12 posts published in the last hour 15:31Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware 15:31Mayor Confirms Ransomware Incident Disrupted Mississippi City Systems 15:31Anthropic’s super bug-hunting model Mythos is hardcore good at math, as latest vuln under…
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new,…
Mayor Confirms Ransomware Incident Disrupted Mississippi City Systems
The city of Vicksburg, Mississippi, has taken its computer systems offline after a ransomware attack disrupted several city functions. Mayor Willis…
Anthropic’s super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows
Exploitation attempts came from China-hosted IP, VulnCheck researcher says
Your Cloud Diagram Is Already Out of Date: An Operating Model for Continuous Security Architecture
The Diagram-to-Deployment Gap Cloud security architecture often begins with a strong design, account boundaries are defined, identity federation and…
LLM Pen Testing: Harness Matters More Than Model
Ridge Security released the first public benchmark comparing eight leading large language models in autonomous penetration testing workflows, revealing…
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on…
CISO thought he had a ‘r3@lg00dp@$$w0rd’ but forgot to patch
Replacing letters with symbols still doesn’t make it good.
YARA-X 1.21.0 Release, (Sat, Oct 3rd)
YARA-X&#;x26;#;39;s 1.21.0 release brings 5 improvements and 4 bugfixes.
Pentagon breach exposes 2.76M SSNs, military records
The Pentagon has confirmed a major data breach at the Defense Manpower Data Center (DMDC) that exposed sensitive personal information belonging to…
CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer
CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor
Danish university DTU breach exposes data of up to 200,000 people
The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and…
IT Security News Hourly Summary 2026-10-03 17h : 5 posts
5 posts published in the last hour 14:31DeepKeep’s AI Lens flags coding agent data leaks and routes destructive commands for approval 14:31Microsoft enables Windows settings backup by default 14:0116-year-old suspected leader of KillSec ransomware group arrested 14:01Treasury Blacklists ATM Malware…
DeepKeep’s AI Lens flags coding agent data leaks and routes destructive commands for approval
DeepKeep has announced AI Lens for Developers, a new extension to the company’s AI usage control and runtime protection modules to secure software…
Microsoft enables Windows settings backup by default
Microsoft has activated Windows settings backup and restore by default for enterprise devices upgraded to Windows 11 version 26H2.
16-year-old suspected leader of KillSec ransomware group arrested
A 16-year-old is suspected of being the main operator of KillSec, a ransomware group that Eurojust says is responsible for almost 1,000 attacks worldwide.…
Treasury Blacklists ATM Malware Developer
The United States Treasury Department has imposed sanctions on a malware developer and associated network members connected to the Tren de Aragua criminal…
IT Security News Hourly Summary 2026-10-03 16h : 9 posts
9 posts published in the last hour 13:31Underground Crypto-Stealing Operation Drains $100K 13:31Microsoft X Account Hijacked to Promote Clippy-Themed Crypto Token 13:31Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site 13:31CloudSyncD MacOS Backdoor Used…
Underground Crypto-Stealing Operation Drains $100K
A sophisticated cryptocurrency-stealing operation has successfully drained roughly $100,000 from victims by hijacking their authenticated browser…
Microsoft X Account Hijacked to Promote Clippy-Themed Crypto Token
Microsoft’s account on X was hacked and used to promote a cryptocurrency token, turning the technology company’s 13-million-follower social media presence…
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
CloudSyncD MacOS Backdoor Used Fake Zoom Installer to Steal Passwords
Cybersecurity researchers have identified a new macOS backdoor called CloudSyncD that uses a fake Zoom installer to trick users into providing their…
Star Blizzard APT Uses RedFlick Chain
Russian state-sponsored threat actor Star Blizzard has adopted a new infection technique dubbed RedFlick to deploy the CosmicPulse backdoor in recent…
Electrons slow to a crawl in a strange new quantum state
Scientists at the University of Chicago have uncovered a surprising quantum state in the layered magnetic material Fe5GeTe2, where huge numbers of…