#security il 2026-10-09

1. 04:12 <Sentinel> SecurityWeek | Formula Predicts When AI Chatbots Are at Risk of Turning Bad Kevin Townsend · 1m ago · 7 min read Researchers from George Washington University have published a paper examining whether the time and cause of AI going rogue can be predicted. Read full story
2. 06:08 <Cassandra> BleepingComputer | Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland Sergiu Gatlan · 27m ago · 2 min read The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws. Read full story
3. 07:08 <Sentinel> SecurityWeek | Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own Eduard Kovacs · 29m ago · 4 min read Participants earned over $1.2 million at Pwn2Own Ireland 2026 for exploits targeting Google Pixel 10 phones, AI infrastructure, and smart home tools. Read full story
4. 07:09 <Sentinel> SecurityWeek | Citrix Urges Immediate Patching of Critical NetScaler Vulnerability Ionut Arghire · 15m ago · 3 min read Citrix urges customers to immediately patch CVE-2026-107406, a critical NetScaler vulnerability leading to remote code execution. Read full story
5. 07:09 <Cassandra> The Hacker News | FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions info@thehackernews.com (The Hacker News) · 30m ago · 6 min read U.S. authorities seized seven domains used by China-linked Flax Typhoon to scan networks and support intrusions into critical infrastructure. Read full story
6. 08:39 <Cassandra> BleepingComputer | Citrix warns admins to patch new NetScaler RCE flaw immediately Sergiu Gatlan · 12m ago · 2 min read Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. Read full story
7. 08:40 <Sentinel> SecurityWeek | Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security Eduard Kovacs · 20m ago · 4 min read Anthropic’s OSS Scanner sends unreviewed AI bug reports to opt-in open source projects, while a new program brings Claude to OT defenders. Read full story
8. 08:40 <Sentinel> SecurityWeek | US Disrupts Chinese State-Sponsored Hacking Tools Ionut Arghire · 3m ago · 4 min read The US has seized MicroScan and FishHub, tools used by Flax Typhoon and other Chinese APTs in critical infrastructure intrusions. Read full story
9. 10:27 <Cassandra> The Hacker News | Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments info@thehackernews.com (The Hacker News) · 2h ago · 3 min read Citrix patched CVE-2026-107406, a critical NetScaler memory overflow that could allow RCE or DoS in deployments configured for SAML. Read full story
10. 10:27 <Cassandra> The Hacker News | Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own info@thehackernews.com (The Hacker News) · 2h ago · 5 min read Three teams demonstrated remote exploits against fully patched Pixel 10 phones at Pwn2Own Ireland, earning $562,500 in total. Read full story
11. 10:27 <Cassandra> The Hacker News | GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys info@thehackernews.com (The Hacker News) · 1h ago · 6 min read A GoBalance signing flaw lets attackers recover Tor-format .onion private keys from public descriptors and hijack affected site addresses. Read full story
12. 10:27 <Cassandra> BleepingComputer | Microsoft: Outdated Windows devices will stop receiving security updates Sergiu Gatlan · 15m ago · 2 min read Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation. Read full story
13. 10:29 <Sentinel> SecurityWeek | Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries Kevin Townsend · 34m ago · 5 min read Bitdefender uncovered Midnight Mimosa, a firmware-level Android malware campaign shipping preinstalled on budget smartphones worldwide. Read full story
14. 10:29 <Sentinel> SecurityWeek | Unpatched AhsayCBS Vulnerabilities Exploited in the Wild Ionut Arghire · 6m ago · 4 min read The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. Read full story
15. 11:55 <Sentinel> SecurityWeek | Google Domains Impacted by Recent ccTLD Hijacks Ionut Arghire · 12m ago · 4 min read Google says threat actors hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several of its domains. Read full story
16. 11:55 <Sentinel> Rapid7 | Rapid7 Rapid7 · 49m ago · 5 min read Rapid7 Website Read full story
17. 11:56 <Cassandra> The Hacker News | The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition info@thehackernews.com (The Hacker News) · 26m ago · 5 min read SailPoint says 54% of organizations have no formal agent identity security program, versus 23% at the same maturity level for human identities. Read full story
