Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days.…
Year: 2026
GitHub Copilot CLI Vulnerability Lets Attackers Steal Developer Secrets Using Encrypted Prompt Injection
A new GitHub Copilot CLI finding that could allow an attacker-controlled web page to guide the coding agent into reading local developer files and sending…
A familiar face is no longer proof: rethinking social engineering defence for the deepfake era
Deepfakes have spent much of their short history being treated as a curiosity. According to Anne Cutler, cybersecurity expert at Keeper Security, that complacency is…
AppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security
New York, New York, October 6th, 2026, CyberNewswire Purpose-built for AI agents, new capabilities uncover shadow AI, stop rogue enterprise agents at runtime, and issue…
ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach
British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send threatening notifications directly to customers. The notification,…
Dell System Update flaw allows attackers to gain root privileges (CVE-2026-86360)
Dell is urging customers to patch a vulnerability (CVE-2026-86360) in Dell System Update (DSU) that could allow an unauthenticated remote attacker to execute arbitrary code…
Domino’s customers targeted in credential stuffing attacks
Domino’s Pizza customers tell us they have received emails saying they account has been accessed by a third party. Domino’s says its internal systems weren’t…
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI…
Asos app users receive threatening messages after hack
Online ‘fast fashion’ retail powerhouse Asos is probing a potentially serious data breach after an apparent compromise of its Snowflake data platform resulted in threatening…
Health’s data modernisation on GCP reaches $32.8m
Key points The Department of Health & Aged Care has signed $13 million in new contracts, taking its data modernisation spend to $32.8 million. Four…
Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks
Apple has announced tightened Full Disk Access controls in macOS in light of the risks posed by continuously evolving AI agents. Apple introduced Full Disk…
ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure Pierluigi Paganini October 06, 2026 Fortinet details ClingSTUN, a Linux backdoor exploiting unpatched IoT devices and abusing public…