8+ hour, 8+ min ago   (311+ words) Microsoft has announced fixes for a record 974 CVEs in its September 2026 Patch Tuesday release. The number of flaws included in this month’s update shatters the previous record for Patch Tuesday, which was 570 CVEs in July 2026. The September CVE list spans…...

22+ hour, 46+ min ago   (454+ words) The rapid integration of AI-assisted coding tools has become a primary target for threat actors, a new report from Google Threat Intelligence Group (GTIG) has warned. This shift in software development practices has contributed to several large-scale software supply chain…...

1+ day, 20+ hour ago   (416+ words) The UK's National Cyber Security Centre (NCSC) has warned that employees using unapproved AI tools can expose corporate data and create security risks that organizations may struggle to detect and manage. The NCSC blog post, published on September 7, said shadow…...

1+ day, 22+ hour ago   (424+ words) Berlin’s state government has confirmed that the Rhysida ransomware gang has published a stolen dataset on the dark web, after it refused to pay the threat actor’s extortion demand. The State of Berlin said Rhysida had demanded 30 bitcoins, equivalent to…...

1+ day, 23+ hour ago   (377+ words) North Korea's Lazarus umbrella operates as six distinct cyber clusters, according to a new analysis of the country's offensive cyber capabilities. Sekoia and Kudelski Security said the organization reflected a broader effort by North Korea to distribute cyber operations across…...

2+ day, 1+ hour ago   (381+ words) Law firms are circling after reports emerged last week of a potential mega-breach of driver’s license information. At least four class-action lawsuits have been filed in the US District Court for the Eastern District of Louisiana against IDScan.net, the…...

2+ day, 2+ hour ago   (383+ words) A security researcher has published details of what appears to be a zero-day privilege escalation exploit in CrowdStrike. The individual, identified by their online moniker “Nightmare Eclipse” (aka Infinite Nightmare, MSNightmare) posted the details to GitHub on September 3. “FalconFlank is…...

5+ day, 7+ hour ago   (349+ words) OpenAI has pledged to spend $1bn on subsidizing access to its Daybreak cyber models for essential services across the US and around the world. The Daybreak for Frontline Defenders initiative will see OpenAI assist critical sectors implement its AI models into…...

5+ day, 8+ hour ago   (327+ words) The G7 is urging nations to accelerate the post-quantum cryptography (PQC) transition. As part of France's 2026 G7 Presidency, the French National Cybersecurity Agency (ANSSI), chairing the G7 Cybersecurity Working Group, has spearheaded a new call to action urging governments and organizations to begin…...

6+ day, 3+ hour ago   (405+ words) A phishing-as-a-service (PaaS) operation has continued generating new campaigns despite a coordinated takedown effort, with more than 700 new phishing pages identified within a month of the disruption. Group-IB said its researchers had tracked the Outsider Phishing Kit, operated by a…...