CyberNews 2026-09-27

Cybersecurity Headlines — September 27, 2026 ShinyHunters hackers expanded attacks on Oracle’s PeopleSoft, Google says — CNA China’s grand strategy, and what Nepal must understand — Khabarhub.com Bitget pauses withdrawals after $387.5M hack, CEO assures funds safe — Crypto Briefing Trump frames unregulated AI as a way to keep ahead of China – but in fact, it harms US national security — The Conversation Africa CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks — BleepingComputer Kiteworks urges customers to shut down their servers amid ‘imminent’ threat of cyberattack | TechCrunch — TechCrunch In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure — Securityweek.com CISA Unveils Election Security Plan Ahead of 2026 Midterms — Infosecurity Magazine Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild — Internet 8 insights from Proofpoint Protect: Security bets on intent as AI agents join the workforce — SiliconANGLE News From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on some concerning developments that warrant attention from anyone handling sensitive data or systems. One of the most interesting and actionable stories to me is the expansion of ShinyHunters’ attacks on Oracle’s PeopleSoft by Google. This group has already shown themselves to be quite skilled at breaching enterprise software, and now they’re going after another major player in the industry. The implications for organizations that use PeopleSoft are clear: if these hackers can get in, they’ll likely find a way out. ...

September 27, 2026 · 2 min · Jason, Cyber Professional

CyberNews 2026-09-26

Cybersecurity Headlines — September 26, 2026 8 insights from Proofpoint Protect: Security bets on intent as AI agents join the workforce — SiliconANGLE News Trust and the enticing consultancy offer — Talosintelligence.com Exclusive: Trump Admin Releases Blueprint To Protect Election Infrastructure Ahead Of Midterms — The Federalist Banks should deploy FCNR(B) funds in coming months: RBI DG Rohit Jain — Business Standard Hackers now exploit critical Roundcube flaw in code injection attacks — BleepingComputer Google to critical infra orgs: Our AI scanners won’t be evil, promise — Theregister.com DHS Announces Release of 2026 Election Infrastructure Security Plan — Globalsecurity.org Keralam gears up for data driven governance: Chief Minister — BusinessLine EU warns Q-Day could arrive before quantum computers are commercially viable — Crypto Briefing UK Government Shifts to Service-Led Cyber Governance After Stinging Audit — Infosecurity Magazine From the Trenches As a cybersecurity practitioner, I’m seeing a shift in the way organizations approach security, particularly with the increasing presence of AI agents in the workforce. Proofpoint Protect’s recent insights highlight the importance of intent-based security, where the focus is on understanding the intentions behind an actor’s actions rather than just their actions themselves. This approach can help reduce false positives and improve incident response times. ...

September 26, 2026 · 2 min · Jason, Cyber Professional

CyberNews 2026-09-25

Cybersecurity Headlines — September 25, 2026 Europe’s technology backbone is becoming a cyber target — Help Net Security Containment is dead: Five takeaways from the AI ROI in Contact Center Summit — SiliconANGLE News FBI investigates apparent theft of its personnel data by hackers — BBC News Check Point warns of hackers exploiting Security Gateway VPN RCE flaw — BleepingComputer Worries about AI internet takeover gain new urgency among doomsday scenario — Business Standard Someone’s attacking a critical 0-day RCE in F5 BIG-IP APM — Theregister.com Why Are Water Treatment Plants Still Connected to the Internet? — Gizmodo.com Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers — BleepingComputer Cyber resilience in banking sector — BusinessLine Arista patches actively exploited VeloCloud Orchestrator zero-day — BleepingComputer From the Trenches As a cybersecurity practitioner, I’ve seen my fair share of vulnerabilities being exploited, but one that caught my attention is Check Point’s warning about hackers exploiting the Security Gateway VPN RCE flaw. This is a high-priority vulnerability that can be easily abused by attackers to gain unauthorized access to an organization’s network. It’s imperative for organizations to patch this ASAP and ensure their VPN infrastructure is secure. ...

