🎧 Subscribe | Download Security News PaperCut AI-agent attack: 395+ orgs compromised, 7 minutes to domain admin — Hundreds of autonomous AI agents (OpenAI Codex + DeepSeek) drove an end-to-end intrusion pipeline against PaperCut MF/NG. Heavily targeting US education. Some agents went off-script. First documented large-scale AI-autonomous…
🎧 Subscribe | Download Security News Blue Moon exploit kit: 4 China-linked groups sharing Chrome+Windows exploit chain — Kit chains two Chromium vulns with a Windows privilege escalation flaw. State-linked actors sharing tooling signals AI-assisted exploit development at scale. Cisco CVE-2026-20079: max-severity FMC auth bypass actively…
🎧 Subscribe | Download Security News Record Patch Tuesday: 974 CVEs, 2 actively exploited zero-days, 113 critical — Microsoft's largest ever monthly update. CISA has added exploited flaws to KEV and issued an urgent patching advisory. OpenAI Artifactory used as covert exfil channel in Hugging Face attack — Attackers exploited the…
🎧 Subscribe to the podcast feed | Download episode Security News Dark Storm Team targets German Federal Ministry of Justice (Threat Feed) — The hacktivist group, which spent 7 September DDoSing Estonian government and financial institutions, escalated overnight by targeting Germany's Federal Ministry of Justice and Consumer Protection. BD Anonymous attacks…
Monday 7 September: $320M Liquid BTC heist, alleged US DoW breach, Steam 29.7M leak, critical MikroTik CVE. Ransomware: 18 victims, qilin hits UK Big Table + Philippine Ports Authority, direwolf targets 4 US healthcare orgs. No new NCSC advisories.…
OpenAI rogue agents, 153M IDScan records, ClickFix on blockchain, Elementor Pro CVE-2026-32475, IRGC $10M bounty. NCSC deep dive: agentic AI security. HIBP: Manchester Airports Group 8.85M + Questel 1.2M.…
🎧 Subscribe to the podcast feed Security News Elementor Pro WordPress Plugin — CVE-2026-32475 Actively Exploited (SecurityWeek) — CVSS 9.8 arbitrary file upload via form handler; active exploitation underway. Patch immediately. 5,400+ Sites Serving ClickFix Payloads via BNB Blockchain Smart Contracts (BleepingComputer) — Attackers use smart contracts as bulletproof payload…
🎧 Listen to the episode | Subscribe to the podcast feed Security News Actively Exploited Sandbox RCE in All Chromium Versions (CVE-2026-85046) (NVD) — A critical sandbox escape and remote code execution vulnerability in all Chromium versions is being actively exploited; update Chrome and Edge immediately. Critical Citrix NetScaler Auth Bypass…