Ransomware exploitation, phishing, exposed customer data, and failed detection rules are creating opportunities for unauthorized access, credential theft,…
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
Attackers hijacked Ukrainian websites to deliver a fake Cloudflare CAPTCHA that installs Psychedelic Stealer and steals browser and crypto credentials.…
Quantum computing’s “dark horse” just proved it can go universal
Researchers have shown that exotic quantum particles called non-Abelian anyons can perform the full range of operations needed for universal quantum…
AI Q&A: what is an Agent?
Intro I talk a lot about AI these days… and I know I am not alone. People talk a lot about “agentic AI” or “AI Agents” or simply “Agents”. During these…
Ransomware gangs exploiting critical TeamCity flaw
The U.S.
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration
IT Security News Hourly Summary 2026-09-25 16h : 15 posts
15 posts published in the last hour 13:33Party Invite Phishing Scams Target Users 13:32CenterPoint Energy breach: 7.49M records claimed stolen 13:32Two Things Every Cyber Asset Attack Surface Management (CAASM) Tool Needs to Get Right 13:32Rydox marketplace admin pleads guilty 13:32North…
Party Invite Phishing Scams Target Users
A wave of phishing attacks is targeting users through fake party invitations that mimic popular digital invitation services such as Evite and Paperless…
CenterPoint Energy breach: 7.49M records claimed stolen
CenterPoint Energy disclosed a data breach on September 14, 2025, confirming that an unauthorized third party obtained customer information through one of…
Two Things Every Cyber Asset Attack Surface Management (CAASM) Tool Needs to Get Right
Cyber Asset Attack Surface Management (CAASM) solved a significant problem. Security teams can now say with confidence what they own. But, two things…
Rydox marketplace admin pleads guilty
A citizen of Kosovo has pleaded guilty to federal charges for operating Rydox, a significant illegal online marketplace that trafficked in stolen personal…
North Korean hackers suspected in $351M crypto theft, the largest so far this year
The $351 million theft from crypto exchange Bitget is the latest in a string of high profile hacks targeting the crypto sector.
Detection dashboards mask security coverage gaps
Nearly half of all security detection rules deployed across enterprise environments are failing to function properly, according to new research from…
Locking Down the Enterprise: Data Security Patterns for AI Integrations
Every enterprise conversation about artificial intelligence eventually arrives at the same uncomfortable question: what happens to our data once it leaves…
Microsoft Unified Copilot App Launches with Code, Autopilot
Microsoft released a unified Copilot application today that consolidates its previously scattered consumer and enterprise AI tools into a single client.
Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated
A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…
Criminals turn placeholder domain into ClickFix trap
A domain used in software examples—third-party[.]com—now serves up a fake verification page that tells Windows users to run a PowerShell command.
The SOC Doesn’t Need to Start Over with Every Alert
Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made…
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
CISA Unveils Election Security Plan Ahead of 2026 Midterms
The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines
14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape
A vulnerability in the Linux kernel’s AF_ALG cryptographic interface, which has existed for 14 years, can let an unprivileged local attacker gain root…
IT Security News Hourly Summary 2026-09-25 15h : 7 posts
7 posts published in the last hour 12:31Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court 12:31Been told to pay at a Bitcoin ATM? Read this first 12:31Attackers build “silent” cryptominer on victim’s machine and give themselves away 12:31Threat…
Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court
Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services.
Been told to pay at a Bitcoin ATM? Read this first
Crypto ATM scams often follow a predictable script – here’s how to recognize it and what to do if you’ve already been caught out