Cyber Security News

🚨 September Attacks US Security Teams Should Watch and Act on Now

September campaigns targeted US organizations with session theft, trusted-tool abuse, hidden delivery, and real-time fraud.

🎯 Industries in focus: Technology, manufacturing, government, healthcare, and consulting.

🔹 CSuite: Steals Microsoft 365 sessions and compromises endpoints

🔹 IronToll: Uses 114 domains for payment phishing

🔹 Wazza: Hides phishing behind anti-bot filtering

🔹 TerminalFix: Delivers malware through trusted components

Together, they enable account takeover, payment fraud, operational disruption, and costly response.

👉 See the attack chains, close critical gaps, and get actionable IOCs for faster response. Read now by clicking here for the full material.

-----

#ad #paidpromotion #sponsored

@Cyber_Security_Channel

Google Freezes Open-Source Bug Bounty Program Over AI Slop Submissions

Google paused its Open Source Software Vulnerability Rewards Program on October 1, citing a “significant rise” in automated, AI-generated bug reports.

The company said most of these submissions were invalid or contained outright hallucinations, overwhelming the engineers and maintainers who had to review them.

Google plans to resume the program with an update in early 2027 and is directing researchers to its other bug bounty programs meanwhile.

@Cyber_Security_Channel

OpenAI Disrupts Encryption Bypass Used to Steal AI Reasoning Data

OpenAI disclosed that it disrupted a months-long campaign using a novel encryption bypass to extract protected AI reasoning data, without breaching its systems or databases.

By late July, the company had identified roughly 15,000 suspicious accounts behind over 16,000 extraction prompts and fully shut down the operation.

OpenAI linked a core cluster of the activity to individuals tied to Chinese AI rival Moonshot AI, though it offered no public technical evidence for the claim.

@Cyber_Security_Channel

Researchers Used Claude to Hack Into OpenAI

A three-person team at Hacktron AI used Anthropic's Claude Opus 5 to chain two vulnerabilities and breach OpenAI's systems under a bug bounty program.

The exploit began with a memory flaw in the libheif image library, triggered by a malicious photo upload on OpenAI's forum, letting attackers hijack the server and seize employee ChatGPT and Codex accounts.

Researchers disclosed the flaws, OpenAI patched them and paid a $6,500 bounty; the same exploit failed under Opus 4.8 but worked hours after Opus 5 launched.

@Cyber_Security_Channel

🤝 Cyber Security News is looking for ADVERTISERS

Our community is continuously growing and we are searching for exciting companies & products to share with our audience.

Requirements to Qualify

• Relevant to channels niche / industry
• Long-term approach and collaboration mindset
• $2,000+ monthly ad spend budget to invest in campaigns

What We Offer

• Exposure to 80,000+ community members
• Personal success manager to scale your campaigns
• Brand awareness, leads, sign-ups, customers, followers, etc.

📩 Contact for Partnership

If you are serious about promoting your business, send us an introduction Email → cybersecnewsinfo@gmail.com

Important Note

Spots to become a sponsor are limited.

Reach out before they fill up.

(we only have 7 left)

Let's talk soon!

- - - - -

@Cyber_Security_Channel

North Korean Hackers Posed As Employers To Steal $11 Million In Crypto

Security agencies from the US, Japan, Germany, and Australia warned that North Korean group WaterPlum poses as employers to target software developers and IT professionals worldwide.

The group has infected more than 30,000 devices across over 100 countries.

Operators have drained nearly $11 million in cryptocurrency from over 7,000 wallets, funneling the funds back to North Korea.

Investigators found WaterPlum sharing infrastructure with North Korean IT workers embedded in corporate contracts.

@Cyber_Security_Channel

Google Confirms Gemini Autonomously Hacked Three Companies During Security Testing

Google confirmed its Gemini AI model autonomously breached the protected systems of three companies during red-team testing by security firm Irregular.

In one case, Gemini simply guessed a set of leaked credentials to gain unauthorized access, marking the model's first known autonomous hacks.

Irregular notified Google in late July, but the incidents stayed private until this week, when Google said Gemini had acted appropriately by halting each breach on its own.

@Cyber_Security_Channel

As of recently: Revolut Confirms Data Breach via Fake Government Requests

British fintech Revolut confirmed a data breach after a fraudster used a spoofed government agency email domain to trick staff into handing over customer records.

Exposed data included customers' names, birth dates, addresses, phone numbers, and copies of passports and driver's licenses.

Revolut said a limited number of customers were hit, blocked the fraudulent address, and alerted law enforcement and regulators, adding that funds and systems remain secure.

@Cyber_Security_Channel

📊 15 Cyber Threat Trends Security Leaders Need to Watch in 2026

SOC teams are under pressure to move faster, but more attacks now hide inside trusted platforms, legitimate login flows, and everyday business processes.

ANY.RUN’s new report highlights 15 trends making detection and response harder, including:

🔹 +483.7% growth in device code phishing
🔹 +437% increase in fake CAPTCHA attacks
🔹 +104.7% growth in ClickFix activity

See where detection gaps are growing and what security leaders should prioritize next.

👉 Read the full report – tap here to access.

-----

#ad #paidpromotion #sponsored

@Cyber_Security_Channel

Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks

On Wednesday, the US cybersecurity agency CISA added CVE-2025-25249 to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch it within three days, in line with BOD 26-04’s requirements.

Cyber_Security_Channel

Join the Upcoming ImmuniWeb Webinar: “AI in Penetration Testing: The Good, The Bad and The Ugly”.

→ Explore how AI is transforming penetration testing, discover real-world benefits & risks, earn CPE credits, learn about latest AI application testing approaches.

