Authentication isn’t enough. Monitor access across humans, machines and AI agents.
JDK 27: The quiet before the storm
Every September, with metronomic regularity, we have a new version of the Java platform. One small point about timing is that the first release candidate…
Frontline Education Breach Impacts K-12 School District Staff
A breach at school software provider Frontline Education has exposed employee data
Google halts open-source bug bounty program amid AI spam surge
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. […]
Iranian hacker accused of draining 31TB from university inboxes extradited to the US
Iranian hacker Amir Barati faces extradition to the US over an alleged Iranian campaign that stole 31TB of data from universities. Amir Barati spent June…
October 2026 Cyber Attacks Timeline
A live view of the month’s vetted cyber incidents, updated as new events are confirmed. Explore the timeline, filter by attack type, and see motivations,…
IT Security News Hourly Summary 2026-10-05 11h : 14 posts
14 posts published in the last hour 08:31Apple tightens macOS disk access as AI agents become more powerful 08:31Top 10 Best Certificate Lifecycle Management (PKI) Tools in 2026 [Ranked & Scored] 08:31Autonomous AI Agent Chains Two Zammad Zero-Days in Machine-Speed…
Apple tightens macOS disk access as AI agents become more powerful
Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable and autonomous.…
Top 10 Best Certificate Lifecycle Management (PKI) Tools in 2026 [Ranked & Scored]
An expired certificate is the outage everyone saw coming, and with public TLS marching toward 47-day maximum lifetimes, renewal frequency is about to rise…
Autonomous AI Agent Chains Two Zammad Zero-Days in Machine-Speed Cyberattack
An autonomous AI agent breached the Dutch Institute for Vulnerability Disclosure (DIVD) after chaining two previously undisclosed vulnerabilities in the…
Top 10 Best Machine Identity Management Solutions in 2026 [Ranked & Scored]
Every workload, container, and script now carries an identity, machines outnumber humans dozens to one, and unmanaged non-human and control-plane…
doxx.net opens Agentic Defined Networking public beta, raises $38 million
doxx.net has launched the open beta of its Agentic Defined Networking (ADN) platform, which lets people and their agents create their own private, secure…
Top 10 Best Fine-Grained Authorization Tools in 2026 [Ranked & Scored]
Broken access control sits at 1 on the OWASP Top 10 because authorization logic scattered through if-statements always rots. We scored ten tools that…
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of…
CISA Adds Zammad Vulnerabilities to KEV Following Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities in the Zammad helpdesk platform to its Known Exploited…
One hidden Meta Muse setting could let attackers turn the AI assistant into a backdoor
Meta Muse is designed to act as a personal AI assistant across a Mac and connected devices – much like the new Siri AI released with…
Another OpenAI Safety Expert Quits and Raises New AI Safety Concerns
OpenAI safety veteran David Robinson resigns, warning that the company’s culture and fast AI development model could create bigger risks. OpenAI safety…
12 Best ITDR Tools Compared (2026): Features & Pricing
Microsoft Defender for Identity is the best ITDR solutions starting point for most estates often already licensed while CrowdStrike leads…
AI slop submissions force Google to freeze its open-source bug bounty
Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of…
11 Best CIAM Solutions Compared (2026): Features & Pricing
Okta’s Auth0 line is the best CIAM for most product teams the benchmark ecosystem with the procurement fast-pass while Amazon Cognito and Microsoft Entra…
IT Security News Hourly Summary 2026-10-05 10h : 12 posts
12 posts published in the last hour 07:31Warlock continues SharePoint exploits, ShinyHunters member flips China’s AI espionage 07:31A week in security (September 28 – October 4) 07:3112 Best Passwordless Authentication Solutions Compared (2026): Features & Pricing 07:31Alleged ShinyHunters Leader Arrested…
Warlock continues SharePoint exploits, ShinyHunters member flips China’s AI espionage
Warlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI…
A week in security (September 28 – October 4)
A list of topics we covered in the week of September 28 to October 4 of 2026
12 Best Passwordless Authentication Solutions Compared (2026): Features & Pricing
Microsoft is the best passwordless starting point for most workforces passkeys and Windows Hello ride licensing you already own while HYPR leads the…