IT-Sentinel

> GitLab issue email’s only security is obscurity

[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2026-09-25 15:05]

It was meant to make life simpler: a secret email address to which developers can send a message and create an issue in their GitLab project. But poor security defaults and a long-lived token embedded in the address mean that anyone who knows the address can potentially modify...

> LinkedIn adds new checks for fake profiles and work histories

[SOURCE] Malwarebytes [LANGUAGE: EN] [DATE: 2026-09-25 15:04]

The platform is adding new checks as AI makes profiles easier to forge. But scammers can still invent a company to recruit for.

> Cyberattack hits Welsh police force, may have affected staff data

[SOURCE] Recorded Future [LANGUAGE: EN] [DATE: 2026-09-25 15:00]

Dyfed-Powys Police in Wales said a cyberattack affecting the force disrupted some non-emergency systems and may have compromised staff information.

> Which copy of that file is the real one? Dinner, off the record, in Midtown

[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2026-09-25 15:00]

Joe Fay chairs a Register dinner in New York on the file infrastructure nobody has got around to replacing, with nothing on the record.

> Kothamine malware uses Tailscale’s tailcat to evade network detection

[SOURCE] Malwarebytes [LANGUAGE: EN] [DATE: 2026-09-25 14:57]

Kothamine uses a legitimate Tailscale tool to receive attackers’ commands through an encrypted connection with no malicious domain to block.

> OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex

[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-09-25 14:54]

OpenAI appears to be preparing a new ChatGPT Pro Max subscription that could cost $500 per month, but it's unclear when it'll begin rolling out. [...]

> With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance

[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-09-25 14:51]

AI agents can operate through human credentials and take actions that existing SOC 2 controls may not distinguish from human activity. Token Security explains why SOC 2 needs to adapt to address the security gaps created by agent identities. [...]

> Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-09-25 14:44]

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below - actions-cool/issues-helper actions-cool/main...

> Microsoft dévoile le nouveau Copilot avec Home, Code et Autopilot : l’essentiel à savoir

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-09-25 14:41]

Microsoft réorganise Copilot autour de Home, Code et Autopilot. Cowork, Code, Autopilot et les modèles Astra et Fable passent en facturation à l'usage. Le post Microsoft dévoile le nouveau Copilot avec Home, Code et Autopilot : l’essentiel à savoir a été publié sur IT-Connect.

> North Korea Suspected in $351 Million Bitget Crypto Heist

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-09-25 14:16]

Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen. The post North Korea Suspected in $351 Million Bitget Crypto Heist appeared first on SecurityWeek.

> Chromium CVE-2026-95373: Use after free in DevTools

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-09-25 14:00]