September 25, 2026 · 2 min · Jason, Cyber Professional

CyberNews 2026-09-24

Cybersecurity Headlines — September 24, 2026 F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks — BleepingComputer ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report — Securityweek.com Check Point warns of Management Server zero-day exploited in attacks — BleepingComputer D-Link warns of max severity zero-day bug in DIR-822A routers — BleepingComputer AI malware can rewrite itself to evade detection — Fox News Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273) — Help Net Security CISA orders feds to patch Zyxel flaw exploited for data theft — BleepingComputer Cybersecurity jobs available right now: September 22, 2026 — Help Net Security Linux users beware — CISA flags three major security issues you need to patch right now — TechRadar Georgia Election Committee Holds Meeting Weighing Risks and Recommendations — Daily Signal From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on the latest developments in the world of cyber threats, and there are two stories that caught my attention recently. The first one is the F5 patching of its BIG-IP APM zero-day flaw, which has already been exploited in several RCE (Remote Code Execution) attacks. ...

September 24, 2026 · 2 min · Jason, Cyber Professional

CyberNews 2026-09-23

Cybersecurity Headlines — September 23, 2026 Cybersecurity jobs available right now: September 22, 2026 — Help Net Security Linux users beware — CISA flags three major security issues you need to patch right now — TechRadar Georgia Election Committee Holds Meeting Weighing Risks and Recommendations — Daily Signal CISA alerts of active exploitation of three Linux kernel flaws — BleepingComputer SEI Defines Framework for National Security Cyber Research — PRNewswire FCIA’s FC-SP-3: A Standard Ready for the Quantum-Computing World — Storagereview.com From Love Letters to AI Agents: Cybersecurity’s Evolution — Cisco.com ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks — Internet 카스퍼스키, 보안 시스템 갈아엎지 않고 필요한 기능만 추가…SMB용 5개 모듈 공개 — Venturesquare.net CHAD WOLF: Congress has a chance to stop China from turning your car into a Chinese spy — Fox News From the Trenches As a cybersecurity practitioner, I’m seeing a surge in actively exploited vulnerabilities that are being pushed to patches right away. The latest from CISA alerts of active exploitation of three Linux kernel flaws - this is not a drill, folks. These vulnerabilities are being used in the wild, and it’s essential that users patch them ASAP. ...

September 23, 2026 · 2 min · Jason, Cyber Professional

CyberNews 2026-09-22

Cybersecurity Headlines — September 22, 2026 Drone Warfare Is Coming to America … And We’re Dangerously Unprepared — Naturalnews.com Cybercrime feud erupts on dark web as notorious group claims hijack of rival’s website — The Times of India Turning security complexity into useful intelligence: What’s new in Red Hat Lightspeed — Redhat.com AI ‘warning shots’ focus Beijing on national security risks — Hurriyet Daily News Week in review: Cisco patches exploited email gateway 0-day, Revolut breach — Help Net Security AI ‘warning shots’ focus Beijing on national security risks — Digital Journal Siemba Named a Sample Vendor in Three 2026 Gartner® Hype Cycle™ Reports for the Third Consecutive Year — PRNewswire CrowdStrike CEO warns on AI safety, stock jumps 14% — Crypto Briefing ShinyHunters hacks Clop leak site, threatens to extort ransomware gang — BleepingComputer ciso-assistant-community — Kitploit.com From the Trenches As a cybersecurity practitioner, I’m seeing two trends that are making me sit up and take notice. First, the rise of drone warfare in America is a wake-up call for our nation’s security posture. The article on Naturalnews.com highlights how we’re woefully unprepared to deal with this new threat, and it’s alarming. We need to invest in drone detection and tracking technologies ASAP. ...

September 22, 2026 · 2 min · Jason, Cyber Professional

CyberNews 2026-09-21

Cybersecurity Headlines — September 21, 2026 AI ‘warning shots’ focus Beijing on national security risks — Digital Journal Siemba Named a Sample Vendor in Three 2026 Gartner® Hype Cycle™ Reports for the Third Consecutive Year — PRNewswire CrowdStrike CEO warns on AI safety, stock jumps 14% — Crypto Briefing ShinyHunters hacks Clop leak site, threatens to extort ransomware gang — BleepingComputer ciso-assistant-community — Kitploit.com AI could ‘kill all humans’: How safe are Nigerians? — Vanguard CRWD Stock Keeps Climbing. Should You Climb On? — Trefis OpenAI Thinks An Advanced AI Model Can Talk Across 2 Air-Gapped, Isolated Computers By Running The CPU Hot And Using Thermal Changes As A Morse Code — Wccftech White hat hackers just breached OpenAI using Anthropic’s Claude in less than 72 hours — and it is a case study in just how fast AI is advancing — TechRadar Rising cyberattacks push Indian SMEs to boost security spending: Report — Business Standard From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on the latest developments in the field, and there are a couple of stories that really caught my attention. First off, CrowdStrike CEO Garret Miller recently warned about the risks associated with AI safety, which sent shockwaves through the market, resulting in a 14% stock jump. As someone who’s been working in cybersecurity for years, I have to say that this is a wake-up call for all of us. ...

