IT Security News: today roundup Microsoft SharePoint flaw reclassified from spoofing to remote code execution. Palo Alto Networks Unit 42 introduced new AI cyber defenses. Ryuk ransomware member Karen Vardanyan received a two-year prison sentence. A Linux kernel bug allows…
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
That shipping rebate offer may come with a monthly charge
Customers say they signed up for shipping rebates, then found recurring charges they didn’t expect.
IT Security News Hourly Summary 2026-09-25 12h : 9 posts
9 posts published in the last hour 09:31‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration 09:31Bitget Hacked: $352M Theft Largest Crypto Heist 2026 09:31CrowdStrike Delivers the Next Evolution of the Agentic SOC 09:31RemControl Banking Trojan Gives Attackers Remote Control…
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
Bitget Hacked: $352M Theft Largest Crypto Heist 2026
HOC Shorts Crypto exchange Bitget hacked – Confirmed a massive security breach resulting in the theft of $351.6…
CrowdStrike Delivers the Next Evolution of the Agentic SOC
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Delivers the Next Evolution of the Agentic SOC
RemControl Banking Trojan Gives Attackers Remote Control of Android Devices
The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials
MacSync info-stealing malware hides malicious commands in an iCloud calendar
A new MacSync variant targets Mac users with an infostealer and persistent backdoor designed to steal credentials, crypto wallet data, and files,…
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog. The U.S.…
Researchers Identify AliExpress Phishing Domains Before Registration
EfficientIP says it flagged AliExpress phishing domains before they were registered
CrowdStrike Announces Agentic Identity Provider
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Announces Agentic Identity Provider
IT Security News Hourly Summary 2026-09-25 11h : 10 posts
10 posts published in the last hour 08:32Docker introduces OCI-based Kits to package agents and their guardrails 08:32Hackers Exploited Ethereum Bridge Contract to Drain Full Balance from Payy Network 08:31Abnormal AI brings governance, cloud security, and threat investigation into one…
Docker introduces OCI-based Kits to package agents and their guardrails
Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue…
Hackers Exploited Ethereum Bridge Contract to Drain Full Balance from Payy Network
Payy Network has confirmed that attackers exploited its Ethereum bridge contract and drained the contract’s entire balance, forcing the stablecoin…
Abnormal AI brings governance, cloud security, and threat investigation into one suite
Abnormal AI has unveiled the newest additions to its AI Security suite, designed to help enterprises adopt AI securely while protecting against new…
Duelbits Confirms $7 Million Hot-Wallet Hack, forcing Systems offline
Crypto casino Duelbits has confirmed a cybersecurity breach that drained approximately $7 million from its hot wallets, forcing the platform offline while…
Dataiku Agent Management reveals unmonitored AI agents
Dataiku has announced the launch of Agent Management, a standalone product that finds every AI agent an enterprise is running, regardless of which…
New MacSync Malware Turns macOS Apps Into Tools for Crypto and Password Theft
MacSync, a fast-changing macOS information stealer, has returned with a more complex delivery chain aimed at people who use cryptocurrency and developer…
Fake payroll desktop apps hand attackers a route to company paychecks
An attacker has been offering “desktop apps” for three large US payroll and HR platforms that have never released one, Allure Security have found. Anyone…
Salesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection
Security researchers have revealed a vulnerability chain known as “SalesBleed,” associated with Salesforce’s Agentforce. This vulnerability could allow…
SentinelOne extends Wayfinder coverage across endpoints, identities, and cloud workloads
SentinelOne has announced the expansion of Wayfinder Threat Hunting to the major public cloud services: AWS, Azure, and Google Cloud. It’s the latest…
IT Security News Hourly Summary 2026-09-25 10h : 6 posts
6 posts published in the last hour 07:31OpenAI hacks Australia health, Astrana Health breached, TeamCity flaw exploited 07:31Sudo Vulnerability Lets Attackers Bypass Time-Based Authorization Controls 07:31Starting university? Watch out for these common student scams 07:02Roundcube Webmail Vulnerability in Attackers’ Crosshairs…
OpenAI hacks Australia health, Astrana Health breached, TeamCity flaw exploited
OpenAI program hacks Australia’s government health portal Astrana Health suffers data breach Ransomware gangs exploiting TeamCity flaw Get the show notes…
Sudo Vulnerability Lets Attackers Bypass Time-Based Authorization Controls
A recently disclosed high-severity vulnerability in Sudo could allow local, unprivileged Linux users to manipulate time-based authorization restrictions…