2026-10-06 06:00 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-06 06:15 UTC
Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark's national population register, the country's digitalization ministry said on October 5. They used a private Danish company's lawful right to look up records in the Central Person Register (CPR). The ministry has told people never to
P0
2026-10-06 05:22 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-06 06:15 UTC
A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache. "Instead of downloading and executing remote payloads like the typical attack pattern, in this attack, the websites pre-fetch a script payload into the browser cache disguised as a PNG file," the Microsoft Threat Intelligence team said in a post on X.
P0
2026-10-06 04:00 UTC
Security Journalism
The Record · indexed 2026-10-06 12:55 UTC
Several mysteries surround what appeared to be an unauthorized push notification sent to customers of London-based clothing company ASOS.
P0
2026-10-05 22:46 UTC
Security Journalism
BleepingComputer · Mayank Parmar · indexed 2026-10-05 22:50 UTC
OpenAI is preparing to add invisible watermarks to text generated by ChatGPT and Codex in the European Union. [...]
P0
2026-10-05 21:41 UTC
Vendor Research
AWS Security Blog · Alexander Greaves-Tunnell · indexed 2026-10-05 21:50 UTC
As AI models become more capable, they uncover more security vulnerabilities and identify increasingly sophisticated paths to exploit them, raising the bar for how quickly defenders must respond. Security teams now face more potential vulnerabilities than their existing processes were designed to handle — each requiring investigation, reproduction, and a repair that must be tested […]
P0
2026-10-05 21:26 UTC
Security Journalism
The Record · indexed 2026-10-05 21:45 UTC
Beyond the potential misuses of its services, Wikimedia said activity by AI agents can be a drain on web platforms that are already operating with limited resources.
P0
2026-10-05 21:25 UTC
Security Journalism
Dark Reading · Jai Vijayan · indexed 2026-10-05 22:00 UTC
The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.
P0
2026-10-05 20:20 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-10-05 20:30 UTC
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]
P20
2026-10-05 19:15 UTC
Security Journalism
The Record · indexed 2026-10-05 19:30 UTC
Saif al-Din Khader is cooperating with the FBI, reports said, as the bureau responds to a massive breach that exposed employee data.
P0
2026-10-05 18:15 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-05 19:10 UTC
AI-assisted research uncovered a critical Rejetto HFS flaw that enables authentication bypass and remote code execution, now exploited in the wild. A Rejetto HFS vulnerability, tracked as CVE-2026-61500 (CVSS score of 9.3), discovered with the help of the Anthropic Mythos AI model is now being exploited in the wild, turning an interesting security research experiment […]
P50
2026-10-05 17:22 UTC
Security Journalism
The Record · indexed 2026-10-05 17:30 UTC
Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem was not connected to vulnerabilities reported last week that also caused alarm among cybersecurity experts.
P0
2026-10-05 17:19 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-10-05 17:25 UTC
Italy's Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8M) over poor data-processing practices that the agency says could have put roughly one million patients at risk of data exposure and de-anonymization. [...]
P0
2026-10-05 17:00 UTC
Security Journalism
The Record · indexed 2026-10-05 17:30 UTC
Ukraine’s largest grocery store chain, ATB, confirmed that it was hit by a cyberattack after hackers posted an extortion demand on its website.
P0
2026-10-05 16:21 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-05 17:30 UTC
Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. "Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a
P5
2026-10-05 15:52 UTC
Security Journalism
Dark Reading · Elizabeth Montalbano · indexed 2026-10-05 16:15 UTC
An emerging threat group known as TA419 established seemingly legitimate professional relationships with AI policy experts working for US think tanks, universities, and legal organizations.
P0
2026-10-05 15:30 UTC
Security Journalism
The Record · indexed 2026-10-05 16:00 UTC
A ransomware attack that affected the University of Illinois Chicago (UIC) College of Medicine resulted in the theft of some information from its servers.
P15
2026-10-05 15:21 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-10-05 15:25 UTC
Denmark's Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals. [...]
P0
2026-10-05 14:53 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-05 14:55 UTC
Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. [...]
P10
2026-10-05 14:26 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-10-05 14:35 UTC
Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP). The post Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports appeared first on SecurityWeek.
P0
2026-10-05 14:22 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-10-05 14:25 UTC
South Korea's Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country. [...]
P0
2026-10-05 14:20 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-05 15:15 UTC
A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were easy to overlook. There are actively exploited bugs in the mix, cleaner intrusion paths, smarter automation, and a long patch list waiting behind them. Some attacks are getting more capable. Others
P40
2026-10-05 14:00 UTC
Security Journalism
Huntress · indexed 2026-10-05 14:50 UTC
ClickFix attacks leave no file to scan or block, which is why most endpoint tools miss it. See how Huntress Attack Disruption kills the chain in under a second.
P0
2026-10-05 13:57 UTC
Other
Check Point Research · urias@checkpoint.com · indexed 2026-10-05 14:15 UTC
For the latest discoveries in cyber research for the week of 5th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Arizona’s state court system has suffered a phishing-led cyberattack after an employee clicked a malicious link. Attackers copied backup files containing protective-order records and more than 150,000 Foster Care Review Board reports […] The post 5th October – Threat Intelligence Report appeared first on Check Point Research.
P0
2026-10-05 13:55 UTC
Security Journalism
The Record · indexed 2026-10-05 14:15 UTC
Russian cybersecurity researchers attributed a quiet two-year espionage campaign to the Belarusian Cyber Partisans, a group better known for public attacks against governments and infrastructure.
P0
2026-10-05 13:49 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-05 14:55 UTC
Hackers accessed names, addresses and CPR numbers of 8.8 million people in Denmark through a third-party company with legal registry access. A hacker broke into the database that holds basically every identifying detail on every person connected to Denmark, living, dead, or long since moved away. Denmark’s digital affairs minister announced it Monday and didn’t […]
P0
2026-10-05 13:33 UTC
Security Journalism
BleepingComputer · Sponsored by tenfold Software · indexed 2026-10-05 13:45 UTC
tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new features help teams manage Microsoft 365 sharing and investigate suspicious identity activity. [...]
P0
2026-10-05 13:15 UTC
Security Journalism
The Record · indexed 2026-10-05 13:30 UTC
The Japanese media giant Nikkei disclosed a cyber incident involving an employee email account that may have compromised journalistic sources.
P0
2026-10-05 13:10 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-05 13:55 UTC
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Citrix NetScaler flaw tracked as CVE-2026-88779 (CVSS score of 8.7), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-88779 is a memory overflow vulnerability in Citrix NetScaler ADC and Gateway […]
P35
2026-10-05 13:01 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-05 13:05 UTC
The U.S. Department of Justice has announced the arrest of the alleged developer of Ploutus malware, used to steal millions of dollars in ATM jackpotting attacks across the United States. [...]
P0
2026-10-05 13:00 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-10-05 13:15 UTC
ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation. The post Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws appeared first on SecurityWeek.
P0
