Uncategorized

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE 2026-09-22 at 14:17 By A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa. The flaw, […]

SES Complete Is a Certified Leader in the AV-Comparatives EPR Test 2026-09-22 at 13:00 By Mark Kennedy When put to the test, SES Complete proved robust prevention and response block 100% of threats This article is an excerpt from SECURITY.COM View Original Source

SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing 2026-09-22 at 10:52 By The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. “SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.exe to execute malicious […]

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor 2026-09-22 at 09:33 By Malware already running on a Mac can quietly take over Meta’s Muse assistant and use the broad access its owner granted the app, security researcher Patrick Wardle has shown in a proof-of-concept released on September 21. It works […]

WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session 2026-09-22 at 09:03 By A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the site’s server. […]

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access 2026-09-22 at 08:31 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-7273 (CVSS score: […]

Silicon Valley’s AI accelerationists fighting back against ‘mind virus’ taking over big labs 2026-09-22 at 02:01 By Vivi Lin Physicists are warning against Effective Altruists spreading a “mind virus” over Silicon Valley, promoting a “doomer” view of Artificial Intelligence. Calls to regulate AI have been growing from industry leaders Anthropic and OpenAI, who warn the […]

New study finds startling flaw if AI starts choosing who gets organ donations: ‘Diverge from human values’ 2026-09-21 at 22:10 By Rachel Sacks The findings raise questions about AI making life-and-death medical decisions. This article is an excerpt from Latest Technology News | New York Post View Original Source

Treasury Sec. Scott Bessent says OpenAI bears ‘responsibility’ for Hugging Face hack 2026-09-21 at 21:22 By Thomas Barrabi “The Hugging Face incident, that is the responsibility of the OpenAI management, not a bunch of agents,” Bessent said during an appearance on CNBC’s “Squawk Box” on Monday. This article is an excerpt from Latest Technology News […]

OpenAI, Anthropic held talks to ‘stress-test’ each other’s AI models: report 2026-09-21 at 20:51 By Thomas Barrabi The two sides began negotiations a “legally binding deal” earlier this year – before high-profile incidents such as OpenAI’s accidental hack of rival firm Hugging Face occurred, The Information reported, citing a person with direct knowledge of the […]

AI ‘hacker houses’ in Silicon Valley out of control with destructive parties, sexual harassment claims: report 2026-09-21 at 20:46 By Taylor Herzlich At some of these modern-day tech frats, entrepreneurs pay up to $10,000 a month in rent for a room, according to a report. This article is an excerpt from Latest Technology News | […]

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR 2026-09-21 at 20:31 By A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs […]

Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto 2026-09-21 at 20:19 By The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and siphoned funds or account credentials from over 7,000 cryptocurrency wallets, according to a new joint cybersecurity advisory. The […]

NYC’s Founders School ‘guarantees’ students will graduate with $1M businesses 2026-09-21 at 20:04 By Will Zimmerman A new high school promises big success for entrepreneurial teens — or you get your tuition back. This article is an excerpt from Latest Technology News | New York Post View Original Source

Google Fined €403 Million Over GDPR Violations Tied to Location Data 2026-09-21 at 19:57 By Google has been fined €403 million for breaking the EU’s data protection law, the GDPR, in the way three of its features handled people’s location data from May 2018 to February 2020. Ireland’s Data Protection Commission (DPC), Google’s lead regulator in the […]

A Background Check Is Only as Reliable as the Identity Behind It 2026-09-21 at 19:00 By Before asking whether someone’s history makes them suitable for a role, employers need to be confident that the person applying, interviewing, and ultimately joining the organization is who they claim to be. This article is an excerpt from Subscribe […]

US pitches China on AI notification deal ahead of UN General Asssembly 2026-09-21 at 17:54 By Ryan King Negotators for the US and China reached a deal on an alert system between the two countries for artifical intelligence, but punted on a longer-term extension of the fragile trade truce, which is set to expire in […]

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks 2026-09-21 at 17:24 By A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people already trust: code that takes a bad turn, old payloads […]

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data 2026-09-21 at 17:15 By Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive data from compromised hosts. The backdoor “automatically harvests and exfiltrates business documents, watches the filesystem for new files in real time, […]

Is everyone Bricking their phones without you? The anti-FOMO (and anti-doomscroll) wellness craze 2026-09-21 at 13:59 By McKenzie Beard One of the hottest trends of the digital age is logging off — but it’s not as easy as you might think. This article is an excerpt from Latest Technology News | New York Post View […]