> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights significant developments in cybercrime and high-profile hacking incidents. Authorities have seized the domain of Virtualine, a prominent bulletproof hosting provider that facilitated cybercriminal activities, accounting for nearly 20% of illicit traffic tracked this year. Meanwhile, a new report suggests that Jared Kushner’s iPhone was allegedly hacked twice, involving both Dutch intelligence and Russian hackers, raising concerns about the security of personal devices among prominent figures. These events underscore the ongoing threats posed by organized cybercrime and the vulnerabilities of even high-profile individuals to sophisticated hacking attempts.
|
// AI-powered summary generated at 04:00
An AI compact built around capability, control, and continuity can ensure the country stays safe and secure while also leading the world in the technology.
The post The president has called for AI leadership. Here’s the mission. appeared first on CyberScoop.
Only 21% of industrial security leaders report a complete OT asset inventory, even as 88% call their programs mature.
The post Honeywell: OT Security Teams Embrace AI, but Autonomy Still Rare appeared first on SecurityWeek.
A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of the server," the company said on September 22.
AÂ second bug in the WP Toolkit plugin, used to install and manage WordPress sites, allows an account holder to change dat...
The extortion group says it stole sensitive data on FBI agents and job applicants, and wants the bureau to retract a warning about its tactics.
A total of 1073 firms fell victim to ransomware attacks globally in August, with the industrial sector the most affected, according to new NCC data
Comment sortir de l’échec CCNA ? Découvrez l’itinéraire de Damien Formip: méthode pratique, apprentissage actif et IA au service de la réussite.
Le post J’ai raté 3 fois le CCNA en formation intensive : l’histoire de Damien Soulages, fondateur de Formip a été publié sur IT-Connect.
Regulator wants to know whether parent Aylo did its homework before reopening the door to UK iPhone users
Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence (AI) companies noting that they are continuing to invest in improving alignment to combat risky behavior.
Opus 5.5, per Anthropic, is a "major step up from Opus 5," and "achieves the best scores of any model to...
Autonomous security agents are getting good at finding bugs. Nobody has a good way to measure how good. Point one at a realistic target and what comes back is a report the agent wrote about itself: confident prose, a list of findings, and no way to tell which of them happened. Someone with a securit...
The nine critical security defects could be exploited for arbitrary code execution and privilege escalation.
The post Adobe Patches Critical Flaws in Connect, AEM Forms appeared first on SecurityWeek.
The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.
The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek.
Microsoft warned that the September 2026 security updates may also break Always On VPN connections on some Windows 11 systems. [...]
A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst said in research published September 22.
The flaw, tracked as CVE-2026-80521 (CVSS score: 7.8), was fixed upstream on August 6, but Ubuntu has not sh...
New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training.”
Abstract: We discover a novel and surprising phenomenon of unintentional misalignment in reasoning language models (RLMs), which we call self-jailbreaking. Specifically, aft...
Microsoft, Coinbase and law enforcement took down EvilTokens, a phishing kit that compromised 12,000 inboxes through device-code phishing and AI. EvilTokens showed up in February 2026 and moved fast. Within months it had compromised more than 12,000 inboxes across over 10,000 organizations. Microsof...
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach The ShinyHunters extortion gang says it broke into FBI systems through a new, unpatched Oracle PeopleSoft zero-day. It claims it then moved into FBI-managed AWS GovCloud infrastructure and took 2 to 3TB of data on current and for...
The browser update resolves several critical-severity memory safety and memory corruption flaws.
The post Chrome 154 Patches 108 Vulnerabilities appeared first on SecurityWeek.
Check Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July 23, 2026. The company also confirmed that a pre-authentication remote code execution (RCE) vulnerability (CVE-2026-85102) in Check...
Debates over the plausibility of these doomsday scenarios have heated up since several executives endorsed slowing the technology’s development for safety reasons.
The post A Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at Risk appeared first on SecurityWeek.
OpenAI has expanded GPT-6 with the GPT-6 Sol and GPT-6 Luna models. Both are available in ChatGPT Work and Codex for Plus, Pro, Business, Enterprise, and Edu users. Free and Go users can access GPT-6 Luna in the desktop app. The models are not yet available in Chat. OpenAI API users can access them...