ICYMI: 2026-10-09
Latest Headlines
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
TP-Link Sued by Four More U.S. States Over Router Security and China Ties
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
ICE Agent at NYC Shooting Has History of Alleged Violence and Illegal Arrests
In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
Formula Predicts When AI Chatbots Are at Risk of Turning Bad
AnyDesk Linux Flaw Lets Remote Attackers Execute Code as Root Without Authentication
New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets
New Agentic AI Red Team Checklist Adds 222 Tests Across 20 Attack Categories
CastleStealer Malware Uses Browser Protection Bypass and Remote Shell to Expand Attacker Access
Cisco Talos Warns Autonomous AI Agents Could Turn Pentests Into Stealthy Red Team Attacks
Hackers Abuse Trusted Terraform Workflows to Infect Developer Systems With Cross-Platform Malware
Warden Stealer Spreads Through ClickFix, Malvertising, Cracked Software and Game Cheats
MATCHBOIL Malware Uses Cloudflare-Hidden C2 Servers to Deliver Backdoor Payloads
PoC Released for Telegram Desktop Flaw Enabling One-Click File Account Takeover
Top 10 Best Container Image Scanning Tools in 2026 [Ranked & Scored]
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
FBI arrests another suspected ShinyHunters hacker after agency breach
Germany arrests alleged core Qilin ransomware member after extradition
Max severity SonicWall SMA1000 flaw now exploited in attacks
Man admits to running network of 15,000 money mules for cybercriminals
Microsoft: Outdated Windows devices will stop receiving security updates
Citrix warns admins to patch new NetScaler RCE flaw immediately
– MTZ