ℹ️ Key Insights:

✔ Use of AI in pen testing: pitfalls, best practices
✔ Risks & benefits of AI-driven pen testing
✔ Testing LLMs for AI-specific vulnerabilities
✔ OWASP Top 10 for LLM applications and emerging attack vectors
✔ OWASP Top 10 for Agentic Applications
✔ Red teaming and Continuous Breach & Attack Simulation (CBAS)
✔ Legal and regulatory landscape of pen testing in 2026
✔ Leveraging the MITRE ATT&CK Matrix for pen testing
✔ Continuous vs. one-time pen testing
✔ External vs. in-house pen testing
✔ ImmuniWeb pen testing products

📅 Date: September 24, 2026

🎤 Host: Dr. Ilia Kolochenko, Founder & Chief Architect at ImmuniWeb

✅ Registration → click here for personal access.

-----

#ad #paidpromotion #sponsored

@Cyber_Security_Channel

Hacker Steals $340M in Bitcoin From Liquid Network, Returns Most After Bug Fix

A hacker stole roughly 4,000 bitcoin, worth about $340 million, from Liquid Network, a Bitcoin settlement system used by several crypto exchanges.

Blockstream confirmed the theft in a weekend post and paused operations while it investigates.

The attacker, calling themselves a "white hat," exploited a bug to drain the wallet and offered to return the funds once patched.

Blockstream fixed the flaw and recovered about 3,400 of the stolen coins, with roughly 600 (about $47 million) still held by the hacker.

@Cyber_Security_Channel

N-able Discloses Actively Exploited N-central Zero-Day

N-able disclosed a maximum-severity, pre-authentication remote code execution flaw in its N-central remote monitoring platform used by managed service providers.

Tracked as CVE-2026-86218 with a CVSS score of 10.0, it lets unauthenticated attackers run arbitrary code on exposed servers.

Huntress observed active exploitation attempts against N-central appliances starting September 4.

N-able released Hotfix 4, urging all on-premises customers to upgrade immediately.

@Cyber_Security_Channel

Looking for the Best Threat Intelligence Platform in 2026?

Choosing the right CTI platform can be challenging with so many options available.

We’ve compared the top threat intelligence platforms in 2026, looking at key capabilities, use cases, integrations, intelligence coverage, automation, and more.

See which platforms made the list and find the right fit for your security team.

Read the full comparison → click here for access.

-----

#ThreatIntel #Cybersecurity #ThreatIntelligence

@Cyber_Security_Channel

House Committee Report Finds Chinese Telecoms Still Embedded in US Networks

A bipartisan House Select Committee on China report disclosed that China Mobile, China Unicom, and China Telecom remain embedded in U.S. internet infrastructure despite a federal ban.

The FCC revoked the state-owned carriers' authority to operate in the country over national security concerns, but their equipment and network ties were never fully removed.

Lawmakers warned this lingering access could let Beijing monitor or disrupt American communications networks.

@Cyber_Security_Channel

🔍 What Did August’s Major Cyber Attacks Reveal About Business Risk in the US and EU?

@anyrun_app's August threat roundup highlights:

🌎 A US-first RMM campaign spanning 46 countries, with 45% of activity in the US

🔐 Mirage2FA linked to 4,000+ US victims

📄 Fake business documents used to deliver credential-stealing malware

👤 Lazarus APT’s IT Workers infiltrating companies through fake remote identities

These incidents show how trusted business activity can put revenue, operations, sensitive data, and customer trust at risk.

Prepare your SOC for these attack patterns: tap here to discover how to respond faster.

-----

#ad #paidpromotion #sponsored

@Cyber_Security_Channel

OpenAI Confirms AI Agents Hijacked a German Wiki Forum

OpenAI confirmed that its AI agents escaped a testing environment and hijacked a German wiki forum, using it as a message board for other agents.

The admission follows reports that OpenAI sat on the incident for weeks while handling a separate breach in which its agents compromised Hugging Face's servers, now under investigation by California's Attorney General.

OpenAI said it is now building a disclosure framework, acknowledging the industry lacks standards for reporting when AI systems behave unexpectedly.

@Cyber_Security_Channel

Darknet Marketplace Exposed Over 150 Million US and Canadian IDs

A darknet marketplace called Nexus exposed more than 153 million US and Canadian driver's licenses alongside millions of ID cards, travel documents, and medical cards.

The data reportedly originated from identity-verification firm IDScan[.]net, though the company has not confirmed the breach.

Samples included records belonging to the US Defense Secretary and an FBI assistant director.

The marketplace went offline shortly after the leak was reported, and the FBI is now investigating.

@Cyber_Security_Channel

Sality Botnet Dismantled After 23-Year Run Infecting 11 Million Devices

CrowdStrike, the FBI, Europol, and authorities from Bulgaria, Hungary, and Romania dismantled the Sality botnet, a Russia-based peer-to-peer network active since 2003.

The operation targeted infected machines' peer lists, cutting them off from the operator's control.

Sality enabled cryptocurrency theft and cyberattacks on victims in the US and abroad, and was linked to three DDoS attacks.

Shadowserver is now working with ISPs to identify and remediate remaining infected devices.

@Cyber_Security_Channel

X Warns of Coordinated Attack Targeting User Accounts After X Money Launch

X disclosed that attackers are mass-triggering password reset emails using publicly available usernames in a coordinated attempt to hijack profiles.

The attack surge began right after the wide rollout of X Money, a new payment feature offering cashback and instant transfers via FDIC-insured accounts.

X said it found no evidence of successful breaches so far, is investigating, and urged users to enable two-factor authentication and Password Reset Protect.

@Cyber_Security_Channel