Lawmakers call on Treasury to sanction hackers-for-hire
A bipartisan trio of lawmakers is asking the Treasury Department to sanction three India-based mercenary hack-for-hire groups that have reportedly stolen data from thousands of…
Month: September 2026
ChatGPT flaw lets attackers pull Gmail data across accounts via a hidden channel
A limited grant “narrows what any container-level leak can expose,” Handa said. She also recommended routing connected-app traffic through DLP or CASB inspection to catch…
CERT Polska alerts MikroTik RouterOS vulnerabilities actively being exploited in ‘MikroTrick’ attack chain
New data from CERT Polska confirmed active exploitation of six vulnerabilities in MikroTik RouterOS, including a two-flaw chain dubbed ‘MikroTrick’ that can give attackers full…
RunSafe Security targets Operational Software Assurance market to protect deployed software across critical systems
RunSafe Security, a cybersecurity company specializing in identifying risk and protecting code deployed across embedded and critical systems, announced its strategy to lead emerging Operational…
How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility
We’ve rewritten the module registry in workerd, the core open-source component of the Workers runtime, to be faster, more standards-compliant, and more closely aligned with…
Recorded Future Launches Digital Risk Protection, Unifying Brand and Identity Monitoring
Recorded Future just launched Digital Risk Protection, a unified solution covering five external threat surfaces, so security teams can detect, triage, and take down brand…
Shadow AI in Financial Services | Risk & Governance
Shadow AI is already taking root across financial services and many firms are discovering it only after the fact. Employees are turning to AI tools…
US says Chinese firms extracted billions of tokens from frontier AI models
U.S. cybersecurity and intelligence agencies say that six Chinese AI companies conducted industrial-scale distillation attacks on American frontier AI models since at least late 2024.…
Hackers Chain Chrome and Windows Zero-Days in New BlueMoon Exploit Kit Attacks
Multiple espionage-motivated threat actors have rapidly adopted a newly discovered exploit kit that chains Chrome browser and Microsoft Windows vulnerabilities to deploy backdoors and surveillance…
Why hostile state cyber activity is now a day-to-day business risk
Christopher Clark, Cyber Security Incident Response Team Director, Thrive Geopolitical escalation can become a cyber security problem for businesses far more quickly than many boards…
You Can Now Destroy Flock Cameras for Cash in GTA V
People are not happy about Flock Safety’s automated license plate readers and the cops that allegedly misuse them. If you’re one of those ALPR-haters, you…
Hackers Abuse Google CAPTCHA, WebDAV and BNB Smart Chain to Deploy Credential-Stealing Malware
A multi-stage malware operation that combines fake Google CAPTCHA prompts, WebDAV-hosted DLL execution, malicious Cloudflare Workers and BNB Smart Chain smart contracts to deploy the…