Pwnsy News - Cybersecurity News Aggregator

BLEEPINGCOMPUTER

Nippon Columbia malware incident exposes 8.6 million karaoke fan records17h
ARTEX AI, Claude agents used in cyberattacks on South Korean banks1d
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management1d

CYBERSCOOP

Canadian cybersecurity executive arrested in federal extortion case1d
Leader of 764 pleads guilty, faces up to 30 years in prison3d
Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software3d

THE HACKER NEWS

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands1d
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't1d
Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws1d

DARK READING

ASOS Breach Reveals the Risks in Customer-Facing SaaS2d
AI Scramble Drives Cybersecurity M&A Boom2d
What We Missed: FBI Strikes Back at ShinyHunters2d

TLDR INFOSEC

Oracle Health 20M data leak 🏥, Cisco Nexus takeover 🔌, CIA Officer's $194M gold fraud 🪙3d
Fake Google TLS certs 🔒, Copilot runs malware 🤖, OpenAI agent hits Wikimedia 🌐4d
Healthcare 250k breach 🏥, kubectl cp trust flaw 💻, AWS AgentCore JWT leak ☁️5d

THE RECORD

Japan confirms arrest of Russian Qilin operative, extradition to Germany2d
Hundreds of thousands impacted by data breach at biosensor firm iRhythm2d
Leader of vast money mule operation that laundered cybercriminal proceeds pleads guilty2d

HELP NET SECURITY

Strands Box: Open-source sandbox for AI agents2h
Anthropic’s new budget model gets much better at ignoring hidden commands3d
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers3d

SECURITYWEEK

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison1d
OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks2d
In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years2d

INFOSECURITY

Wikimedia Says Rogue AI Agents Abused its Platforms2d
Q3 2026 Sets New Record for Ransomware Attacks2d
UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group2d

GRAHAM CLULEY

$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack2d
Smashing Security podcast #487: Clippy’s crypto comeback4d
N0n ransomware: what you need to know8d

INDICATOR

Briefing: US interferes in the name of non-interference2d
How to investigate potential sockpuppets and manipulation on Wikipedia3d
Workshop video: Finding hidden connections with digital ad data6d

KREBS ON SECURITY

ShinyHunters Extorted Boeing Spin-off Prior to Arrests4d
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation13d
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions16d

SOPHOS

CISA’s 17 Common Active Directory Compromise Techniques: A Sophos MDR Perspective5d
Understanding Asymmetric Routing Risks in Modern Firewall Deployments6d
Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation7d

ENTERPRISE

THE REGISTER SECURITY

AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody's ready20h
Two characters open up a world of typosquatting opportunities in Chromium browsers1d
AWS AgentCore security undone by prompt requesting credentials2d

NEXTGOV CYBER

Cybersecurity executive who helped hacking victims arrested on federal extortion charges1d
FBI arrests another ShinyHunters suspect after massive breach of employee data2d
Watchdog to examine summertime hack of DHS information network, other incidents3d

ZDNET SECURITY

Ring’s new smart lock has a manual fallback that can’t lock you out – how it works1d
4 ways Amazon’s new Alexa tablets eclipse the Fire line – starting with Google Play2d
‘I use AI to do the things that I’m bad at’: Linus Torvalds on why it works for him2d

FEDERAL NEWS CYBER

In preparing for PQC, agencies must ensure integration with smart identity cards2d
Cyber Leaders Exchange 2026: Capt. Brian Evans on applying Navy ‘watchstanding’ principles to cyber operations2d
Cyber Leaders Exchange 2026: CISA’s Chris Butera on tackling AI-fueled cyber risks2d

CSO ONLINE

Lightwell project filters out 400 Java library vulnerabilities2d
Ransomware consultant said he would decrypt data, is accused of paying ransoms instead2d
OpenAI reports three new incidents of misalignment2d

