IT Security News Daily Summary 2026-09-24

198 posts published today

21:31SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
21:31Introducing Unit 42 Continuous Frontier AI Defense
21:31Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison
21:02New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
21:01Autonomous AI Hacks Raise Thorny Questions of Legal Accountability
21:01DORA Year Two: Can Your SOC Actually See the Attack?
21:00IT Security News Hourly Summary 2026-09-24 23h : 10 posts
20:31Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor
20:31GPT-6 Astra Breaks an Old Enigma Message
20:03OpenSSL 4.1 Beta Release Announcement
20:03Andorran Police joins Europol’s secure communication network
20:03Researchers Found a New Way to Break RSA that Doesn’t Require Factoring the Key
20:03What Would RAG Look Like If Miranda Priestly Were the User?
20:02AI Drives Surge in Bot and API Threats
20:02OpenAI Agent Breached Australian Medicare Statistics Portal
20:01How a Managed SOC works: What happens when a cyberattack begins?
20:00IT Security News Hourly Summary 2026-09-24 22h : 8 posts
19:31Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
19:31AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
19:31Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
19:02Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
19:02Rogue AI agents put trusted access under scrutiny
19:02Researchers used Claude to hack OpenAI
19:02ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
19:00IT Security News Hourly Summary 2026-09-24 21h : 10 posts
18:31A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight
18:31North Korean Hackers Hide Mac Backdoors in Fake Terraform Job Tests
18:31Texas utility CenterPoint confirms breach after attacker leaks customer data
18:31ChatGPT and Cybersecurity: Risks, Uses, and Misuses
18:02Trust and the enticing consultancy offer
18:02Wordfence Intelligence Weekly WordPress Vulnerability Report (September 14, 2026 to September 20, 2026)
18:02Gemini crosses the line in cybersecurity test
18:02Orkes Conductor RCE Draws Nearly 7,000 Exploit Attempts
18:01CISOs Must Update Incident Response Playbooks for Multimodal Deepfakes, Gartner Warns
18:00IT Security News Hourly Summary 2026-09-24 20h : 15 posts
17:32The Closed Quorum: Inside the first reported autonomous AI C2 implant
17:32UkeySoft Spotify Music Converter Review: Download Spotify to MP3 with Free Account(2026)
17:31LimeLeads – 17,838,396 breached accounts
17:31Developers Complain After Z.ai’s ZCode Sends Data To Cloud
17:31Microsoft Password Reset Portal Can Leak Account Verification Details
17:31Introducing CAIRN: Frontier tracking for AI-integrated malware
17:02Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
17:02F5 Fixes BIG-IP APM Zero-Day Enabling Unauthenticated RCE
17:02CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
17:02How to Use AI With Your Privacy Intact
17:02A Decision Model Breaks Like Any Other Language Model: A First Look at Jev
17:02Decades-old file security flaws found in Android, Linux, macOS, and Windows
17:02SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
17:01CVE flood pushes Ubuntu onto weekly kernel release cycle
17:00IT Security News Hourly Summary 2026-09-24 19h : 15 posts
16:31What’s new in Microsoft Security: September 2026
16:31August 2026 Cyber Attacks Statistics Infographic
16:31AI Chatbots Get Financial Queries Wrong ‘Most Of Time’
16:31Google Gemini AI Hacked Three Real Companies in CTF Test
16:31Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
16:31Belgium’s Aikido Releases Open-Weight AI Security Model
16:02OAuth Phishing Attacks Bypass Passwords by Turning User Consent Into a Security Threat
16:02August 2026 Cyber Attacks Statistics
16:02Meta Challenges Online Safety Categorisation, In Latest Pushback
16:02The Hidden Security Risks of Devices You Forgot Were Connected
16:02ShinyHunters hijacks Clop, fake LastPass kills security tools, trusted npm release carries malware
16:02CrowdStrike SafeMind: When the Best Offense Builds the Best Defense
16:02Kontext Security Emerges With $4 Million for AI Agent Runtime Controls
16:01Amazon Blocks Meta’s Muse AI Bot From Consumer Platform
16:00IT Security News Hourly Summary 2026-09-24 18h : 13 posts
15:31Amazon Adds Moonshot’s Kimi K3 To Cloud Platform
15:31Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
15:31Wiz uses AI to find vulnerabilities in railroads, hospitals and other critical infrastructure
15:31GitLab Email Feature Exposes Critical Security Risk
