Cyberattacks can move faster than a security team can investigate them. Attackers increasingly use AI agents to automate steps that once needed several…
Gurucul connects AI activity to identity data for faster threat response
Gurucul has announced the general availability of Gurucul AI Risk and Response, bringing behavioral AI to the growing attack surface created as AI moves…
IT Security News Hourly Summary 2026-09-24 14h : 13 posts
13 posts published in the last hour 11:32An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later 11:31Update Chrome: 108 security fixes for desktop, new release for Android 11:31Malicious npm Packages That Evade Defenses 11:31OpenAI Agent Bypassed…
An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later
The country’s prime minister expressed disappointment at being informed of the hack only via email. Now Australia is investigating whether OpenAI broke…
Update Chrome: 108 security fixes for desktop, new release for Android
Google has released Chrome 154 for desktop and begun rolling out Chrome 155 for Android. Here’s what to check on your device.
Malicious npm Packages That Evade Defenses
This is an impressive piece of malware . Its sophistication says nation-state to me, but there is no direct evidence and certainly no attribution.
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research
OpenAI’s AI agent bypassed controls on an Australian health portal, accessed non-public files and triggered a government investigation. An OpenAI AI agent…
OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators
Revision 4 of NIST’s operational technology security guide is open for public comments until November 30.
OpenSUpdater Hides in Recompiled 7zip SFX
This post has no text preview — click the link below to read the original article. This article has been indexed from Security Blog G Data Software AG Read the original article: OpenSUpdater Hides in Recompiled 7zip SFX
Begin at the End: How to Enable Agentic Remediation
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
Planet Labs Opens Berlin Satellite Factory
California-based company taps into European defence tech sovereignty push with German-built high-resolution optical satellites
An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later.
The country’s prime minister expressed disappointment at being informed of the hack only via email. Now Australia is investigating whether OpenAI broke…
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our…
UK Government Shifts to Service-Led Cyber Governance After Stinging Audit
Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
IT Security News Hourly Summary 2026-09-24 13h : 12 posts
12 posts published in the last hour 10:31MacSync under the microscope: new delivery methods and a new payload 10:31OpenAI Agent Hacks Australian Medicare Portal 10:03New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2 10:02Google plans to give…
MacSync under the microscope: new delivery methods and a new payload
We look at a new version of the MacSync macOS stealer with a backdoor module that targets crypto enthusiasts and developers.
OpenAI Agent Hacks Australian Medicare Portal
Australian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026
New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2
Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix…
Google plans to give Private AI Compute a memory that follows users across devices
Google plans to add private, server-side memory to Private AI Compute, enabling AI assistants to maintain continuity across devices while providing…
Astrana Health Data Breach Impacts Private, Confidential Information
Hackers impersonated the company’s personnel and contacted its employees to gain access to Astrana Health’s servers.
How We Got AD Admin In Red Teaming With GLM5.3 and RedactProxy
A client engaged us to red team their internal network. It was fully black box: zero input, no starting credentials, and no guidance on where to begin.…
Operation Conflict Compass Deploys VelvetCake PowerShell Malware Through Malicious LNK Files
North Korea-linked threat actor Konni has launched a targeted cyberespionage operation against Ukraine-focused entities using malicious Windows shortcut…
Over 75% of Organizations Experience Microsoft 365 Governance Issues
ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows