeek | Atlassian Patches Critical Vulnerability Affecting 8 Products Ionut Arghire · 9m ago · 4 min read Atlassian has patched CVE-2026-21589, a critical unauthenticated arbitrary file access vulnerability impacting eight products. Read full story
3. 07:16 <Sentinel> SecurityWeek | Android's October 2026 Updates Patch 25 Vulnerabilities Ionut Arghire · 20m ago · 4 min read Android’s October 2026 updates patch 25 vulnerabilities, including a critical-severity privilege escalation bug in the System component. Read full story
4. 07:45 <Cassandra> The Hacker News | 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer info@thehackernews.com (The Hacker News) · 48m ago · 5 min read CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors. Read full story
5. 08:15 <Sentinel> SecurityWeek | Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies Eduard Kovacs · 17m ago · 5 min read Wikimedia discovered unauthorized activity by rogue OpenAI agents attempting to abuse tools and services as external proxies. Read full story
6. 09:47 <Cassandra> The Hacker News | Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws info@thehackernews.com (The Hacker News) · 1h ago · 4 min read Anthropic expands reduced-safeguard AI access for vetted cyber teams after Project Glasswing verified at least 129,000 software flaws. Read full story
7. 10:16 <Sentinel> SecurityWeek | ASOS Confirms Cyberattack, Data Breach Ionut Arghire · 30m ago · 4 min read ASOS has confirmed unauthorized access to a third-party communication platform that stored names and contact details. Read full story
8. 10:16 <Sentinel> SecurityWeek | Anthropic Introduces 3-Tier Cyber Verification Program for AI Access Eduard Kovacs · 9m ago · 5 min read Anthropic is integrating the CVP and Project Glasswing into a single offering, with three levels of access to its most capable AI models. Read full story
9. 10:45 <Cassandra> BleepingComputer | Advantest confirms personal information stolen in ransomware attack Bill Toulas · 17m ago · 2 min read Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data. Read full story
10. 10:45 <Cassandra> BleepingComputer | Musician sent to prison for $10 million streaming fraud using AI bots Sergiu Gatlan · 9m ago · 2 min read A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme. Read full story
11. 11:12 <Sentinel> Rapid7 | The ASOS incident: When attackers use the channels customers trust Rapid7 · 27m ago · 4 min read ASOS customers recently opened their phones to find a hostile push notification delivered through the retailer’s own app. So what happens when an attacker can communicate through a channel customers already trust? Read full story
12. 11:16 <Sentinel> SecurityWeek | Chrome 155 Update Patches 247 Vulnerabilities Ionut Arghire · 24m ago · 3 min read A fresh Chrome 155 security update resolves 247 vulnerabilities, including four critical-severity use-after-free defects. Read full story
13. 11:46 <Cassandra> BleepingComputer | SonicWall warns of max severity SSRF flaw in SMA1000 gateways Sergiu Gatlan · 9m ago · 2 min read SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances. Read full story
14. 12:25 <Sentinel> Rapid7 | Rapid7 Rapid7 · 10m ago · 3 min read On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. Atlassian assigned the vulnerab... Read full story
15. 13:01 <Cassandra> The Hacker News | What Is Agentic Pentesting? What It Proves, and Where It Stops. info@thehackernews.com (The Hacker News) · 1h ago · 8 min read Picus says agentic pentesting proves live attack paths but leaves timing and coverage gaps that require complementary validation methods. Read full story
16. 13:01 <Cassandra> The Hacker News | Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details info@thehackernews.com (The Hacker News) · 1h ago · 4 min read Attackers are exploiting an Atlassian Data Center flaw that enables unauthenticated access to specific webroot files. Read full story
17. 13:01 <Cassandra> The Hacker News | FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials info@thehackernews.com (The Hacker News) · 1h ago · 4 min read FBI and USSS warn FortiBleed remains active, using stolen credentials and traffic sniffing to harvest Fortinet authentication data. Read full story
18. 13:01 <Cassandra> The Hacker News | The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow info@thehackernews.com (The Hacker News) · 1h ago · 9 min read Proofpoint says 79% of CISOs rank human risk as their biggest cyber vulnerability, while 78% view GenAI as a security risk in 2026. Read full story
19. 13:01 <Sentinel> SecurityWeek | Advantest Discloses Data Breach Months After Ransomware Attack Eduard Kovacs · 24m ago · 3 min read Japanese chip testing giant Advantest is informing individuals that hackers stole personal information in the February 2026 ransomware attack. Read full story