15:31WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
15:31Someone went shopping in ASUS’s eShop – for customer data
15:31Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
15:02Ireland Fines Google €403m Over Location Tracking
15:02OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data
15:02One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
15:02A Go Worm Stole MemTensor’s CI Tokens and Shipped Backdoored Packages to npm and PyPI
15:01Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
15:00IT Security News Hourly Summary 2026-09-24 17h : 8 posts
14:31SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta
14:31Cyber Briefing: 2026.09.24
14:31OpenAI agent breached Australian government site, took months to report it
14:02OpenAI agent breached Medicare statistics site, then took months to report it
14:02AvisLoader Windows Malware That Learned to Survive Even After Its Servers Are Taken Down
14:02Symphony Risk Intelligence uses AI agents to streamline financial crime investigations
14:01Fake PDF Files Hide Konni Malware Campaign Targeting Ukraine Organizations
14:00IT Security News Hourly Summary 2026-09-24 16h : 27 posts
13:32Can We Control Every AI Agent Before It Becomes Our Next Privileged Insider?
13:31Crackdown on Italian organised criminal network involved in large-scale euro counterfeiting
13:31Uncovering a SectopRAT Variant Embedded in Legitimate Software
13:31ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)
13:31PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
13:31Data Quality Overtakes Skills as Top Threat Hunting Challenge
13:31Jev Is Not a Language Model, but It Breaks Like One: Prompt Injection Against a Typed Decision Model
13:31The Nansh0u Campaign – Hackers Arsenal Grows Stronger
13:03New Browser Guard features add protection before and after you click
13:03NIST Updates OT Security Guide; CISA/FBI ICS Advice
13:03CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
13:03AI-Powered Campaign Targets Hundreds of Online Retailers
13:03CISA Charts New “Quality Era” for Global CVE Program
13:03Australia to investigate if OpenAI hack of government health website broke the law
13:03Google to critical infra orgs: Our AI scanners won’t be evil, promise
13:03Malicious Firefox Extension Disguised as PDF Tool Steals Google Account Sessions
13:02OpenAI agent hacking spree widens to Australia, targeting government website
13:02SolarWinds Patches Critical RCE Flaws
13:02Threats Making WAVs – Incident Response to a Cryptomining Attack
13:02Hackers Exploit Critical Check Point VPN Flaws to Gain Remote Access Without Login
13:02Cloud Range lets SOCs benchmark AI agents against human defenders
13:02OpenAI Agent Hacked Australia Health Service
13:02Peer Pressure: Inside the Sality Botnet Disruption Operation
13:02Revolut launches facial recognition checkout system
13:02The Oracle of Delphi Will Steal Your Credentials
13:01MemTensor npm/PyPI packages compromised
13:00IT Security News Hourly Summary 2026-09-24 15h : 18 posts
12:33CrowdStrike Falcon Guardian Defines the Next Generation of AI Security
12:33New Galago Ransomware Operation Emerges With Links to Panzer Group
12:33Seven arrests in Brazil during crackdown on South America-Europe cocaine pipeline
12:33OpenAI agent breached Australia’s Medicare portal – and nobody noticed for three months
12:32Azul AI Assistant helps teams find Java licensing and security risks
12:32Island Raises $400 Million at $6.4 Billion Valuation
12:32Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
12:32New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs
12:32Airties adds router-level cybersecurity protection for ISPs
12:32Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
12:32LatticeFlow AI offers managed risk assessments for enterprise AI systems
12:31OpenAI Agent Hacked Australian Government Medicare Portal in World’s First Rogue AI Breach
12:31UK gears up for fight against Russia’s disinformation machine
12:31Roundcube Webmail SQL Injection Vulnerability Exploited in the Wild
12:31Meta locks itself out of user data on its AI glasses
12:31Microsoft Rebuilds the SOC with AI Agents, SIEM Integration and Machine-Speed Defense
12:31Gurucul connects AI activity to identity data for faster threat response
12:00IT Security News Hourly Summary 2026-09-24 14h : 13 posts
11:32An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later
11:31Update Chrome: 108 security fixes for desktop, new release for Android
11:31Malicious npm Packages That Evade Defenses
11:31OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research