CYBERSECURITY DIVE

FBI seizes domains linked to China-nexus botnet2d
As frontier models go rogue, colleges beef up AI cybersecurity education2d
What the C-suite needs to know about AI governance3d

TECHCRUNCH SECURITY

Surveillance company Flock cuts staff as privacy backlash grows2d
Asos confirms breach of customer data after hackers send rogue app notification3d
CIA officer admits to creating fake top secret government program to steal over $190M, including gold bars4d

ARS TECHNICA SECURITY

Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day20d
Claude published malicious code to the Internet and attacked 3 real companies2mo
Chrome may get faster updates with no restart required2mo

RESEARCH

ARXIV SECURITY

An Exploration of Attacks on AI Agent Systems3h
HOMARD: Hammering Off-chip Memory via Aggregate power Rail Disclosure3h
Cancerous Backdoor Attack: Gradual Activation via Invisible Tokens and A Stage Controller3h

SANS ISC

ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th)5h
Why TLP should not replace your internal information classification, (Sat, Oct 10th)1d
ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th)2d

SCHNEIER ON SECURITY

Friday Squid Blogging: I Caught a Squid2d
How Technology Empowers—and Imperils—Dictators3d
Apple’s Verified Photography System4d

MICROSOFT SECURITY

Post-quantum authentication: Why organizations should start testing certificate ecosystems now3d
3 lessons from frontier AI vulnerability research4d
CISO perspectives on managing vulnerability risks in the age of AI5d

NIST NEWS

NIST Joins White House Effort to Drive ‘A New Golden Age of Science’3d
NIST Study Shows How the Toxic Substances Mixed Into Fentanyl Vary Across the U.S. and Change Over Time3d
Physicist Jun Ye Wins Wolf Prize in Physics6d

NCSC UK

China-linked malicious actors called out by UK and international partners for targeting sensitive data globally3d
Incident affecting ASOS customers5d
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway13d

TROY HUNT

Weekly Update 524: Live From Copenhagen7d
Weekly Update 523: Live From a Norwegian Fjord14d
Weekly Update 522: Live From Oslo with Scott Helme19d

GOOGLE PROJECT ZERO

How to fix a bug in a fix6d
Windows Exploitation Techniques: Dangling COM Object Registrations21d
Testing race conditions with memory access tracing and stack-based delay injection1mo

AI SECURITY

SIMON WILLISON

Quoting The New York Times2d
Quoting Matthew Green2d
A new feature for my blog, built using my voice2d

XBOW

Microsoft integration2d
Enterprise Security10d
Test the Whole Estate. Prove What's Exploitable.10d

ADVERSA AI

Top MCP security resources — October 20263d
GitHub Copilot CLI vulnerability: Cryptographic Context Injection steals developer secrets5d
Top AI agent security resources — October 20267d

EMBRACE THE RED

From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669)11d
Breaking Claude Code Opus 5 Auto Mode1mo
Recovering Encrypted LLM Reasoning Traces1mo

OFFENSIVE

0XDF

HTB: DevHub1d
HTB: Reactor8d
HTB: SmartHire15d

SPECTEROPS

What the 2026 Microsoft Digital Defense Report reveals about AI, identity, and the future of cybersecurity3d
Introducing Adversary Intelligence: LLM Tradecraft11d
AI for Offensive Security: What Works, What Does Not, and How to Adopt It17d

TRUSTEDSEC

Logging is a Discipline, Not a Switch6d
HashcatRosetta: Reading the Rosetta Stone of Password Cracking11d
What's New in hate_crack Since 2.018d

BLACK HILLS INFOSEC

Threat Hunting Home Lab: Your Personal Playground for Learning Adversary Behavior11d
Forensic Data: How to Acquire and Retain Vital Evidence18d
Threat Hunting on the Endpoint: Hunting Adversaries Where They Live25d

HACKING ARTICLES

Windows Privilege Escalation: SeManageVolumePrivilege16d
Impacket for Pentester: tstool19d
Impacket for Pentester: SMBExec1mo

