Cybersecurity news — Monday 28 September 2026

SANS ISC 22:35 UTC

Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS 26, macOS 26 and macOS 15 is already being exploited. iOS and macOS 27…

BleepingComputer 20:56 UTC

Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting some of its business systems. [...]

ZDNet Security 20:39 UTC

The first update to iOS 27 squashes a bug in which the iPhone 18 Pro and Pro Max would freeze or restart when you try to use Face ID.

BleepingComputer 20:31 UTC

Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week. [...]

BleepingComputer 19:49 UTC

Dutch police have confirmed that a 24-year-old Amsterdam man arrested earlier this month was detained as part of an investigation into the ShinyHunters hacking group. [...]

The Hacker News 19:18 UTC

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds…

BleepingComputer 18:50 UTC

Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens. [...]

The Hacker News 18:35 UTC

Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at…

CyberScoop Asia 18:22 UTC

Amid growing concerns from both the public and policymakers about cyberattacks involving advanced AI systems, NVIDIA has released a new open software security platform for AI agents. The Open Agent Safety Platform, according to NVIDIA…

The Hacker News 18:20 UTC

What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of…

The Hacker News 17:42 UTC

The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain…

The Hacker News 17:38 UTC

RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this…

SecurityWeek 17:30 UTC

The misuse and abuse of AI-generated voice is growing. Modulate’s intention is to allow real time detection and intervention. The post Modulate Raises $25 Million to Advance Deepfake Detection appeared first on SecurityWeek .

ZDNet Security 16:15 UTC

The new wired USB-C earbuds mix old-school elements with modern audio features.

BleepingComputer 15:49 UTC

The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components. [...]

SecurityWeek 15:15 UTC

SecurityWeek seeks original, vendor-neutral presentations that help cybersecurity leaders navigate emerging threats, strengthen resilience, and address the strategic challenges facing today’s enterprise security programs. The post Call for…

Krebs on Security 15:08 UTC

Authorities in the Netherlands have arrested a 24-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters . In the days immediately following the suspect’s arrest…

CyberScoop Asia 14:47 UTC

Threat hunters and researchers are alarmed by what they’ve seen in data ShinyHunters claims it stole from the FBI . Limited samples of the stolen data contain FBI agents’ personal contact information, details on family members, office and…

ZDNet Security 14:40 UTC

Key Bluetooth technologies and upgrades to USB-C audio are coming to the company’s flagship over-ears.

The Hacker News 14:00 UTC

A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of week this was: forgotten assumptions turning into live attack surface…

BleepingComputer 14:00 UTC

Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking. SOCRadar examines the growing market for stolen AI logins and how…

Malwarebytes Labs 12:58 UTC

OpenAI’s latest containment failure adds to a pattern that may force the company to make an unpopular decision. The company has paused training, evaluation, and tool-enabled inference for its most capable models after an internal research…

SecurityWeek 12:36 UTC

Cameron John Wagenius was sentenced to 70 months in prison for stealing information from the wireless carriers. The post Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon appeared first on SecurityWeek .

NCSC UK 12:00 UTC

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.

The Hacker News 11:58 UTC

AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users. According…

The Hacker News 11:46 UTC

Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant…

SecurityWeek 11:29 UTC

The Medicaid IDs and other information of Medicaid and DC Healthcare Alliance beneficiaries were exposed. The post DC Health Agency Exposes 400,000 Beneficiary Records appeared first on SecurityWeek .

Schneier on Security 11:02 UTC

ArsTechnica is reporting on a “new” attack against RSA, one that bypasses factoring. First, this attack isn’t new. The original research is from 2007 . What is new is the implementation. Second, it is a forgery attack. It allows an…

SecurityWeek 10:56 UTC

The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The post Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign appeared first on SecurityWeek .

SecurityWeek 10:40 UTC

A New Mexico jury has found Facebook liable for deceiving users about privacy protections on the platform. The post New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections appeared first on SecurityWeek .

SecurityWeek 10:27 UTC

The platform combines open source software and a reference system design to keep AI agents within set boundaries. The post Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog appeared first on SecurityWeek .

SecurityWeek 09:44 UTC

The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised. The post Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability appeared first on SecurityWeek .

Malwarebytes Labs 09:28 UTC

BBC News reports it has seen samples of stolen FBI agents’ medical examinations. The “fitness-for-work” reports identify FBI agents by name and address, and reveal even more personal details. They include blood and urine test results and…

BleepingComputer 09:25 UTC

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million. [...]

The Hacker News 09:08 UTC

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has…

BleepingComputer 07:30 UTC

A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024. [...]

SecurityWeek 07:29 UTC

Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772. The post Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug appeared first on SecurityWeek .

