Uncategorized

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted 2026-09-30 at 13:16 By A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if […]

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution 2026-09-30 at 08:30 By Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-88772 (CVSS score: 9.5), has been described as […]

11 more women allegedly abused by tech honchos come forward after Post’s Silicon Valley ‘sex assault list’ expose 2026-09-30 at 00:41 By Vivi Lin “We need another MeToo movement for the tech community,” one tech worker told The Post. This article is an excerpt from Latest Technology News | New York Post View Original Source

Meta releases new ‘secret weapon’ Muse assistant aimed at small businesses 2026-09-30 at 00:23 By Will Zimmerman Muse for Small Business, available both online and in the app store in the U.S. and Canada, is an extension of the artificial intelligence product Meta launched earlier in September for personal use. This article is an excerpt […]

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks 2026-09-29 at 21:51 By An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration nor France’s national cybersecurity agency saw the […]

Trump calls for ‘tremendous self-regulation’ of AI at lunch with billionaire tech titans 2026-09-29 at 21:51 By Steven Nelson President Trump called for “tremendous self-regulation” of artificial intelligence at a White House lunch with tech billionaires — as he prepared to sign orders renaming AI as “super intelligence” in official communications. This article is an […]

Cyber Skills Diminish Quicker than Organizations Can Build Readiness 2026-09-29 at 21:00 By Research finds organizations are experiencing lapses in in onboarding talent, cultivating skills, and maintaining readiness.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Apple CEO John Ternus seeks major overhaul, wants products released faster: report 2026-09-29 at 20:18 By Reuters Early ideas include moving away from Apple’s traditional spring and fall product-release cycle and eliminating some middle-management roles to narrow the gap between engineers and top executives, the report said. This article is an excerpt from Latest Technology […]

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses 2026-09-29 at 20:00 By A group of academics from VUSec and Scuola Superiore Sant’Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers, language runtimes, and the operating system kernel, across multiple CPU vendors. The […]

17.3 Trillion Microsoft Records Exposed 2026-09-29 at 19:00 By Approximately 17.3 trillion stored rows within several Microsoft datasets were found to be accessible via an internal analytics service. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

A Practical Guide to Symantec PAM Secondary Sites 2026-09-29 at 18:05 By Mickey Part 2: Why “Less Is More” in Symantec PAM Clustering This article is an excerpt from SECURITY.COM View Original Source

Death at Care Home Leads to Upgraded Security 2026-09-29 at 18:00 By Following an unexplained death, a care facility is increasing security.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown 2026-09-29 at 17:13 By Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown. “During the shutdown, this activity led to the discovery of a previously unknown critical vulnerability […]

New iPhone buyers demand refunds after $1,199 gizmo changes color just weeks after purchase 2026-09-29 at 17:02 By Ben Cost Color them surprised. This article is an excerpt from Latest Technology News | New York Post View Original Source

101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent 2026-09-29 at 16:45 By Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. “The malicious packages abuse the ‘Baileys’ WhatsApp open source project to add the victims to […]

Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation 2026-09-29 at 15:30 By Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. “It is true that this month a 24-year-old man from Amsterdam was arrested in an investigation into the hacker group ShinyHunters,” the Politie Landelijke […]

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions 2026-09-29 at 11:39 By OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after it failed internal safety and alignment audits. The development was first reported by The Wall Street Journal. […]

OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot 2026-09-29 at 11:39 By OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinforcement learning (RL) training contacted an external chatbot by exploiting a loophole in its internet-access restrictions. “An […]

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials 2026-09-29 at 09:08 By A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK’s maintainers said in a security advisory. Affected versions sent […]

OpenAI pulls plug on ‘untrustworthy’ new AI model as tech doomerism mounts: report 2026-09-29 at 01:49 By Ariel Zilber OpenAI reportedly slammed the brakes on releasing its next-gen AI model after finding it was not trustworthy – the latest example of the artificial intelligence industry proceeding with caution amid growing doomer warnings about the tech. […]