39 New Methods That Compromise Passkey Authentication
Passkeys were introduced with a strong security proposition. Replace passwords with public key cryptography, bind the credential to the legitimate service, keep the private key…
Month: September 2026
AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials
A human attacker armed with frontier artificial intelligence models breached an enterprise network and seized root credentials in under 10 hours, a timeline that would…
Protecting Against Zero-Click Attacks – IT Security Guru
By Aimee Steele, threat intelligence analyst at Talion Cyber Security Last month, the UK’s National Cyber Security Centre (NCSC) issued an advisory around a new…
New Panzer Ransomware Hits 16 Victims Across 11 Countries With Data Theft and Encryption
Panzer ransomware has emerged as a new Ransomware-as-a-Service (RaaS) operation, publishing 16 alleged victims across 11 countries while combining data theft with file encryption. Documented…
Most of the bugs Claude Mythos found have never been checked by a human
Anthropic pointed Claude Mythos Preview at 281 open-source projects and collected 23,019 candidate vulnerabilities. External security firms reviewed 1,900 of them. Maintainers received 1,596 reports…
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Ravie LakshmananSep 04, 2026Vulnerability / Network Security Plex is urging users to update their instances to the latest version following the release of an update…
Data dive: Mapping NHS hyperscaler dependence
Barts Health NHS Trust runs one of London’s largest hospital groups. Its public internet footprint is also the most tangled of any trust in England,…
Sangoma Switchvox Vulnerabilities Exploited in the Wild
Threat actors have been exploiting a critical-severity vulnerability in the enterprise VoIP telephony management solution Sangoma Switchvox, Horizon3 and CISA warn. Tracked as CVE-2026-9586 (CVSS…
Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities
Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities Pierluigi Paganini September 05, 2026 Broadcom patched two VMware Workstation/Fusion VM-escape bugs. No workarounds exist. Update…
Government lacks ability to verify AI labs’ claims, experts say
A new survey of national security practitioners identified a wide range of near- and medium-term AI risks for policymakers to consider. Source link
Zero trust has a big AI agent problem ahead
That means agents will get a mix of “rate limits, transaction boundaries, spend and data budgets, sandboxing, approval gates for high-consequence actions, and immutable activity…
The Prompt Airlines CTF: Test Your AI Security Skills
In this challenge, you’ll interact with a chatbot acting as the customer service for the fictional Prompt Airlines. Your goal is to find and exploit…