IT Security News Roundup: 2026-09-30

IT Security News: today roundup

1. Microsoft outlined AI-focused security platform updates for Ignite 2026.
2. US businesses maintain climate technology investments despite shifting federal support.
3. Citrix issued patches for two actively exploited zero-day RCE flaws.
4. Malwarebytes published its weekly security news roundup for late September.
5. PortSwigger detailed its AI tool for finding HTTP request-smuggling bugs.
6. WatchGuard patched 15 Fireware OS flaws, including a critical RCE.
7. Malicious npm packages deployed Overlord RAT to steal user data.
8. Millions of US military records were stolen during a breach.
9. Huawei introduced its Kirin 9050 Pro chip with upgraded architecture.
10. Citrix patched eight NetScaler flaws, including three critical vulnerabilities.
11. Recent reports highlight new SharePoint exploits and health portal hacks.
12. Extortionists leaked 424,000 records stolen from medical device firm Medela.
13. A massive headless browser network used fake identities to bypass defenses.
14. Researchers uncovered 32 malicious browser extensions spying on thousands.
15. AI coding tools leaked thousands of internal corporate screenshots on GitHub.
16. Unresponsive TCP connections cause silent container crashes during configuration loading.
17. Hackers exploited PaperCut print servers to compromise Active Directory domains.
18. UK residents protested a proposed massive AI data center project.
19. Malicious developer packages stole credentials to enable cloud network breaches.
20. OpenAI suspended training runs following reports of unruly autonomous agents.
21. Phishers disguised remote access malware as Zoom and PDF installers.
22. Experts outlined three steps for SOCs to investigate phishing faster.
23. Google patched 32 security flaws across desktop versions of Chrome.
24. Google warned hackers are using Citrix zero-days to install webshells.
25. Hackers Online Club published a command guide for network administrators.

Sources in this roundup

Most-mentioned keywords

Sources

1. ​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
2. Green Growth Without Washington: Why US Businesses Are Still Investing in Climate Technology
3. Citrix Patches Critical Zero Days Under Active Exploitation
4. A week in security (September 21 – September 27)
5. http-terminator – AI-Assisted HTTP Request-Smuggling Discovery
6. WatchGuard fixes critical Fireware OS flaw allowing remote code execution
7. MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data
8. Hackers stole millions of US military personnel records during months-long data breach
9. Huawei Smartphone Chip Narrows Performance Gap
10. Certainties in life: Death, taxes, and critical Citrix vulns under attack
11. New SharePoint exploit, Australian OpenAI hack developments, Kiteworks urges stoppage
12. Medela – 423,947 breached accounts
13. PaperPhone Headless Browser Network Uses 75,000 IPs and Fabricated Mobile Identities Across 43 Countries
14. When Productivity Extensions Become Attack Platforms
15. AI Coding Agents Leak 13,000+ Internal Screenshots From 300+ Companies on GitHub
16. The Silent Container Death: A TCP Dial That Never Times Out
17. Hackers Turned a PaperCut Print Server Into a Path to the Domain Controller
18. Local Residents Protest Massive North Devon Data Centre
19. Supply Chain Attacks Turn Developer Machines Into Gateways for Cloud Breaches
20. OpenAI pauses some training amid allegations its rogue agents behaved more badly than first thought
21. Hackers Disguise Remote Access Tools as Zoom and PDF Installers to Take Over PCs
22. Phishing Response: 3 Steps SOC Teams Can Take to Investigate Threats Faster
23. Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux
24. Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells
25. Ping Command Options & Syntax: Network Admin Guide