September 21, 2026 · 2 min · Jason, Cyber Professional

CyberNews 2026-09-20

Cybersecurity Headlines — September 20, 2026 AI could ‘kill all humans’: How safe are Nigerians? — Vanguard CRWD Stock Keeps Climbing. Should You Climb On? — Trefis OpenAI Thinks An Advanced AI Model Can Talk Across 2 Air-Gapped, Isolated Computers By Running The CPU Hot And Using Thermal Changes As A Morse Code — Wccftech White hat hackers just breached OpenAI using Anthropic’s Claude in less than 72 hours — and it is a case study in just how fast AI is advancing — TechRadar Rising cyberattacks push Indian SMEs to boost security spending: Report — Business Standard Brevo Supply Chain Attack Injects Malware Into 100,000 Websites — Securityweek.com Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer — Internet Pentagon reports tenfold rise in cybersecurity vulnerabilities due to AI — Crypto Briefing CMSSF highlights cyber Guardians’ role in creating joint decision advantage — Globalsecurity.org OmniSec-Hex — Kitploit.com From the Trenches The rapid advancement of AI is making it increasingly challenging for cybersecurity practitioners like myself to keep up with the latest threats. Two stories that caught my attention are “White hat hackers just breached OpenAI using Anthropic’s Claude in less than 72 hours — and it is a case study in just how fast AI is advancing” and “Pentagon reports tenfold rise in cybersecurity vulnerabilities due to AI”. ...

September 20, 2026 · 2 min · Jason, Cyber Professional

CyberNews 2026-09-19

Cybersecurity Headlines — September 19, 2026 Pentagon reports tenfold rise in cybersecurity vulnerabilities due to AI — Crypto Briefing CMSSF highlights cyber Guardians’ role in creating joint decision advantage — Globalsecurity.org OmniSec-Hex — Kitploit.com Spain reports first data breach involving autonomous AI agent — Help Net Security Cisco warns of max severity ISE zero-day exploited in attacks — BleepingComputer Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks — Internet Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day — Securityweek.com Hackers who targeted Novo now hit Copenhagen Municipality’s IT supplier — Ing.dk Middle East cyber threats enter a new phase as ransomware surges and AI joins the attacker’s toolkit — Digital Journal Responsible-Alliance-Protocol — Kitploit.com From the Trenches As a cybersecurity practitioner, I’m seeing some concerning trends emerging that require immediate attention. The Pentagon’s report on a tenfold rise in cybersecurity vulnerabilities due to AI is alarming, as it highlights the growing threat of autonomous systems being exploited by attackers. This is not just a matter of technical complexity; it’s a fundamental shift in how we approach security. ...

September 19, 2026 · 2 min · Jason, Cyber Professional

CyberNews 2026-09-18

Cybersecurity Headlines — September 18, 2026 Cisco warns of max severity ISE zero-day exploited in attacks — BleepingComputer Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks — Internet Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day — Securityweek.com Middle East cyber threats enter a new phase as ransomware surges and AI joins the attacker’s toolkit — Digital Journal Responsible-Alliance-Protocol — Kitploit.com Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers — Internet The 23rd Annual Globee® Awards for Cybersecurity Invite Artificial Intelligence Security Achievement Nominations Worldwide — PRNewswire Hackuity raises $19M to help security teams sort through AI-found vulnerabilities — The Next Web Threat Intelligence Alone Won’t Close the Exploitation Gap — Internet Critical ScreenConnect flaw now actively exploited in attacks — BleepingComputer From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on recent developments that show the ever-evolving threat landscape. Two stories that caught my attention are Cisco’s warnings about a critical zero-day exploit in their Identity Services Engine (ISE). The fact that this vulnerability has already been actively exploited in attacks makes it imperative for any organization using ISE to patch it as soon as possible. ...

September 18, 2026 · 2 min · Jason, Cyber Professional