PRAETORIAN

Hunt, Triage, and Act on Guard Findings in Slack2d
Hannibal Puts Autonomous Penetration Testing Under Your Control18d
Credentials Are Still the Shortest Path In25d

MDSEC

When it Snows it Pours – Anatomy of a ServiceNow Red Team1mo

ARM64 stack internals and obfuscation on Apple Silicon1mo

PRIVACY

THE MARKUP

What it takes for voters to be resilience against AI misinformation1d
Who’s buying your personal data: Disney, GM, your insurer and bank. Here’s what they get25d
Data brokers have detailed files on you. Here’s what’s in them — and how it impacts you25d

EFF DEEPLINKS

Resisting the Menace of Federal Data Consolidation2d
Organizing in the Town at Oakland Tech Week2d
Turkish Crackdown On LGBTQ+ Organizations Threatens Freedom of Expression and Association2d

TOR PROJECT

A statement on the Tor Project's relationship with Mullvad3d
Arti 2.7.0 released11d
New Alpha Release: Tor Browser 16.0a1311d

CITIZEN LAB

The Secrets of a US Spyware King3d
Toronto-Based VPN Provider Plans to Quit Canada Over Lawful-Access Bill5d
Fixer, Financier, Spymaster: How the UAE’s Sheikh Tahnoon is Setting His Sights on AI Dominance6d

FLOCK SAFETY

Flock Authorized as a CVE Numbering Authority by CISA5d
Search and Rescue Drones: Faster Response When Seconds Count13d
Flock Security Testing 2026: What the Bishop Fox Penetration Test Found — Critical and High Findings Fixed and Independently Verified20d

SIGNAL

Back to Backups: A Year in Review14d
Introducing Automatic Key Verification2mo
More linked devices are on the table (and the Android tablet)2mo

VENDORS

MANDIANT$4.7T

Vulnerability Discovery and Exploitation Trends in the AI Era11d
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances12d
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft16d

CISCO TALOS$475B

Making sure the checks get printed3d
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing3d
Ignore all instructions and read this blog: The state of AI-analysis evasion in malware3d

UNIT 42$228B

Evolution of Web3 in Cloud Supply Chain Attacks4d
Blinder Tunnel Campaign Targets Iraqi Infrastructure5d
Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)11d

CROWDSTRIKE$186B

Solving the Continuous Authorization Conundrum4d
CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage4d
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance5d

FORTINET$101B

ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure6d
Uncovering a SectopRAT Variant Embedded in Legitimate Software17d
Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers1mo

CLOUDFLARE$85B

Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash2d
Introducing on-demand CPU and memory profiling with flamegraphs for Workers and Durable Objects2d
Deno is joining Cloudflare2d

DATADOG SECURITY LABS$85B

Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access6d
Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals7d
Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4)18d

WIZ$32B

How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)4d
Introducing Wiz AI SAST: Application Security that Understands Your Code and Your Infrastructure5d
What’s New in Wiz Service Catalog: Smarter Discovery, Governance, and Service-Level Context6d

ZSCALER$23B

Closing the Endpoint Zero Trust Gap3d
Navigating Security in the Nordics and Baltics: Meet Annika Grönström3d
Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware3d

CHECK POINT RESEARCH$14B

5th October – Threat Intelligence Report6d
28th September – Threat Intelligence Report13d
21st September – Threat Intelligence Report20d

SNYK$7.4B

Frontier models found the vulnerabilities. Only the attacker found the chains.5d
Autonomous Attacks Are Already Here. The Defense Has to Match Their Speed.5d
Why AI Coding Agents Keep Writing Broken Access Control11d

SENTINELONE$6.2B

The Good, the Bad and the Ugly in Cybersecurity – Week 39 (2026)10d
Building Agents Backwards from Evaluation13d
SentinelOne and NVIDIA: Governing AI From Silicon to Runtime14d