The Hacker News 07:21 UTC

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The…

Malwarebytes Labs 07:01 UTC

Last week on Malwarebytes Labs: LinkedIn adds new checks for fake profiles and work histories Kothamine malware uses Tailscale’s tailcat to evade network detection Criminals turn placeholder domain into ClickFix trap That shipping rebate…

BleepingComputer 06:24 UTC

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. [...]

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31494v1 Announce Type: new Abstract: Federated Learning (FL) allows devices with private data to collaborate in training a shared model. We present a next-generation FL system based on Trusted Execution Environments (TEEs) that…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31247v1 Announce Type: cross Abstract: Novel view synthesis (NVS) models can produce realistic new views of the same scene from different viewpoints. However, these generated views are not always geometrically consistent with…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30345v1 Announce Type: new Abstract: Cloud-security investigation is dominated by population tasks: which identities can read a data store, how many resources fail a control, which assets are reachable from another account…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30729v1 Announce Type: new Abstract: Intrusion detectors for small Internet-of-Things (IoT) devices are usually compressed by pruning and judged by overall accuracy. We show that this hides a severe class-level failure, find its…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30830v1 Announce Type: new Abstract: LLM agents can produce harmful effects through sequences of ordinary operations. Judging such actions requires establishing both the authority that permits them and the origin of the data…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30980v1 Announce Type: new Abstract: Text-to-image diffusion models enable data-efficient "mimicry" attacks, wherein adversaries fine-tune the model on a handful of public photos to synthesize convincing forgeries of a target…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30997v1 Announce Type: new Abstract: Passive image provenance asks whether pixels alone can reveal where an image came from: a human, an aggregate AI class, or a particular generator. This becomes a robustness problem once a…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31142v1 Announce Type: new Abstract: Models trained with reinforcement learning for calibrated decisions (RLCD), such as Jev, answer a typed question about an input, the state, with a probability, a choice, or a score, and…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31310v1 Announce Type: new Abstract: Certified defenses that incorporate differential privacy have proven effective on Convolutional Neural Networks (CNNs), furnishing rigorous robustness guarantees against norm-bounded…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30581v1 Announce Type: cross Abstract: Encrypted training relies on keeping server-side updates low-degree. This constraint traditionally excludes models whose weights inhabit a compact Lie group (notably variational quantum…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31110v1 Announce Type: cross Abstract: Large language models are increasingly used as high-level planners for mobile robots, robot manipulators, and autonomous vehicles. Recent studies show that these systems can be influenced…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31154v1 Announce Type: cross Abstract: Recent advances in text-to-image (T2I) generation have substantially improved visual synthesis, but have also raised increasing safety concerns due to their potential to generate harmful or…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2506.07034v2 Announce Type: replace Abstract: Arm Confidential Compute Architecture (CCA) provides hardware primitives for confidential computing, but its standard CVM-based deployment model still isolates software only at the VM…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2607.26574v3 Announce Type: replace Abstract: Safety classifiers ("guards") are the dominant black-box defense for vision-language models, yet a guard judges an input's surface form, not its meaning: a harmful request re-encoded as…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2607.26639v2 Announce Type: replace Abstract: Best-of-N jailbreaking spends a query budget on surface variation, scrambling and recasing a request until one draw lands. We ask what a budget buys when its variance is moved into a…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2505.14368v3 Announce Type: replace Abstract: Recent studies demonstrate that Large Language Models (LLMs) are vulnerable to attacks that generate harmful or sensitive outputs. As open-source LLMs are increasingly adopted in…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30683v1 Announce Type: new Abstract: Phishing remains one of the most pervasive threats to Internet users, and email remains its predominant delivery channel. Email content is the attack surface of phishing: it is what the…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30719v1 Announce Type: new Abstract: Contemporary on-chain artificial intelligence (AI) encounters an intractable Von Neumann memory and latency wall. Storing static floating-point neural weight matrices inside Ethereum Virtual…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30909v1 Announce Type: new Abstract: Machine unlearning aims to remove target influence while preserving other capabilities. This survey compares methods, benchmarks, and evidence across large language models and systems using…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31558v1 Announce Type: cross Abstract: Contrastive Language--Image Pretraining (CLIP) has emerged as a dominant vision backbone due to its strong transferability and zero-shot capabilities. However, recent studies reveal a…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2509.22796v2 Announce Type: replace Abstract: Open-source software projects are foundational to modern software ecosystems, with the Linux kernel standing out as a critical exemplar due to its ubiquity and complexity. Although…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30925v1 Announce Type: new Abstract: The Miranda signature scheme relies on masking a matrix code which disposes of a masked underlying structure, and the knowledge of which allows for efficient error decoding. We consider a…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30982v1 Announce Type: cross Abstract: Modern AI image generators are increasingly deployed as opaque APIs, where customers can query the deployed service, but cannot inspect model weights or architecture. This creates a…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2604.19657v3 