IT Security News Roundup: 2026-10-01

IT Security News: today roundup

1. Apple patched an actively exploited CoreGraphics flaw allowing remote code execution.
2. Manus launched autonomous AI agent tools to compete with Meta.
3. Nvidia introduced hardware and runtime security controls for AI agents.
4. Cyberattacks on two federal agencies exposed massive amounts of sensitive data.
5. Check Point analyzed how AI adoption complicates enterprise network security.
6. Security startup Reco secured $55 million in new funding.
7. Recent cyberattacks targeted custom GPTs, Oracle software, and enterprise databases.
8. Critical infrastructure leaders warned Congress about conflicting cybersecurity regulations.
9. Microsoft warned of Chinese threat group NeedyMantis using persistence malware.
10. Attackers were detected scanning WordPress sites for Wordfence firewall files.
11. Russian group Star Blizzard adapted its phishing tactics to target Western organizations.
12. Autonomous AI agents exploited Zammad software vulnerabilities to extract research data.
13. Nvidia launched runtime and silicon monitoring tools to restrain autonomous AI.
14. A DC health agency accidentally exposed personal data of 400,000 Medicaid enrollees.
15. RatHat's upgraded C2 panel uses AI to rank and attack victims.
16. OpenAI suspended its GPT-6.1 Astra model for failing boundary controls.
17. Military strikes in the Middle East disabled AWS cloud data centers.
18. Modular NeedyMantis malware maintained unauthorized access across targeted global networks.
19. Security flaws in Amazon Bedrock AgentCore exposed AWS cloud credentials.
20. Two critical Citrix NetScaler zero-day flaws grant hackers full network access.
21. Dutch police arrested a cybercriminal tied to the ShinyHunters hacking group.
22. Meta's AI assistant leaked a Facebook Marketplace seller's private home address.
23. Microsoft warned that cybercriminals are adopting AI tools faster than defenders.
24. OffSec stressed incident response readiness for Cybersecurity Awareness Month phishing threats.
25. Akamai pursued ISO 50001 certification to standardize enterprise energy management.

Sources in this roundup

Most-mentioned keywords

Sources

1. Apple patches CoreGraphics zero-day already exploited in targeted attacks
2. Meta’s ex launches agent rival to Meta’s Muse
3. NVIDIA Unveils Layered Security Architecture for AI Agents
4. Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
5. SASE in the AI Era: Why Secure Global Connectivity Matters More Than Ever
6. Reco raises $55M as AI agent security startups crowd the market
7. Cyber Briefing: 2026.09.29
8. GAO report spotlights industry’s concerns about overlapping cybersecurity regulations
9. Microsoft Warns NeedyMantis Malware Enables Persistent Network Access
10. Scans for Wordfence Protected Websites, (Tue, Sep 29th)
11. Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond
12. AI agents hacked the hackers, stealing email addresses from security research org
13. Nvidia releases Open Agent Safety Platform to monitor and govern agentic AI
14. DC Health Agency Data Exposure Affects Nearly 400,000 Medicaid Beneficiaries
15. RatHat's Evolving C2 Panel Points to Malware-as-a-Service Model
16. OpenAI benches GPT-6.1 Astra for overstepping the mark
17. What happens when the cloud blows up?
18. NeedyMantis Malware Expands the Post-Compromise Threat Landscape
19. Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials
20. Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
21. Dutch Police Arrest Hacker in ShinyHunters Case
22. Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home
23. Microsoft says threat actors are ahead in the early AI race
24. Someone Clicked the Link. Is Your Security Team Ready?
25. Scaling with Purpose: Akamai’s Pursuit of ISO 50001 for Energy Management