Researchers warn the vulnerability could be used by state-linked actors for espionage.
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five…
IT Security News Hourly Summary 2026-09-16 19h : 4 posts
4 posts published in the last hour 16:02CISA looks to recruit general infrastructure security experts rather than sector-focused advisers 16:02Drug trafficking investigation leads to some of the world’s biggest underground bankers 16:01Companies’ AI strategies don’t account for agentic tools 16:00IT…
CISA looks to recruit general infrastructure security experts rather than sector-focused advisers
“I need people that can pivot from day to day,” the agency’s acting chief told reporters.
Drug trafficking investigation leads to some of the world’s biggest underground bankers
The investigation, led by the Spanish National Police (Policía Nacional) and supported by Europol, has resulted in the arrest of 21 suspects for offences…
Companies’ AI strategies don’t account for agentic tools
Businesses are taking AI governance seriously, but their plans lag behind the technology they’re using, according to an EY survey.
IT Security News Hourly Summary 2026-09-16 18h : 13 posts
13 posts published in the last hour 15:31Could blame culture be cybersecurity’s next Achilles heel? 15:31ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th) 15:31PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug 15:31Spanish Data Watchdog Publicises…
Could blame culture be cybersecurity’s next Achilles heel?
By Myles Bray, CEO of CyberSentriq. When it comes to cybersecurity, discussions often centre on technical capabilities, tooling and attacker tactics, but…
ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092,…
PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug
Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells
Spanish Data Watchdog Publicises First AI Agent-Linked Data Breach Report
Spain’s data protection watchdog said it has received the first reported notification of a personal data breach allegedly carried out by an artificial…
ShinyHunters breaches Florida DMV, OpenAI agents flood code repository with malware, Airlines dodge paying for cyber delays
Host David Shipley covers multiple cyber stories: Florida confirmed criminals breached its DMV using credentials from a Plant City police officer that…
Cybersecurity Innovation Takes Centre Stage in International Cyber Expo Awards Shortlist
International Cyber Expo has revealed the ten finalists shortlisted for its 2026 Innovation Awards & Trail, with cybersecurity technologies featuring…
Thousands of horses caught up in Europe-wide trafficking scheme
Europol has supported a major operation against a criminal network suspected of trafficking horses across Europe using falsified documents and manipulated…
Virtual Event Today: Attack Surface Management Summit
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding…
Oracle Critical Security Update – 673 Vulnerabilities Patched Across Product Families
Oracle has released one of its largest monthly security bundles to date, shipping 673 new security patches in its September 2026 Critical Security Patch…
CrowdStrike Accelerates Real-Time Data Classification with On-Device AI
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Accelerates Real-Time Data Classification with On-Device AI
Google says some Pixel phone owners were hacked in zero-day attacks
The Pixel phone maker said there are indications that a bug in the phone’s modem “may be under limited, targeted exploitation.”
Critical Issabel PBX Command Execution Vulnerability Exploited in the Wild
A critical vulnerability in the Issabel Framework, which supports Issabel PBX deployments, is being actively exploited in the wild. The flaw, tracked as…
IT Security News Hourly Summary 2026-09-16 17h : 19 posts
19 posts published in the last hour 14:32EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media 14:32Apache Syncope Vulnerabilities Allow Attackers to Execute Malicious Code and Bypass Controls 14:32Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root,…
EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media
Ursula von der Leyen warns that advanced AI could unleash hacking on an unprecedented scale as Europe prepares new protections against social media’s…
Apache Syncope Vulnerabilities Allow Attackers to Execute Malicious Code and Bypass Controls
Apache Syncope has disclosed three important security vulnerabilities that could allow authorized administrators to execute malicious SQL commands, bypass…
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can’t Install Fix
Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog…
TP-Link Cameras 0-Day Vulnerabilities Allow Attackers to Spy on Users
TP-Link Tapo C200 smart cameras were affected by two zero-day vulnerabilities that could allow attackers on the same network to bypass authentication or…