Monday, September 21, 2026

Cybersecurity News Hero

Combing the world for the cybersecurity stories you need to know.

Cybersecurity News

PocketOS Cursor agent database https://www.pexels.com/photo/a-man-in-red-shirt-covering-his-face-3760043/

When Agents Decide to "Fix" It: The Governance Gap in Autonomous AI

All it took was the time to read this sentence, or about nine seconds. An AI coding agent wiped out months of customer data essential to the PocketOS SaaS platform and its car rental clients.…

Copy Fail Linux vulnerability https://www.pexels.com/photo/close-up-of-rgb-backlit-gaming-keyboard-37099672/

How Copy Fail Turned Linux's Memory Efficiency Against Itself

A newly discovered vulnerability, dubbed Copy Fail and tracked as CVE-2026-31431, defies the profile of a classic kernel exploit by requiring no race condition, no version-specific offsets, and no compiled payloads. The same 732-byte Python…

SAP supply chain npm https://www.pexels.com/photo/close-up-of-codes-on-a-computer-screen-4976712/

SAP npm Compromise Exposes Credential Risk in Build Pipelines

Malicious versions of four SAP-related npm packages exposed developer machines and CI/CD systems to possible credential theft. Rather than targeting production SAP servers directly, the attack reached into the build pipeline used to create and…

PhantomRPC Microsoft https://www.pexels.com/photo/crop-cyber-spy-hacking-system-while-typing-on-laptop-5935794/

Why PhantomRPC Is a Flaw That Cannot Be Patched Away

The Remote Procedure Call (RPC) mechanism of the Interprocess Communication (IPC) ecosystem is the universal communication backbone of Windows systems, embedded so deeply in the OS that its failure modes become everyone's problem. A recent…

taxes phishing IRS https://www.pexels.com/photo/close-up-shot-of-a-document-through-a-magnifying-glass-7821673/

Tax Phishing Is Moving From Personal Inboxes to the Workplace

Tax phishing has long been easy to dismiss as a seasonal consumer scam: fake IRS emails, refund bait, audit threats, and other lures aimed at people anxious about filing deadlines. New research from Hoxhunt suggests…

AI security Unit 42 Zealot PoC https://www.pexels.com/photo/abstract-digital-circuit-block-graphic-art-30547567/

What Zealot Reveals About AI's Cloud Offensive Capabilities

A disclosure from AI giant Anthropic in November 2025 confirmed that AI autonomously executed between 80% and 90% of a particular state-sponsored espionage campaign, effectively shifting the debate from hypothetical to a documented reality. Unit…

Sysdig cloud security https://pixabay.com/illustrations/cloud-computer-circuit-board-cpu-6532831/

How the Cloud Security Reckoning Is Reshaping Defense

Cloud security company Sysdig recently published the 2026 Cloud-Native Security and Usage Report, detailing trends and needs in modern cloud operations and security. The report shows that cloud environments have scaled past what human-driven security…

Okta vishing LevelBlue https://www.pexels.com/photo/gold-condenser-microphone-near-laptop-computer-755416/

Okta Vishing Attacks Put Identity Help Desks in the Crosshairs

A new report from LevelBlue’s SpiderLabs team warns that threat actors are increasingly using voice phishing, or vishing, to manipulate Okta authentication processes, including MFA resets and new-device enrollment. Rather than relying only on malicious…

Nexcorium DVR https://www.pexels.com/photo/camera-de-surveillance-25391056/

DVRs Now Turning Into DDoS Attack Infrastructures

The IoT attack surface has never been larger—or more neglected. This trend was captured by FortiGuard Labs, which tracked a campaign in which a Mirai-variant botnet (dubbed Nexcorium) exploits CVE-2024-3721. The command injection vulnerability found…

GrafanaGhots Grafana https://www.pexels.com/photo/a-person-in-white-cloth-standing-on-a-grassy-field-9778975/

