IT Security News Roundup: 2026-09-15

IT Security News: today roundup

1. CISA and NIST published technical guidance to prevent token theft.
2. Europol and ELA partnered to combat European labour exploitation.
3. Microsoft adopted AI student privacy guardrails with teachers' unions.
4. Experts urge continuous monitoring over periodic security control audits.
5. The US military acknowledged placing weapons into Earth's orbit.
6. Wordfence 9 added passkey support to streamline user authentication.
7. Infoblox exposed cybercriminals using illegal online casino infrastructure.
8. Amazon Cognito added multi-Region replication for resilient user authentication.
9. Brazilian KREMLIN malware compromised Chrome and Edge session credentials.
10. Iranian operatives deployed Chosen Brick malware on targeted Windows devices.
11. Europol celebrated international police cooperation for cross-border security operations.
12. Agencies warned of Iranian Telegram-controlled spyware targeting global dissidents.
13. Homebrew 7.0.0 introduced built-in vulnerability scanning and improved sandboxing.
14. Microsoft mandated that future AI models must allow human shutdown.
15. Hackers breached Japan's Digital Agency platform, exposing 240,000 records.
16. US military confirmed launching orbital space weapons into Earth's orbit.
17. CISA warned of active zero-day attacks on Cisco Email Gateways.
18. TechRepublic reviewed Passwd Enterprise password manager features and integrations.
19. cPanel urged admins to fix a LiteSpeed server root vulnerability.
20. CISA detailed 17 hacker techniques compromising Microsoft Active Directory.
21. Microsoft drafted rules banning its AI models from launching cyberattacks.
22. Homebrew 7.0.0 fixed eight vulnerabilities, including high-risk privilege escalation.
23. Cybercriminals began promoting Luciferus, an uncensored malware-generating AI service.
24. Security experts analyzed the EU Cyber Resilience Act's reporting deadlines.
25. Apple patched 273 security vulnerabilities across its device operating systems.

Sources in this roundup

Most-mentioned keywords

Sources

1. CISA and NIST Release Technical Checklist for Safeguarding Identity Tokens From Theft and Misuse
2. Europol and European Labour Authority strengthen cooperation against labour exploitation
3. Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?
4. “We Think the Security Control Is Working” Is No Longer Good Enough
5. US military says it has launched weapons into space
6. Boost Engagement with Free Passkeys by Wordfence
7. Low-quality casino sites conceal highly dangerous threat actors
8. Architecting resilient authentication with Amazon Cognito multi-Region replication
9. KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
10. Iranian spies hit Windows machines with Chosen Brick data-stealing malware
11. Europol celebrates the International Day of Police Cooperation
12. Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
13. Homebrew 7.0.0 Adds Built-In Vulnerability Scanner and Stronger Package Sandboxing
14. Microsoft’s New AI Rules Say Models Must Never Resist Human Shutdown
15. Japan’s Digital Agency Breach Exposes 240,000+ Users’ Personal Records to Hackers
16. US military confirms it launched space weapons into Earth’s orbit
17. CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
18. Passwd Enterprise Review: Features, Pricing & Security
19. cPanel LiteSpeed Web Server Vulnerability Allows Shared Server Users to Gain Root-Level Access
20. CISA Shares 17 Techniques Used by Hackers to Compromise Active Directory Environments
21. Microsoft Bans Its AI Models From Launching Cyberattacks or Escalating Their Own Access
22. Homebrew 7.0.0 Ships With Fixes for Eight Security Advisories
23. Hackers Advertise Uncensored Luciferus AI Service on Underground Forums
24. Slow is a design principle, not a delay
25. Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices