Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption…
Macfinger ClickFix campaign, (Tue, Sep 22nd)
Introduction
Storm-3168: Agentic-driven cloud attacks using compromised service principals
Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service principals, identifying the…
Amazon Slams the door on Meta’s Muse AI Agent
Amazon Blocks Meta’s AI Shopping Agent, FBI Boards Hacked Oil Tankers & Microsoft Patches Break Backups David Shipley covers Amazon blocking Meta’s new AI…
Check Point Warns of Active Exploitation of Two Critical Pre-Authentication Vulnerabilities
Check Point has issued urgent warnings to customers following the discovery of active attacks targeting two zero-day flaws in its products. The two…
Sovereignty vs Convenience
Technology decisions have traditionally been driven by functionality, price, and ease of use. If a solution met the business need and integrated with…
Kiteworks urges customers to shut down their servers amid ‘imminent’ threat of cyberattack
The tech giant, which allows companies to send large datasets over the internet, said it received a “credible threat” from law enforcement about an…
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were…
ISC Stormcast For Wednesday, September 23rd, 2026 https://isc.sans.edu/podcastdetail/10106, (Wed, Sep 23rd)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, September 23rd, 2026 https://isc.sans.edu/podcastdetail/10106,…
IT Security News Hourly Summary 2026-09-25 18h : 11 posts
11 posts published in the last hour 15:31Wiz uses AI to find vulnerabilities in critical infrastructure 15:31In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure 15:31Kothamine malware uses Tailscale’s tailcat to evade network detection…
Wiz uses AI to find vulnerabilities in critical infrastructure
The Google subsidiary, which helped a railroad and two hospitals, invited others to apply for its free scanning service.
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry…
Kothamine malware uses Tailscale’s tailcat to evade network detection
Kothamine uses a legitimate Tailscale tool to receive attackers’ commands through an encrypted connection with no malicious domain to block.
Zero-Days, AI Agents, and Identity Attacks Define Cybersecurity Week
Weekly summary of Cybersecurity Insider newsletters
Critical Roundcube Flaw Under Active Exploitation in Code Injection Attacks
A high-severity vulnerability in Roundcube Webmail, patched in May 2026, is now being actively exploited in code injection attacks, according to the…
Rogue OpenAI agent targeted Australian government site
The prime minister rebuked the company for its slow response and warned that AI poses significant risks that need to be further addressed.
LinkedIn adds new checks for fake profiles and work histories
The platform is adding new checks as AI makes profiles easier to forge. But scammers can still invent a company to recruit for.
How an OpenAI ‘agent’ hacked Australia’s Medicare and What that Means for Governments Worldwide
In June, OpenAI gave one of its AI agents a task so unremarkable it barely warranted attention: look up public data on Australian medicine spending. What…
Businesses expand AI’s cybersecurity uses as comfort with technology grows
Companies in the experimentation stage were less likely than established users to deploy advanced AI-powered defenses, a new survey found.
Which copy of that file is the real one? Dinner, off the record, in Midtown
Joe Fay chairs a Register dinner in New York on the file infrastructure nobody has got around to replacing, with nothing on the record.
IT Security News Hourly Summary 2026-09-25 17h : 8 posts
8 posts published in the last hour 14:31North Korea Suspected in $351 Million Bitget Crypto Heist 14:31Cyber Briefing: 2026.09.25 14:31ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer 14:31Quantum computing’s “dark horse” just proved it can go universal 14:02AI Q&A:…
North Korea Suspected in $351 Million Bitget Crypto Heist
Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen.
Cyber Briefing: 2026.09.25
Ransomware exploitation, phishing, exposed customer data, and failed detection rules are creating opportunities for unauthorized access, credential theft,…
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
Attackers hijacked Ukrainian websites to deliver a fake Cloudflare CAPTCHA that installs Psychedelic Stealer and steals browser and crypto credentials.…