German police seized a humanoid robot after it allegedly groped a teenage girl in Cologne, raising questions about human control and criminal…
Hirudo Android Malware Replaces Banking Apps to Evade Security Checks
A newly identified Android banking trojan called Hirudo is taking an unusually aggressive approach to evading mobile security: instead of merely…
5 agentic AI trade-offs to consider before production
Companies across industries are moving quickly to build agentic AI systems. But getting an agent to work in a prototype is very different from getting one…
Just Viewing an Online Ad Can Infect Your Device With Spyware, Researchers Reveal
Simply viewing an online advertisement can be enough to infect a device with powerful spyware, without the user clicking, downloading a file, or seeing…
EU Questions OpenAI, Anthropic Over AI Agent Security Incidents
The EU is questioning OpenAI and Anthropic over AI agent security incidents, raising questions about the AI Act’s reach into model development and testing.
Microsoft and Japanese Police Dismantle Network Behind Over 1 Billion Phishing Messages
Microsoft and Japan’s National Police Agency have jointly dismantled a phishing operation that sent more than 1 billion fraudulent emails and text…
Chinese Phishing Network Linked to 1 Billion Messages Targeting 75,000 Organizations
A Chinese-run phishing network has been linked to one billion phishing emails targeting 75,000 organizations, according to a report published on October…
IT Security News Hourly Summary 2026-10-15 18h : 31 posts
31 posts published in the last hour 15:34Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days 15:34Police receive fake murder tip from Anthropic’s Claude AI 15:34AI Agents Linked to Tencent Cloud Probed Alibaba’s…
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only…
Police receive fake murder tip from Anthropic’s Claude AI
Anthropic’s Claude submitted a made-up tip about an unsolved murder during testing.
AI Agents Linked to Tencent Cloud Probed Alibaba’s Amap, Researchers Say
Researchers tracked more than 2,600 AI agent attempts targeting Alibaba’s Amap from Tencent-linked infrastructure, raising concerns about agent security…
CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint…
Cisco Warns of Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
Cisco has warned that attackers are actively exploiting a zero-day flaw in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. An…
600,000 WordPress Sites Affected by SQL Injection Vulnerability in Backuply WordPress Plugin
On September 17th, 2026, we received a submission for a Second-Order SQL Injection vulnerability in Backuply, a WordPress plugin with more than 600,000…
AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks
Spyware vendors use online ad infrastructure to profile targets and deliver exploits without requiring users to click anything. The investigation links…
ServiceNow makes it easier to build AI agents, gives them verifiable identities
ServiceNow is giving its AI Control Tower new features to make AI agents more governable — and a new name, Super Intelligence Control Tower (SICT), to…
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with…
Fake Calendly “Meta Careers” pages steal Facebook and Google logins
An interview invitation becomes a trap for your Facebook and Google passwords, even with two-factor authentication turned on.
South Korea Confirms Breaches at 16 Financial Firms, 100K Records Exposed
South Korea confirms breaches at 16 financial firms, exposing about 100,000 personal records as regulators investigate attack methods and security gaps.
Palo Alto Warns of PAN-OS 0-day Flaw Actively Exploited in Attacks
Palo Alto Networks has warned that attackers are exploiting a high-severity remote code execution flaw in the PAN-OS management interface. Tracked as…
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized…
ASOS Cyberattack: New Details Emerge After Earlier Breach Affected 138,000+ Customers
ASOS reveals that hackers used compromised employee credentials to access customer data following an earlier breach that affected 138,828 people.
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand…
Seven ways to encourage critical thinking in AI users
Employees are increasingly using large language models (LLMs) and AI agents to get work done. Many are using agents to complete tasks, and others are…