18. 11:56 <Cassandra> BleepingComputer | Man admits to running network of 15,000 money mules for cybercriminals Sergiu Gatlan · 42m ago · 3 min read ​A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals worldwide. Read full story
19. 12:25 <Sentinel> SecurityWeek | In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years SecurityWeek News · 21m ago · 7 min read Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry. Read full story
20. 12:54 <Cassandra> The Hacker News | Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies info@thehackernews.com (The Hacker News) · 33m ago · 4 min read CISA added five Flax Typhoon-exploited flaws to KEV, requiring federal agencies to patch affected software or stop using it by October 11, 2026. Read full story
21. 12:55 <Cassandra> BleepingComputer | Max severity SonicWall SMA1000 flaw now exploited in attacks Sergiu Gatlan · 23m ago · 2 min read Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. Read full story
22. 14:24 <Cassandra> BleepingComputer | How to keep AI agents within their permissions Token Security · 22m ago · 12 min read AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations can enforce agent-specific policies without sacrificing autonomy. Read full story
23. 14:53 <Cassandra> The Hacker News | Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge info@thehackernews.com (The Hacker News) · 2h ago · 4 min read Attackers are exploiting two AhsayCBS flaws to deploy web shells and XMRig miners, and Huntress says version 10.3.4 remains vulnerable. Read full story
24. 14:53 <Cassandra> The Hacker News | Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects info@thehackernews.com (The Hacker News) · 2h ago · 4 min read Anthropic's opt-in OSS Scanner offers free, periodic AI vulnerability scans for open-source projects, with no human review required for reports Read full story
25. 14:53 <Cassandra> The Hacker News | Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access info@thehackernews.com (The Hacker News) · 1h ago · 4 min read A public exploit for AnyDesk Linux 8.0.2 demonstrates pre-auth root command execution over direct TCP connections on port 7070. Read full story
26. 14:53 <Cassandra> The Hacker News | TP-Link Sued by Four More U.S. States Over Router Security and China Ties info@thehackernews.com (The Hacker News) · 1h ago · 10 min read Four more U.S. states sued TP-Link over allegedly misleading claims about router security and China ties, as 21 attorneys general contacted the FCC. Read full story
27. 15:54 <Cassandra> BleepingComputer | Germany arrests alleged core Qilin ransomware member after extradition Bill Toulas · 15m ago · 2 min read Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. Read full story
28. 16:52 <Cassandra> The Hacker News | P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands info@thehackernews.com (The Hacker News) · 23m ago · 7 min read P7 DarkSword adds on-device keychain and crypto wallet data theft to the iOS exploit kit, alongside two-way C2 communication. Read full story
29. 17:46 <Cassandra> BleepingComputer | FBI arrests another suspected ShinyHunters hacker after agency breach Lawrence Abrams · 44m ago · 5 min read The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. Read full story
30. 17:46 <Cassandra> BleepingComputer | Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto Bill Toulas · 29m ago · 3 min read Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. Read full story
31. 19:45 <Cassandra> The Hacker News | FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack info@thehackernews.com (The Hacker News) · 2h ago · 5 min read The FBI arrested another suspected ShinyHunters co-conspirator whom news reports link to the breach of its jobs portal. Read full story
32. 20:44 <Cassandra> BleepingComputer | Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks Lawrence Abrams · 12m ago · 4 min read Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks. Read full story
33. 20:44 <Cassandra> The Hacker News | Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories info@thehackernews.com (The Hacker News) · 1h ago · 5 min read More than 500 GitHub accounts committed credential-stealing workflows to tens of thousands of repositories since October 7, Socket says. Read full story
34. 21:41 <Sentinel> SecurityWeek | OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks Associated Press · 33m ago · 4 min read OpenAI fired three safety researchers for a “breach of trust,” after the trio accused the company of putting its corporate interests before safety. Read full story

Tutti i giorni · Entra in #security