11:31OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators
11:31OpenSUpdater Hides in Recompiled 7zip SFX
11:31Begin at the End: How to Enable Agentic Remediation
11:02Planet Labs Opens Berlin Satellite Factory
11:02An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later.
11:0217,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
11:02UK Government Shifts to Service-Led Cyber Governance After Stinging Audit
11:01SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
11:00IT Security News Hourly Summary 2026-09-24 13h : 12 posts
10:31MacSync under the microscope: new delivery methods and a new payload
10:31OpenAI Agent Hacks Australian Medicare Portal
10:03New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2
10:02Google plans to give Private AI Compute a memory that follows users across devices
10:02Astrana Health Data Breach Impacts Private, Confidential Information
10:02How We Got AD Admin In Red Teaming With GLM5.3 and RedactProxy
10:02Operation Conflict Compass Deploys VelvetCake PowerShell Malware Through Malicious LNK Files
10:02Over 75% of Organizations Experience Microsoft 365 Governance Issues
10:02Hackers Exploit Check Point VPN RCE and Management Zero-Day in Attacks
10:02New Android malware RemControl steals banking PINs and blocks removal attempts
10:01Roundcube Webmail Flaw Lets Attackers Trigger SQL Injection Without Authentication
10:00IT Security News Hourly Summary 2026-09-24 12h : 5 posts
09:02Google’s location data privacy failures draw a €403 million fine
09:02New Windows Malware Built to Survive Takedowns With a Hidden P2P Command Network
09:02September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
09:02US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks
09:00IT Security News Hourly Summary 2026-09-24 11h : 10 posts
08:32Data Overtakes Skills as Top Threat Hunting Challenge, SANS Study Finds
08:31Apple’s new iOS 27 feature looks for signs you’re being scammed
08:31TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
08:31Government contractor exposed path to immigration records
08:31GNOME 50.5 security fixes patch a gvfs CVE and Epiphany code injection
08:31OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
08:31Claude.ai is about 3x faster after 3,000+ changes
08:31Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
08:02Microsoft Rebuilds the SOC With AI Agents to Fight Machine-Speed Cyberattacks
08:00IT Security News Hourly Summary 2026-09-24 10h : 6 posts
07:31RemControl Android Malware Targets 30+ Banking Apps to Steal PINs and Credentials
07:31Critical WordPress Vulnerability Exploited Immediately After Disclosure
07:31ShinyHunters peeks at FBI assignments, WordPress flaw wastes no time, Pentagon’s cyber appetite grows
07:31Protecting citizens, preserving rights
07:31cPanel Permissions Flaw Allows Local Users to Read Other Accounts’ Calendar Data
07:00IT Security News Hourly Summary 2026-09-24 09h : 7 posts
06:31One URL, Three Different Tricks, (Thu, Sep 24th)
06:31New Galago Ransomware Operation Emerges With Links to Panzer Extortion Group
06:31OpenAI Releases Lower-Cost Sol, Luna Models
06:31CLOSEDQUORUM, the malware that asks four AI models what to do next
06:02GitLab Email Token Lets Attackers Push Code to Main and Execute CI/CD Jobs
06:02Apache Tomcat 11.0.26 Fixes 12 Security Flaws Enabling WebSocket Bypass and DoS Attacks
06:00IT Security News Hourly Summary 2026-09-24 08h : 5 posts
05:31Fake Firefox Extension Hijacks Google Accounts Without Stealing Passwords First
05:31What to do first when you get 90 days to secure AI agent data
05:02Your security program knows about the firewall, but does it know about the elevator?
05:01Ubuntu kernel CVE fixes are moving to a weekly release schedule
05:00IT Security News Hourly Summary 2026-09-24 07h : 4 posts
04:31Apache Tomcat Update Fixes WebSocket and HTTP/2 Flaws Affecting Server Security
04:31IonQ Targets Quantum Error-Correction Bottleneck With Single-CPU Decoder
04:31Europe’s technology backbone is becoming a cyber target
04:02ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th)
00:31OpenAI agents ‘infiltrated Australian government website’
23:31ICYMI: August 2026 @AWS Security
23:00IT Security News Hourly Summary 2026-09-24 01h : 3 posts
22:31US-Based Digital Forensics Firm Hid its Russian Ownership from U.S. Government Customers
22:31Americans’ views on data centers have turned more negative

IT Security News Daily Summary 2026-09-24

198 posts published today

Like this:

Related

198 posts published today

Share this:

Like this:

Related

Post navigation