IT Security News: today roundup Europol assisted in dismantling a European horse trafficking network. Bruce Schneier discussed squid egg sacs in his weekly forum. CISA and NIST published final cloud identity token security guidance. Attackers hijacked an AI coding assistant…
IT Security News Hourly Summary 2026-09-19 20h : 7 posts
7 posts published in the last hour 17:31Plugin4Shell: The Zero-Click Flaw That Broke Every Prominent AI Coding Agent at Once 17:31Google’s Gemini is the latest AI model to hack other companies 17:31Microsoft Fixes Critical Azure AI Flaw Rated CVSS 10.0…
Plugin4Shell: The Zero-Click Flaw That Broke Every Prominent AI Coding Agent at Once
The security promise was simple. A plugin marketplace reviews a piece of code, locks it to a specific, verified version, and every AI coding agent that…
Google’s Gemini is the latest AI model to hack other companies
Google said Gemini had “acted appropriately” by ending each hack immediately.
Microsoft Fixes Critical Azure AI Flaw Rated CVSS 10.0
Microsoft has patched a maximum-severity vulnerability in Azure AI Foundry that could allow unauthorized attackers to escalate their privileges over a…
UAE Cyber Chief Says Country Faced 640,000 Cyberattacks in One Day
The UAE faced 640,000 cyberattacks in one day, its cyber chief says, highlighting risks from unpatched software, ransomware, and deepfakes.
Hackers Are Using Passkey Updates as a New Microsoft Phishing Hook
Microsoft warns attackers are using passkey and MFA update requests to phish employees, hijack sessions, and access Microsoft 365 data.
CISA Warns of Linux Kernel Vulnerabilities Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting three Linux kernel vulnerabilities,…
Hackers Crack Flock Camera, Expose 1.6M Images in 21 Days
Hackers physically compromised a Flock camera and found an encryption key, 27,000 clips, and 1.6 million images generated in 21 days.
IT Security News Hourly Summary 2026-09-19 18h : 4 posts
4 posts published in the last hour 15:02Google Gemini also Broke Out of Its Test Environment 15:02TigerByte Cyber Emerges From Stealth With $3 Million in Funding 15:02WeaselBiscuit Stealer Found in 13 Malicious npm Packages 15:00IT Security News Hourly Summary 2026-09-19…
Google Gemini also Broke Out of Its Test Environment
Google Gemini escaped a cyber test environment, reached three real companies, and exposed why AI security tests need strict isolation. Google has…
TigerByte Cyber Emerges From Stealth With $3 Million in Funding
The company has secured over $7 million in contracts with US government agencies, including the US Space Force, the US Navy, and DARPA.
WeaselBiscuit Stealer Found in 13 Malicious npm Packages
Researchers have discovered 13 npm packages carrying a previously undocumented JavaScript information stealer called WeaselBiscuit, introducing yet…
IT Security News Hourly Summary 2026-09-19 17h : 4 posts
4 posts published in the last hour 14:31RatHat Android Malware Uses AI to Control Infected Devices 14:31Identity Visibility in 2026: The Foundation of Identity Security 14:31Agentic security is the billion-dollar challenge for some clever startup to solve 14:01AI Helps Hackers…
RatHat Android Malware Uses AI to Control Infected Devices
A new Android backdoor called RatHat utilizes an AI-powered system to remotely navigate compromised devices, while also stealing sensitive information and…
Identity Visibility in 2026: The Foundation of Identity Security
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported…
Agentic security is the billion-dollar challenge for some clever startup to solve
High time to stop kicking the security can down the road, investor tells The Reg
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
AI helped researchers exploit a Discourse flaw in under 72 hours, hijacking OpenAI staff accounts and exposing the risks of shared SSO. Three researchers…
Google Gemini AI Hacked 3 Real Companies After Cybersecurity Test Exposed It to Internet
Google has confirmed that its Gemini artificial intelligence model accidentally accessed protected systems belonging to three real companies during a…
TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories
CrowdSec has disclosed that attackers copied about 170 private GitHub repositories after a former employee’s account was compromised through May’s…
IT Security News Hourly Summary 2026-09-19 14h : 3 posts
3 posts published in the last hour 11:31SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE 11:31Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening 11:31Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an…
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
AI labs are toying with an industry-wide pact to slow development. Meanwhile, widely available AI chatbots are already helping uncover a tidal wave of…
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several…
Google Gemini AI Hacked 3 Real Companies during a Cybersecurity Test
Google has confirmed that its Gemini artificial intelligence model accessed protected systems belonging to three companies during a cybersecurity…