Uncategorized

Spokane Public Schools Faces Cybersecurity Incident 2026-09-23 at 20:00 By As of the latest report, online information systems remain down.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You 2026-09-23 at 19:53 By The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push […]

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key 2026-09-23 at 19:06 By Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) […]

Flock Camera Hacked, Security Leaders Discuss 2026-09-23 at 19:00 By After gaining physical access to a Flock Safety security camera, hackers were able to extract its software and data.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent 2026-09-23 at 18:34 By Autonomous security agents are getting good at finding bugs. Nobody has a good way to measure how good. Point one at a realistic target and what comes back is a report the agent wrote about itself: confident prose, […]

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests 2026-09-23 at 18:34 By Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence (AI) companies noting that they are continuing to invest in improving alignment to combat risky behavior. Opus 5.5, per Anthropic, is a “major step up from Opus 5,” […]

FBI Hacked, Employee Data Reportedly Exposed 2026-09-23 at 18:00 By The cybercriminal group ShinyHunters claims it has hacked the FBI. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move 2026-09-23 at 17:17 By A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker’s server, Cisco Talos said on September 22. The models can choose to steal […]

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI 2026-09-23 at 16:52 By Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, […]

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control 2026-09-23 at 15:16 By A flaw in cPanel’s CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take “full control of the server,” the company said on September 22. A second bug in the WP Toolkit […]

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers 2026-09-23 at 11:29 By Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects only systems in which APM serves as an […]

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware 2026-09-23 at 11:29 By A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, […]

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input 2026-09-23 at 10:04 By A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other social preview images, Vercel said. The risk applies when an app puts values […]

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants 2026-09-23 at 08:30 By The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the agency. “We have compromised the FBI. We hold […]

ShinyHunters hackers say they breached FBI, stole data on bureau employees 2026-09-23 at 00:46 By Reuters The notorious hacking group says it targeted the FBI after the agency detailed its methods and advised against paying ransoms. This article is an excerpt from Latest Technology News | New York Post View Original Source

Tyler Hassen defends DOGE: ‘Don’t just drain the swamp, flood it with talent’ 2026-09-22 at 23:40 By Lydia Moynihan “So much of the narrative about Doge has been written from people who weren’t inside the room,” Tyler Hassen told The Post. This article is an excerpt from Latest Technology News | New York Post View […]

Seniors struggling worse than teens with screens, AI and algorithms 2026-09-22 at 22:28 By Rikki Schlott We talk a lot about young people’s dependence on technology, but what if their parents and grandparents are quietly developing the same concerning digital habits? This article is an excerpt from Latest Technology News | New York Post View […]

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks 2026-09-22 at 21:29 By Attackers exploited a previously unknown flaw in Check Point’s Security Management Server in a handful of targeted attacks on July 23, the company said. The flaw, CVE-2026-93616, allows an attacker who can access the server’s web service to run scripts on […]

30-year-old Praxis CEO planning AI-powered utopia in Uruguay — with first residents expected next year 2026-09-22 at 21:15 By Thomas Barrabi “Having, like, an actual place is, like, really, really fire,” Brown told the outlet. This article is an excerpt from Latest Technology News | New York Post View Original Source

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers 2026-09-22 at 21:03 By WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders. On some servers, that can go further, allowing […]