20. 13:03 <Cassandra> BleepingComputer | Hackers exploit critical Atlassian flaw after public PoC release Bill Toulas · 14m ago · 3 min read A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. Read full story
21. 13:31 <Sentinel> SecurityWeek | Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform Kevin Townsend · 25m ago · 5 min read Amsterdam-based Hadrian has raised an additional $40 million in a Series B round, to bring its total funding to $65 million Read full story
22. 14:07 <Sentinel> SecurityWeek | Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany Ionut Arghire · 20m ago · 3 min read A member of the Qilin ransomware group was reportedly arrested in Japan and extradited to Germany to face hacking charges. Read full story
23. 14:37 <Cassandra> Krebs on Security | ShinyHunters Extorted Boeing Spin-off Prior to Arrests BrianKrebs · 48m ago · 10 min read A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle "Rey," was detained as ShinyHunters was in the process of extorting ... Read full story
24. 14:37 <Sentinel> SecurityWeek | Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Eduard Kovacs · 22m ago · 4 min read Southern Company is notifying roughly 400,000 customers of Georgia Power and Alabama Power that their utility accounts were breached. Read full story
25. 14:38 <Cassandra> BleepingComputer | Ransomware has a new target. Is your backup ready? Kaseya · 37m ago · 5 min read Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach. Read full story
26. 15:09 <Cassandra> BleepingComputer | PoeLLM malware infects exposed AI servers in cryptomining attacks Bill Toulas · 4m ago · 3 min read A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads. Read full story
27. 16:34 <Cassandra> The Hacker News | PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet info@thehackernews.com (The Hacker News) · 1h ago · 4 min read Canto Incognito has infected over 3,400 servers, using exposed AI and LLM infrastructure for crypto mining and botnet growth. Read full story
28. 16:35 <Cassandra> The Hacker News | Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely info@thehackernews.com (The Hacker News) · 1h ago · 5 min read LMCache CVE-2026-105192 lets unauthenticated attackers run code when the multiprocess server is bound to a routable address; no fix exists. Read full story
29. 16:37 <Cassandra> BleepingComputer | Microsoft Outlook to block MSIX attachments starting November Sergiu Gatlan · 53m ago · 2 min read Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month. Read full story
30. 18:06 <Cassandra> The Hacker News | SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances info@thehackernews.com (The Hacker News) · 1h ago · 4 min read SonicWall fixed four SMA1000 flaws, including a 10.0-rated SSRF reachable before authentication; it says none are known to be exploited. Read full story
31. 18:06 <Cassandra> The Hacker News | Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer info@thehackernews.com (The Hacker News) · 23m ago · 4 min read Eight malicious npm packages downloaded 40,767 times deliver Overlord RAT, a Node.js stealer, and a downloader to Windows systems. Read full story
32. 19:38 <Cassandra> The Hacker News | Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains info@thehackernews.com (The Hacker News) · 50m ago · 8 min read Attackers hijacked .gh, .sl, and .as registries and obtained 12 unauthorized certificates for Google and YouTube domains. Read full story
33. 20:09 <Sentinel> Rapid7 | Four Compliance Frameworks, One Security Team. How Universities Can Stop Drowning in Regulatory Risk Rapid7 · 27m ago · 10 min read Most industries manage one major compliance framework. Universities might manage four simultaneously, each bringing with it unique requirements, enforcement mechanisms, and consequences for failure. Here's what that actually looks like in practice. Read full story
34. 21:04 <Cassandra> BleepingComputer | Hackers hijack Google domains after breaching ccTLD registries Bill Toulas · 14m ago · 3 min read Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party operators and modifying authoritative DNS records. Read full story
35. 21:32 <Cassandra> BleepingComputer | FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins Bill Toulas · 3m ago · 2 min read The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. Read full story
36. 23:31 <Cassandra> BleepingComputer | Ransomware recovery CEO charged over secret ransom payments Lawrence Abrams · 26m ago · 3 min read The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data. Read full story

All days · Join #security