Announce Type: replace Abstract: AI agents promise to serve as general-purpose personal assistants for their users, which requires them to have access to private user data (e.g., personal and financial information). This…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30325v1 Announce Type: cross Abstract: Agents are increasingly deployed with real autonomy in web application and network penetration testing, where a single out-of-scope action can breach a client's engagement boundary…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31032v1 Announce Type: cross Abstract: Existing text-to-video (T2V) jailbreak methods mainly seek more effective or stealthier attack candidates. In guarded T2V systems, however, video generation and security evaluation are…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2305.15394v3 Announce Type: replace-cross Abstract: Decision trees are interpretable models that are well-suited to non-linear learning problems. Much work has been done on extending decision tree learning algorithms with…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31012v1 Announce Type: new Abstract: Existing approaches for understanding the detection logic of real-world antivirus (AV) software infer only binary malware/benign decisions from black-box queries, providing limited insight…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.14195v2 Announce Type: replace Abstract: A secure and privacy-preserving identity verification process is essential for digital ecosys- tems. Current eKYC frameworks that rely on Zero-Knowledge Proofs (ZKPs) face high…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30805v1 Announce Type: new Abstract: Industrial control system (ICS) threats documented for one plant can express cyber-physical effects relevant to another, but semantic similarity alone does not establish whether those effects…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31003v1 Announce Type: new Abstract: Machine-learning (ML)-based malware detectors are commonly trained using labels obtained from antivirus (AV) engines and aggregation services (e.g., VirusTotal). This practice assumes…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31398v1 Announce Type: new Abstract: When a card number is compromised, an attacker may search for active numbers sharing its prefix. An issuer might respond by reissuing cards from heavily populated prefixes into less populated…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31594v1 Announce Type: new Abstract: The Manufacturer Usage Description (MUD) standard allows IoT manufacturers to define expected network behaviors in a MUD file. This file can be translated into enforceable access-control…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2608.11418v2 Announce Type: replace Abstract: Provenance aims to capture the origins, transformations, and interactions of system objects for security and forensic applications. Existing provenance capture approaches still face major…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30509v1 Announce Type: cross Abstract: Slashing is commonly argued to secure proof-of-stake blockchains by confiscating the stake of misbehaving validators. The usual justification is that, without slashing, validators can…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31256v1 Announce Type: cross Abstract: Inspired by the planted clique problem for random graphs, we introduce the planted totally-isotropic space problem for random tensors as follows. Let $U\cong \mathbb{F}_q^n$ and $W\cong…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30094v2 Announce Type: replace-cross Abstract: Large language models increasingly operate as persistent assistants in user-facing, shared-session, and tool-augmented settings. When users disclose sensitive information during an…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30824v1 Announce Type: new Abstract: The prospect of fully autonomous transactional agents did not appear on the horizon until the advent of high capability language models. With such models, the operational benefits of adaptive…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.07360v3 Announce Type: replace-cross Abstract: AI coding agents rely on repository instructions, skills, hooks, tool-server declarations, and subagent definitions. These artifacts distribute both behavior and access to…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31519v1 Announce Type: new Abstract: The Simultaneous Authentication of Equals (SAE) protocol, introduced in WPA3, provides robust protection against offline dictionary attacks against a network Pre-Shared Key (PSK) and also…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2509.22873v3 Announce Type: replace Abstract: Federated learning (FL) enables privacy-preserving model training by keeping data decentralized. However, it remains vulnerable to label-flipping attacks, where malicious clients…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.30657v1 Announce Type: new Abstract: Large language model email assistants are particularly vulnerable to indirect prompt injection because untrusted email content can be retrieved into the model context and influence subsequent…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31039v1 Announce Type: new Abstract: The rise of autonomous AI agents equipped with tools has introduced significant security risks, ranging from unintended tool misuse to adversarial manipulation through Indirect Prompt…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31087v1 Announce Type: new Abstract: Cryptographic hash functions over integers modulo a prime play a decisive role in the efficiency and security of proof systems for computational integrity. Early designs focused on compact…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31379v1 Announce Type: cross Abstract: Private and encrypted mempools hide pending transactions to stop sandwich attacks and other forms of maximal extractable value (MEV), but what they hide is rarely everything: a…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2608.09249v2 Announce Type: replace Abstract: Privacy-preserving payment systems are well understood, yet concerns about their misuse for financial crime have led to only limited adoption in regulated settings such as central bank…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.26174v2 Announce Type: replace Abstract: We show that aligned vision-language models also condition refusal on a property of a request's form: whether an image is attached, holding everything the request asks fixed. Attaching a…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.31262v1 Announce Type: new Abstract: Cross-client duplicate data in large language model training corpora degrades the efficiency of federated learning (FL) while exacerbating model memorization and privacy risks…