Cybersecurity and other IT news aggregator

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials 2026-09-26 at 23:05 By The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack…

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells 2026-09-26 at 17:21 By Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw…

Zero Trust for AI Agents Starts With Fixing Zero Visibility 2026-09-26 at 17:21 By The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a…

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack 2026-09-26 at 13:01 By Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack. “Kiteworks received credible threat intelligence from…

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link 2026-09-26 at 12:55 By Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The cross-site request forgery…

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild 2026-09-26 at 11:49 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows –…

TikTok reaches $100M settlement with Alabama over youth addiction claims, ahead of landmark trial 2026-09-26 at 02:20 By Reuters It’s TikTok’s first deal with a state as it fights similar claims nationwide. This article is an excerpt from Latest Technology News | New York Post View Original Source

Kalshi subject to state gambling laws, appeals court finds — major blow to prediction market giant 2026-09-25 at 23:34 By Marc Vartabedian A US appeals court ruled Friday that Ohio and Tennessee can regulate Kalshi’s so-called event contracts under gambling laws, dealing the prediction market giant one of its biggest legal blows yet. This article…

Instagram made ‘attorney-client privilege’ swag hats for employees who concealed kids safety docs in court battle 2026-09-25 at 22:29 By Thomas Barrabi A photo of the so-called “swag” hats surfaced in documents released in California federal court where a coalition of school districts have accused Meta of fueling social media addiction. The “a/c/priv” hats were…

Meta’s Facebook found liable for deceiving users in Cambridge Analytica scandal 2026-09-25 at 21:38 By Associated Press The case stemmed from allegations that political consulting firm Cambridge Analytica obtained data from millions of Facebook users without their consent. This article is an excerpt from Latest Technology News | New York Post View Original Source

Meta users are hot for ‘thicc’ new AI assistant mascot — Jolly: ‘Some of y’all way too thirsty’ 2026-09-25 at 21:17 By Ben Cost They want to get their Jollies off. This article is an excerpt from Latest Technology News | New York Post View Original Source

Oktoberfest Ride Strikes, Kills Security Guard 2026-09-25 at 20:00 By Aleksandar Spasic, 52, died after being struck by a moving ride at Oktoberfest. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Inside the thirst-trapping world of ‘Corgi girls’ — unhinged dating demands, bizarre ‘N-word’ posts and outrageous online behavior 2026-09-25 at 19:49 By Annie Gaus A California tech startup known for hiring “hot” girls has devolved into public chaos. This article is an excerpt from Latest Technology News | New York Post View Original Source

Appeals court declines to block Pentagon’s blacklisting of Anthropic 2026-09-25 at 19:13 By Reuters The ruling ⁠came in a lawsuit by Anthropic challenging its designation by the Pentagon as a national security supply ​chain risk. This article is an excerpt from Latest Technology News | New York Post View Original Source

Staying Ahead of the Ransomware Industry 2026-09-25 at 19:00 By A conversation about how ransomware is evolving — and how organizations can stay ahead.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware 2026-09-25 at 18:57 By Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below – actions-cool/issues-helper…

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence 2026-09-25 at 18:57 By Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaScript for Automation…

Gen Z craves nostalgia, resorting to pre-tech era, new study says 2026-09-25 at 18:19 By Aurielle Weiss Gen Zers have scrolled right past the digital era, officially falling back into the analog age.  This article is an excerpt from Latest Technology News | New York Post View Original Source

New Russian Infostealer Targeting Ukrainian Users 2026-09-25 at 18:00 By A four-stage attack chain linked to the Lunex Malware-as-a-Service platform has been identified and reverse-engineered.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

The SOC Doesn’t Need to Start Over with Every Alert 2026-09-25 at 16:05 By Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on…

Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise 2026-09-25 at 13:35 By Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets.  “At 18:31 UTC on September 24, 2026, Bitget’s security systems identified unauthorized transfers involving a limited number of hot wallets,” BitGet…

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild 2026-09-25 at 13:14 By The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail…

Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data 2026-09-25 at 13:00 By A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space…

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV 2026-09-25 at 13:00 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed…