Uncategorized

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent 2026-09-28 at 14:46 By Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that’s targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. “The implant installs the framework unchanged, then overwrites its SOUL.md persona […]

Email spam filters cost GOP fundraisers estimated $117M in donations last year: bombshell study 2026-09-28 at 13:45 By Thomas Barrabi The little-noticed analysis, published on July 7 by Cameron Ellis of the University of Iowa and Lars Powell of the University of Alabama, could reignite long-running complaints by Republicans who have accused Google and other […]

The Image That Isn’t—Stopping SVG-Borne Attacks 2026-09-28 at 13:45 By Lionel Payet What security teams need to know about the latest wave of SVG attacks This article is an excerpt from SECURITY.COM View Original Source

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally 2026-09-28 at 13:44 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerabilities are listed below – CVE-2026-88771 (CVSS score: […]

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources 2026-09-28 at 13:44 By The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor’s tradecraft. […]

AI companies have had ‘tens of thousands’ of potential safety incidents — some of which could be criminal: report 2026-09-28 at 01:36 By Ronny Reyes AI companies had tens of thousands of safety incidents in recent months during tests where the models were breaking all the rules, and potentially some laws, according to a new […]

AI could be used to kill 1 billion people, Bill Gates warns — as he calls for restrictions 2026-09-27 at 21:49 By Ronny Reyes Tech billionaire Bill Gates warned that artificial intelligence had the potential to kill a billion people in the wrong hands — as he joined the call to put safety restrictions on […]

Instagram has a new feature that’s bad news for creepers — and it’s got people vowing to quit the app 2026-09-27 at 19:49 By Andrea Palladino Instagram stalking is no longer private. Instagram has launched a new premium feature, Instagram Plus, for $3.99 a month—marketing the subscription as a way to “help you express yourself, […]

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation 2026-09-27 at 10:47 By Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, security firm watchTowr said on September 26. Citrix has not confirmed the flaws or published a […]

US jury says Apple owes record $5.7 billion in patent case against San Diego company 2026-09-27 at 04:46 By Reuters A US jury ruled that Apple owes Taction over $5.7 billion for infringing haptic technology patents in iPhones and Apple Watches. This article is an excerpt from Latest Technology News | New York Post View […]

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials 2026-09-26 at 23:05 By The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack […]

Convicted Theranos fraudster Elizabeth Holmes issues ominous threat from prison: ‘I’ll burn them’ 2026-09-26 at 22:21 By Titus Wu The disgraced tech founder remains in a federal prison for cheating investors. This article is an excerpt from Latest Technology News | New York Post View Original Source

Zero Trust for AI Agents Starts With Fixing Zero Visibility 2026-09-26 at 17:21 By The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a […]

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells 2026-09-26 at 17:21 By Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw […]

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack 2026-09-26 at 13:01 By Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack. “Kiteworks received credible threat intelligence from […]

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link 2026-09-26 at 12:55 By Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The cross-site request forgery […]

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild 2026-09-26 at 11:49 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows – […]

TikTok reaches $100M settlement with Alabama over youth addiction claims, ahead of landmark trial 2026-09-26 at 02:20 By Reuters It’s TikTok’s first deal with a state as it fights similar claims nationwide. This article is an excerpt from Latest Technology News | New York Post View Original Source

Kalshi subject to state gambling laws, appeals court finds — major blow to prediction market giant 2026-09-25 at 23:34 By Marc Vartabedian A US appeals court ruled Friday that Ohio and Tennessee can regulate Kalshi’s so-called event contracts under gambling laws, dealing the prediction market giant one of its biggest legal blows yet. This article […]