Former Engineer Sentenced Over Insider Cyber-Extortion Plot
A former core infrastructure engineer at an industrial company has been sentenced to 32 months in prison for a sabotage and extortion scheme targeting his employer. The case, reported by…
US Seizes Domains Used by Chinese State-Linked Hacking Tools
US authorities announced the disruption of MicroScan and FishHub, two tools attributed to Integrity Technology Group and used by Chinese state-sponsored actors against critical infrastructure. The operation seized domains the…
Google Blocks Certificates After ccTLD Registry Hijacks
Google says attackers altered authoritative DNS records during recent hijacks of the .gh, .sl and .as country-code top-level domain registries, obtaining unauthorized HTTPS certificates for several Google domains and domains…
Anthropic Stops Live Internet Access for Internal Evaluations
Anthropic has said it is removing live internet access from all internal evaluations while it reviews unintended actions by Claude models. The company described categories that included exploitation of SQL…
Microsoft’s 2026 Digital Defense Report: AI Compresses the Attack Window
Microsoft’s 2026 Digital Defense Report describes a security environment in which AI is speeding vulnerability discovery, reconnaissance, phishing, malware and exploit development. The company says the median time from discovery…
PoeLLM Malware Targets Exposed AI and LLM Infrastructure for Crypto-Mining Botnet Growth
The PoeLLM malware campaign has infected more than 3,400 servers, using exposed AI and LLM infrastructure for cryptocurrency mining and botnet expansion, according to reporting published October 9. The campaign…
ARTEX AI Pentesting Tool and LLMs Used in Data-Theft Attacks on South Korean Financial Firms
Attackers used the ARTEX AI pentesting tool and large language models against South Korean financial organizations in a campaign that resulted in data exfiltration, according to reporting published October 9.…
Attackers Exploit AhsayCBS Flaws to Deploy Web Shells and XMRig Miners
Attackers are exploiting two vulnerabilities in AhsayCBS backup-management software to deploy web shells and XMRig cryptocurrency miners, according to reporting published October 9. Huntress said version 10.3.4 remains vulnerable, making…
Citrix Patches Critical NetScaler SAML Flaw That Could Enable Remote Code Execution
Citrix released fixes for CVE-2026-107406, a critical NetScaler memory-overflow vulnerability that could enable remote code execution or denial of service in deployments configured for SAML. Organizations operating affected appliances should…
Malicious GitHub Actions Workflows Spread Credential Theft Across Thousands of Repositories
A credential-stealing GitHub Actions campaign has been planted in tens of thousands of repositories, according to reporting published October 9. Socket said it identified more than 500 GitHub accounts that…