Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions.
redactproxy, a tool that lets pentesters use AI without leaking client data
AI coding agents are now part of a lot of security work. They are good at the parts a tester has no time for: going through every request, every parameter…
OpenAI Agents Hacked Another Website
Plus: Tens of millions of US and Canadian drivers’ licenses go up for sale on the dark web, the US military finally tries to tackle the risk online ad…
IT Security News Hourly Summary 2026-09-05 13h : 3 posts
3 posts published in the last hour 10:01Chainguard Hits 1 Billion Build Manifests With AI-Powered Software Supply Chain Security 10:01Microsoft Teams Desktop Client Fails to Load on Windows System – Microsoft Investigating 10:00IT Security News Hourly Summary 2026-09-05 12h :…
Chainguard Hits 1 Billion Build Manifests With AI-Powered Software Supply Chain Security
Chainguard has surpassed 1 billion container build manifests, doubling production from 500 million in six months as it expands its AI-assisted software…
Microsoft Teams Desktop Client Fails to Load on Windows System – Microsoft Investigating
Microsoft is investigating an ongoing issue causing some Windows users to face significant delays or outright failures when launching the Microsoft Teams…
IT Security News Hourly Summary 2026-09-05 12h : 4 posts
4 posts published in the last hour 09:31Russian Hackers Deploy New HOOKEDGE Backdoor in Espionage Attacks Across Europe 09:02AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials 09:01Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki…
Russian Hackers Deploy New HOOKEDGE Backdoor in Espionage Attacks Across Europe
Russian state-sponsored threat actor BlueDelta, also tracked as APT28, Fancy Bear, and Forest Blizzard, has deployed a lightweight Windows backdoor named…
AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials
A human attacker armed with frontier artificial intelligence models breached an enterprise network and seized root credentials in under 10 hours, a…
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel
A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000 posts on a dormant…
IT Security News Hourly Summary 2026-09-05 11h : 4 posts
4 posts published in the last hour 08:0212-Year-Old PostgreSQL Flaw Lets Attackers Execute Code and Take Over Database Servers 08:02Global public-private operation disrupts Sality botnet active for two decades 08:02Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities…
12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code and Take Over Database Servers
A critical PostgreSQL vulnerability dubbed PostGREShell could allow low-privileged replication accounts to execute attacker-controlled code, escalate to…
Global public-private operation disrupts Sality botnet active for two decades
An international operation supported by Europol has disrupted the Sality peer-to-peer (P2P) botnet, a long-running criminal infrastructure used to…
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and…
New Panzer Ransomware Hits 16 Victims Across 11 Countries With Data Theft and Encryption
Panzer ransomware has emerged as a new Ransomware-as-a-Service (RaaS) operation, publishing 16 alleged victims across 11 countries while combining data…
CARS24 Data Breach Exposes 3,100 Customer Records, Leads Allegedly Sold for ₹1,000 Each
Used-car platform CARS24 has alleged that confidential information belonging to approximately 3,100 customers was stolen and supplied to a rival business…
Hackers Use Frontier AI Agents to Breach Enterprise Network in Under 10 Hours
A threat actor used frontier artificial-intelligence models and attack-specific agentic frameworks to breach an enterprise environment, harvest root…
Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities
Broadcom patched two VMware Workstation/Fusion VM-escape bugs. No workarounds exist. Update to version 26H1u1 immediately. Broadcom published advisory…
Defenders call out OpenAI defense pledge, Astra release timing
OpenAI has pledged $1 billion to support frontline defenders just days after calling for a collective surge in cyberdefense. Yet that pledge arrived on…
Surviving and thriving in the AI Vulnpocalypse
Katie Moussouris on AI’s Vulnerability Deluge, Bug Bounties, and Smart Regulation In this Cybersecurity Today on the Weekend feature interview, host David…
numbat – AI agent observability, (Fri, Sep 4th)
​​​​​​​
Why Vulnerability Management Must Move Beyond CVSS
Learn why vulnerability management must move beyond CVSS to prioritize real risk using exploitability, asset context, attack paths, and AI-driven analysis.
U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog. The U.S.…
Defenders call out timing of OpenAI defense pledge, Astra release
OpenAI has pledged $1 billion to support frontline defenders just days after calling for a collective surge in cyberdefense. Yet that pledge arrived on…