How GrafanaGhost Turned Your Observability Stack Into an Exfiltration Engine

Data analytics and monitoring platform Grafana serves as the central nervous system for enterprise telemetry, financials, and customer data in over 7,000 enterprises across the globe, including 70% of Fortune 50. While the consolidation and…

digital trust identity resilience security https://www.pexels.com/photo/home-office-creative-desktop-tools-16071270/

Why Enterprises Must Rethink Trust From the Inside Out

In modern enterprise environments, credential compromise serves as the dominant pathway for breaches. The rise of techniques such as deepfake technology and job candidate fraud exposes gaps in identity security that cannot be closed by…

AI agents non-human identities https://www.pexels.com/photo/white-jigsaw-puzzle-illustration-262488/

Why AI Agents Are Outrunning Enterprise Security Controls

The AI boom and other ongoing developments in recent years have led to a fundamental shift in the identity landscape. Keeper Security’s recent AI and Non-Human Identities Are Outpacing Security Controls report details a continuing…

UNC6783 social engineering cybersecurity https://www.pexels.com/photo/close-up-of-hands-typing-on-laptop-keyboard-indoors-36175215/

UNC6783 Is Turning Enterprise Support Channels into Extortion Entry Points

Google Threat Intelligence Group (GTIG) says a financially motivated threat cluster it tracks as UNC6783 is targeting business process outsourcers, help desks, and other enterprise support teams as an entry point into larger organizations. The…

Glasswing Claude Mythos https://www.pexels.com/photo/pink-white-black-purple-blue-textile-web-scripts-97077/

What Mythos and Glasswing Should Signal to Every Security Leader

The recent announcement of the Claude Mythos Preview and Project Glasswing represents a step forward in AI-empowered security initiatives. The fact that the Mythos model is being withheld from public release is an implicit acknowledgment…

Modbus OT operational technology critical infrastructure https://www.pexels.com/photo/high-voltage-power-lines-at-sunset-28912010/

How a 40-Year-Old Protocol Is Leaving Critical Infrastructure Exposed

A decades-old industrial communications protocol still used to connect controllers, sensors, and monitoring equipment is leaving some critical infrastructure systems exposed online. Researchers at Comparitech said they identified 179 likely real industrial control system devices…

Ivanti vulnerability exploit https://www.pexels.com/photo/black-metal-padlock-706500/

Ivanti Exploitation Underscores the Fragility of Mobile Infrastructures

The active exploitation (CVE-2026-1340) of the Ivanti Endpoint Manager Mobile solution lays bare an uncomfortable irony at the heart of enterprise security: The platforms organizations deploy to govern and protect mobile devices have become high-value…

Axios code software supply chain https://www.pexels.com/search/software%20code%20supply%20chain/?orientation=landscape&people_count=0

The Axios Supply Chain Attack and What It Reveals About Open Source's Invisible Risk

In modern cybersecurity, open-source tools can often provide the perfect avenue for attackers due to widespread access and dependencies. The Axios promise-based HTTP client is present in around 80% of cloud and code environments, making…

DPRK LNK files North Korea https://pixabay.com/illustrations/north-korea-dprk-korea-juche-asia-1151137/

How North Korean Hackers Turned GitHub Into a Spy Network Hiding in Plain Sight

Attackers are constantly looking to develop their tactics and technologies for increased success, requiring ongoing intelligence and advancement in security to account for the evolution of risk. Recently, threat actors linked to the DPRK have…

Subscribe for the Latest News

Webinars

Tuesday, Sep. 22 1pm ET / 10am PT

Beyond the Prompt: Securing AI to Unleash Innovation

Wednesday, Sep. 23 1pm ET / 10am PT

Unified Resilience: Consolidating Protection Across Data, Identity, and AI

Tuesday, Sep. 29 1pm ET / 10am PT

Unit 42 Insights: A Blueprint for Defending at the Speed of AI