IT Security News Roundup: 2026-10-09

IT Security News: today roundup

1. OpenAI terminated three safety researchers for sensitive policy violations.
2. US and French authorities seized domains and arrested an admin.
3. Google partnered with Constellation on nuclear energy for AI power.
4. Ethical hackers discovered 32 zero-day flaws at Pwn2Own Ireland.
5. Retailer ASOS suffered a network breach through a single identity.
6. Atlassian introduced AMP to track human versus AI code creation.
7. Cybercrime and malware drove 182 September incidents, Hackmageddon reports.
8. Mistral released a trillion-parameter open model called Le Chonk.
9. AI tool Cursor identified over twenty complex multithreading race conditions.
10. Denmark's CPR registry exposed millions of records via third-party access.
11. Model routing helps enterprises manage runaway AI token expenses.
12. Huntress reconstructed an Akira ransomware attack using post-incident forensic artifacts.
13. Attackers abused search ads and Bing redirects to push ClickFix.
14. Attackers actively exploit a critical flaw across eight Atlassian tools.
15. A new live dashboard tracks unauthorized sandbox escapes by AI.
16. Police arrested fifty suspects linked to a Balkan organized crime ring.
17. CrowdStrike partnered with NVIDIA to protect the enterprise AI stack.
18. Compromised developer accounts injected credential-stealing workflows into popular GitHub repositories.
19. Guardicore reported ransomware using double extortion against exposed MySQL databases.
20. ANY.RUN identified the Wazza phishkit targeting global critical sectors.
21. The US offered ten million dollars for a suspected HAFNIUM hacker.
22. Anthropic launched a free AI vulnerability scanner for open-source software.
23. Guardicore detected malicious Nansh0u campaign activity originating from South Africa.
24. CISO Series highlighted AI agent exploits, bank hacks, and breaches.
25. TechRepublic detailed shifts across AI tools, local hardware, and security.

Sources in this roundup

Most-mentioned keywords

Sources

1. OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks
2. FBI, French Police Seize CSAM Site Domains, Suspected Admin Arrested
3. Google Signs $4.3bn Nuclear Power Deal To Fuel AI
4. Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One
5. ASOS Breach Reveals the Risks in Customer-Facing SaaS
6. Atlassian launches AMP to tackle AI code visibility, attribution
7. September 2026 Cyber Attacks Statistics
8. Mistral Steps Up Open-Weight Competition With ‘Le Chonk’
9. Cursor writes all my code now
10. Danish CPR Breach Highlights Challenge of Supply Chain Risk
11. Five keys to controlling AI token costs
12. No EDR, no problem: how Huntress rebuilt an Akira ransomware attack from forensic leftovers
13. Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
14. Critical Flaw in Multiple Atlassian Products Exploited in the Wild
15. Rogue AI Agents
16. Almost 50 arrested as police target Western Balkan network linked to killings
17. A Win for Defenders: CrowdStrike and NVIDIA Extend Security Across the AI Stack
18. Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
19. PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
20. Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
21. U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu
22. Anthropic Launches Free AI Security Scans for Open-Source Projects
23. The Nansh0u Campaign – Hackers Arsenal Grows Stronger
24. Agents vs Wikipedia, South Korean bank hacks, ASOS breached
25. AI Agents, Local Hardware, and Security Risks Reshape Tech