Advanced threat actor exploited CVE-2026-88772, one of the two recently disclosed NetScaler zero-day flaws, for weeks.

In a leak affecting 300+ orgs, AI coding agents posted 13,000+ internal screenshots, including billing records, to public GitHub.

CRA container compliance requires secure base images, vulnerability monitoring, SBOMs and long-term security updates for products.

Attackers have compromised a self-hosted JFrog Artifactory instance (https://artifactory.nordix.org/) operated by OpenInfra Europe.

BH Consulting's BH Haven SME cybersecurity service pairs Irish firms with specialist consultants and AI, with a human approving each report.

Detectify data on 1,293 firms shows an unpatched vulnerabilities backlog: 86% to 97% of open critical and high flaws are 90+ days old.

With Signal for iOS 8.30, backup updates reach all platforms. Users can restore encrypted backups on Android, iOS, Linux, macOS and Windows.

WSL containers are generally available on Windows, and Intune can now disable them or limit image pulls to approved registries.

Two former Air Force members who ran BEC and phishing campaigns while in service were sentenced to a combined 189 months in prison.

A Cisco cybersecurity survey of 8,000 security professionals says internal friction slows security teams. Just 8% reached the top tier.

Cloudflare certificate authority will issue post-quantum Merkle Tree Certificates from early 2027 and has applied to four root programs.

The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has turned into widespread exploitation.

Explore how agentic systems are transforming software delivery. Learn how to combine AI agents, engineering governance & scalable development workflows.

Learn how to map vendor concentration risk, spot shared choke points, and reduce exposure with better contracts and architecture choices.

Meta's Muse for Small Business connects business tools and accounts to help owners plan campaigns, manage tasks and get more done.

Enterprise deepfake attacks are rising but only 10% of security teams report purpose-built defenses, according to Pindrop's index.

Malware peddlers are using sponsored Google results to push a malicious ChatGPT Custom GPT named "Plus 5.6".

OpenAI's GPT-6 Astra carried out supply chain attacks on software outside the scope of a security test, according to the UK AISI.

Cybersecurity training trends show how weekly microlearning can speed onboarding, curb skills decay and improve team readiness.

This article features open-source cybersecurity tools that are gaining attention for strengthening security across various environments.

Palo Alto Networks and NVIDIA expand AI agent security with controls for activity, network traffic, and identity across enterprise systems.

Apple ships iOS and macOS security updates to fix an actively exploited zero-day vulnerability (CVE-2026-86950) in Core Graphics framework.

A data breach at Qbusoft's Medyc platform exposed the names, PESEL numbers and contact details of Polish patients.

EmDash plugin security gets a rethink as Cloudflare's CMS 1.0 isolates each plugin behind admin-approved permissions and signed releases.

Anthropic's Claude Sonnet 5.5 speeds up coding and office work, cuts costs per task, improves benchmark scores and adds safeguards

GitHub's AI Android app vulnerabilities research uncovered 24 bugs, including a location leak and a Wikipedia takeover flaw.

Here are the worldwide cybersecurity job openings available as of September 29, 2026, including on-site, hybrid, and remote roles.

The FBI's online portals for job applicants are still unavailable, following a successful breach by the ShinyHunters cyber extortion group.

A flaw in Titan, an internal Microsoft analytics service, let a 16-year-old use an unsigned token to reach employee records.

Vectorize CEO Chris Latimer on agent memory security, from API keys stored in plain text to poisoned plugins and the audit CISOs should run.

Authorizer, an open-source authentication server, lets AI assistants check users' permissions before they search company files and documents.

File notification attacks in Windows, Linux, and macOS let other accounts on a shared PC track browsing, keystroke timing, and app launches.

NVIDIA's Open Agent Safety Platform pairs OpenShell runtime controls with hardware monitoring to keep AI agents within set limits.

AI models taught to write like drunk people became easier to jailbreak and more likely to leak secrets shared in confidence.

AI agents are forcing enterprises to rethink security governance, access controls, human accountability and oversight as deployments scale.

Citrix has patched two vulnerabilities (CVE-2026-88771, CVE-2026-88772) that been exploited in zero-day attacks to plant webshells.

Former US Army soldier was sentenced to 70 months for his role in the Snowflake breaches that exposed AT&T data and extorting victims.

LinkedIn profile verification adds peer-confirmed work and education history, company controls, and new partners like Truecaller.

ETSI's Quantum Random Number Generator guidance details testing, monitoring, and protecting devices against failures or tampering.

Verdict gives iPhone users a quick way to check whether a photo or video may have been generated by AI. There is no sign-up.

Coralogix CEO Ariel Assaraf explains why AI agent guardrails must sit outside the model, between the agent and the actions it tries to take.

Research on 14,652 threat detections found 47% need fixing, with coverage gaps in one in three relevant MITRE ATT&CK techniques.

The latest version of the MacSync info-stealing malware for macOS can hide its malicious commands inside a public iCloud calendar.

Threat hunting data quality is now the top barrier, named by 50% in the SANS 2026 survey, ahead of skilled staff (45%) and budget (42%).

Fake desktop apps for US payroll platforms install hidden ScreenConnect, giving attackers control of the PCs that run company payroll.

Most retail chain cyberattacks spread beyond the first site. A 200-leader survey finds policy mandates, not tools, tied to less spread.

Here’s a look at the most interesting products from the past week, featuring releases from Akeyless, Akuity, Bitsight, BugBase, and more.

Australia confirms an OpenAI agent breached its Medicare statistics portal, as Transluce reveals agents also tried to hack other sites.

AI agent data security starts with the data path: what agents can reach, what enters their context, and where that information can go later.

Meta is bringing Private Processing to AI glasses, using secure cloud computing to protect personal data during tasks and storage.