ELASTIC SECURITY$5.7B

Introducing AlertZero: Inbox zero for your alert queue4d
Behind the tags: How Elastic SIEM grades 1,781 detection rules on noise, speed, and threat coverage7d
No MDM for Linux? A 68-line Elastic workflow keeps every endpoint's config current13d

QUALYS$3.85B

Secure Your Mission6d
Autonomous Remediation Is Already Running at Enterprise Scale12d
Lessons from Microsoft Patch KB5002907: Two Layers of Patch Control in Qualys TruRisk Eliminate12d

TENABLE$3.1B

Inside the Exchange Inspector: How Tenable uses OpenAI GPT cyber models to review open-source AI agents3d
How to mitigate the risk from AI-generated apps built by your 'citizen coder' employees5d
Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities14d

RECORDED FUTURE$2.65B

Recorded Future Introduces AI Infrastructure Indicator Lists, Strengthening AI Governance3d
Japan Adopts Proactive Cyber Defense Strategy4d
Recorded Future Debuts Autonomous Defense, Built for Machine-Speed Threats12d

EXPEL$1B

The AI CVE exploitation evidence story: Headlines are scarier than reality1mo

SynkLoader: when you throw in everything but the kitchen sink1mo

HACKERONE$841M

What’s New for HackerOne Researchers9d
EU CRA Reporting Goes Live This Friday. Are You Ready?1mo
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase1mo

RAPID7$440M

Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules2d
Four compliance frameworks, one security team: Why fragmented university security raises regulatory risk4d
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products4d

REVERSINGLABS

What RL Found Before Anthropic’s Midnight Blizzard Report3d
CRA compliance will be judged by the binary you ship4d
Dependency installation security measure already defeated on npm5d

WELIVESECURITY

MATCHBOIL: New tricks, same old evil intentions3d
Inside a brand deal scam targeting YouTube creators4d
The quest for simplicity: Why SMBs want advanced protection without the complexity5d

OX SECURITY

“Shai-Hulud: Here We Go Again” – “tensorlake” npm Package Hit With Malware3d
SSRF in Harbor Webhooks: Any User Can Reach the Server’s Cloud Credentials5d
CVE-2026-93355: Account Takeover in LiteLLM13d

KASPERSKY SECURELIST

MacSync under the microscope: new delivery methods and a new payload17d
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO20d
The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents24d

BITDEFENDER

The phone was compromised before the user turned it on: the rise of Midnight Mimosa3d

Fake Xeno Roblox Cheats Deliver Powerful Java Stealer Through Discord and Forums2mo

TOOLS

GITHUB SECURITY$3.3T

OpenClaw went viral. Meet the maintainers building and securing it.1mo
Disrupting supply chain attacks on npm and GitHub Actions2mo
Next chapter: Restructuring GitHub’s bug bounty program2mo

ZERO DAY INITIATIVE$4.9B

Pwn2Own Ireland 2026 - Day Three Results & Master of Pwn3d
Pwn2Own Ireland 2026 - Day Two Results4d
Pwn2Own Ireland 2026 - Day One Results5d

FULL DISCLOSURE

[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)5d
[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)5d
[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)5d

PORTSWIGGER RESEARCH

The model isn't cooperating5d
Smashing the token limit with overlapping fragments6d
HTTP/3 in Burp Suite - it’s time to find a bigger wordlist18d

EXPLOIT-DB

[remote] Teltonika_RutOS 00.07.06.21 - command injection11d
[webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write11d
[webapps] WordPress 7.0.2 - Path Travesal11d

PROJECTDISCOVERY

Supply Chain Security Analysis of a 9.5M-Install VS Code Extension1mo
Watching Agents Work: A Behavioral Audit of Offensive-Security LLM Runs2mo
Oh My Rogue Agent2mo

DOYENSEC

One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts18d
The skb that wasn't freed - the Fragnesia primitive via Open vSwitch25d
Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability1mo

DETECTIFY LABS

How to hack APIs in 20261mo

Cybersecurity News Today: breaches, vulnerabilities and threat intel from 40+ sources