IT Security News Roundup: 2026-10-03

IT Security News: today roundup

1. Jordan detained suspected ShinyHunters hacker "Rey," who is assisting FBI investigations.
2. Surveys show AI reduces entry-level SOC jobs while boosting strategic skills.
3. A judge ruled warrantlessly using Flock license plate searches violates rights.
4. Detained ShinyHunters member "Rey" is helping the FBI locate co-conspirators.
5. Forrester named CrowdStrike a leader in external threat intelligence services.
6. Palo Alto Networks launched Cortex XCOR for AI-driven autonomous observability.
7. Hackers used stolen staff credentials to breach French tax administration records.
8. Microsoft reported government agencies faced the most cyber attacks in 2026.
9. Jordanian authorities detained Saif al-Din Khader for alleged ShinyHunters cybercrimes.
10. Security analysts documented recent malicious Macfinger ClickFix traffic activity.
11. Guardicore identified double-extortion ransomware campaigns hitting unprotected MySQL servers.
12. A self-healing WordPress backdoor uses multiple vectors to survive cleanup attempts.
13. Phishers combine MSP360 and ConnectWise ScreenConnect tools for stealthy access.
14. Microsoft highlighted rising interconnected threat risks in its latest security report.
15. Hackers exploited a Zimbra mail server vulnerability weeks before public disclosure.
16. Security experts recommended creating dedicated threat models for enterprise mobile devices.
17. Guardicore tracked new Nansh0u campaign attacks originating from South African servers.
18. Superfluid helium qubits could dramatically reduce quantum computing error rates.
19. Android 17 restricts accessibility API privileges to verified applications only.
20. Unapproved shadow AI usage exposes sensitive corporate data to leak risks.
21. CrowdStrike partnered with NVIDIA to expand cyber defenses across AI stacks.
22. Supply-chain companies adopt AI defenses to counter escalating supply-chain cyberattacks.
23. Recent cyber campaigns combined session theft and a military data breach.
24. Caltech researchers experimentally measured a theoretical 40-year-old quantum energy ladder.
25. Google introduced Gemini 4 Argon for autonomous cybersecurity and enterprise coding.

Sources in this roundup

Most-mentioned keywords

Sources

1. ShinyHunters Suspect “Rey” Detained in Jordan, Reportedly Helping FBI
2. SOC staffers generally pleased with AI’s impact, but worries remain
3. Federal judge calls Flock ‘indiscriminate mass surveillance’
4. ShinyHunters hacker reportedly detained in Jordan, aiding FBI
5. CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
6. Observability’s AI Moment
7. French Tax Data Theft: Threat Actors Steal Password and Remain Undetected
8. Preparing governments for an era of interconnected cyber risk
9. ShinyHunters Member Detained in Jordan, Reportedly Helping FBI Identify Fellow Hackers
10. 2026-09-29: Macfinger ClickFix activity
11. PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
12. WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory
13. Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Campaigns
14. Insights from the 2026 Microsoft Digital Defense Report
15. Microsoft catches hackers exploiting Zimbra bug before disclosure
16. Why Mobile Device Management Needs Its Own Threat Model
17. The Nansh0u Campaign – Hackers Arsenal Grows Stronger
18. This new qubit could be 100 times less error-prone in superfluid quantum computer breakthrough
19. Google's Android 17 Locks Accessibility Services to Verified Apps as Malware Threat Branches Out
20. Shadow AI explained: The work shortcut that could leak your company’s secrets
21. A Win for Defenders: CrowdStrike and NVIDIA Extend Security Across the AI Stack
22. AI Turns Into Both Threat and Shield in Supply-Chain Cyberattacks
23. Cyber Briefing: 2026.10.01
24. Caltech physicists finally measure a quantum energy ladder predicted 40 years ago
25. Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first