2022 Elastic Global Threat Report Announcement
Reports Discover our latest findings & strategic recommendations to better stay informed of potential directions threat actors may focus on. Today Elastic Security Labs celebrates…
Latest Cybersecurity News — Page 9
View all →
Rogue external MFA providers can steal passwords during logins
Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users’ passwords during legitimate login attempts.…
TASK#STOMP PowerShell Backdoor Steals Business Documents and Executes Remote Commands
A Windows-focused backdoor dubbed TASK#STOMP that uses VBScript, PowerShell, Scheduled Tasks, and runtime C# compilation to establish resilient persistence and continuously steal business documents. The…
ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data
ShinyHunters has claimed responsibility for compromising systems belonging to the U.S. Federal Bureau of Investigation (FBI), with the group defacing the official FBI job application…
Brief hijack makes Elsevier domains redirect to LAPSUS$ “Chapter II” page
Three domains / web portals belonging to Dutch academic publishing company Elsevier have been redirecting users to a page branded “LAPSUS$ GROUP, Chapter II,” carrying…
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
Swati KhandelwalSep 22, 2026Network Security / Vulnerability Attackers exploited a previously unknown flaw in Check Point’s Security Management Server in a handful of targeted attacks…
Zero-trust was built for people. Nobody told it about agents
For years, zero-trust has run on a simple premise: never trust, always verify. It’s a model built for a world where access is usually requested…
Google Location Data: DPC Fines Google €403 Million
The Data Protection Commission (DPC) has fined Google €403 million following an inquiry into its processing of Google location data under three features: Web &…
Meta testing a ‘human concierge’ for its new personal AI agent, Muse
Meta has been testing a “human concierge” for its new personal AI assistant, Muse, which entails having human contractors quietly handle some of the phone calls…
BigCommerce Data Stolen via Ribon Apps Hack
Enterprise eCommerce platform BigCommerce fell victim to a supply chain attack that led to customer data theft. BigCommerce is a SaaS provider that enables merchants…
Check Point Fixes a New Actively Exploited Critical Security Flaw
Check Point Fixes a New Actively Exploited Critical Security Flaw Pierluigi Paganini September 22, 2026 Check Point fixes an actively exploited flaw that lets unauthenticated…
Retailers tamp down shadow AI but struggle to oversee agentic sprawl
The use of AI agents is soaring in the retail sector, but visibility remains a major challenge, with regulated data at risk. Source link