🔴 ShinyHunters has provided a final updated PSA regarding the earlier PSA from earlier this week...
"Good afternoon,
We have no further comments to make regarding our PSA statement we released the other day.
Our organisation is highly confident we have achieved our goal and our intentions we repeatedly made clear to journalists and in our public statements.
There is 5 days remaining still. We have no comment yet regarding what we will do if the victim entity does not comply with our kind request.
Nonetheless, we got what we wanted and we have a business to run and operate as usual.
We will not be responding to any press inquiries about this and we will not be sharing updates about other datasets we have that we did not yet disclose to the public.
We reiterate and want to assiduously emphasise we are NOT extorting the victim in question, this is NOT financially motivated and this is NOT a ransom.
Thank you for your time and attention to this matter. This is now old news.
macOS Credential Thief Adds Server-Locked Payload Delivery to Evade Analysis
A newly identified version of PamStealer is targeting macOS users through a convincing cryptocurrency-themed application while introducing a more sophisticated delivery mechanism designed to frustrate security analysis.
🔴 Devastating Steam Malware Attack Strikes Popular Game Twice in a Year
Imagine settling down for a relaxing gaming session, only to discover that the very game you love has become a Trojan horse, actively working to compromise your digital life. That’s the chilling reality that recently confronted players of People Playground, a popular physics sandbox game on Steam. In a truly alarming turn of events, this beloved title, known for its quirky stick-figure torture and endless creative possibilities, was hit by a severe malware attack not once, but twice within the span of a single year. The latest incident, surfacing on September 22, 2026, sent shockwaves through the gaming community, highlighting a deeply troubling vulnerability in what many gamers consider a trusted platform.
🔴 HackerHood Discovers New Bug in UaniaOS: From a Packet Capture Tool to a Root Shell
Many modern network devices choose to entrust all administration to a web interface, leaving the operator with no shell access: a common choice, designed to simplify management and reduce exposed surface area.
But when that interface becomes the only point of access to the system, its robustness ends up coinciding with the security of the entire device, as the case of UaniaOS demonstrates.
🔴 OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said.
The portal publishes aggregate figures, such as spending, and is separate from the systems that handle Medicare claims and personal records. The agent reached files on it that were not public, but no personal information is believed to have been accessed so far.
OpenAI first told the government on September 10, in an email to a public mailbox at Services Australia, which runs the portal. OpenAI says it found the activity in August. Albanese said the company took far too long to inform the government and that the manner in which it did so was unacceptable.
🔴 TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants.
According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. It originated from 1,487 unique AWS EC2 source IP addresses.
"The campaign compromised 7 accounts – all of which were unmanaged functional or service accounts rather than individual employee accounts – highlighting a critical exposure gap around forgotten, non-human identities carrying default or unrotated passwords and no MFA [multi-factor authentication]," the enterprise security company said in a statement.
🔴 They studied computer science to become waiters! The market is tilting against new graduates
Graduates in computer science and other fields most impacted by generative AI in the United States have seen a marked decline in their employment prospects. Following the advent of ChatGPT, the likelihood of finding a job for young people with a degree in computer science engineering has dropped significantly. Three economists from the U.S. Census Bureau analyzed this phenomenon in a new study. The authors analyzed administrative data on graduates and compared the fields based on the impact of AI on future employment.
🔴 Microsoft fixes bug that broke Windows File History backup feature
Microsoft has fixed a known issue that breaks the built-in File History backup feature on some Windows systems after installing the September 2026 security updates.
File History, introduced in Windows 8 and later replaced by Windows Backup, automatically backs up the user's account profile (Documents, Music, Pictures, Videos, and Desktop) to an external hard drive, such as a USB flash drive, or a network storage location (NAS) and then lets them restore accidentally deleted or damaged files using an older version from hours, days, or weeks ago.
🔴 TypeSafe AI's Jev is here! AI stops talking and starts making decisions
TypeSafe AI has launched a new category of models designed not to converse with humans, but to make decisions within software. The first is called Jev. And, just days after its launch, it has already become one of the fastest-growing AI models among developers.
🔴 300 GPUs shake a mountain: Mega-cryptocurrency mine discovered in Mexico
Mexican authorities have discovered and seized approximately 300 GPUs in an illegal cryptocurrency mine in the state of Puebla. The operation took place in the mountainous municipality of Tlaola, near a hydroelectric plant. Investigators are investigating allegations of electricity theft and possible money laundering through the mined cryptocurrencies.
The mine was found in a difficult-to-access area near hydroelectric infrastructure. Around 80 medium-voltage terminals, eight satellite antennas, and a transformer were found at the site. All this equipment is designed for industrial energy consumption. This is the fourth such site discovered in this area since the beginning of 2025. So far, no authorities have revealed which cryptocurrency was being mined, nor have they disclosed the associated wallets or announced any arrests.
Enterprises Gain Centralized Access Governance for Autonomous AI Workflows
Identity security company Aembit has added support for Okta Cross App Access (XAA), giving enterprises a way to apply existing workforce identity policies when AI agents connect to SaaS applications and Model Context Protocol (MCP) resources.
🔴 ENDZONE CLAIMS TRUMP MOBILE — ALLEGES ESIM QR CODES + USER PII STOLEN
The EndZone extortion group has newly listed Trump Mobile, the U.S. mobile service launched under the Trump brand, on its leak site.
• The listing was first observed September 23 • EndZone claims the stolen material includes user PII and eSIM QR codes • The actor mocks the service’s user count and provides no independently verified breach scope in currently available public telemetry • No evidence currently establishes how access was obtained, whether Trump Mobile infrastructure was directly compromised, or how many customers are affected • Trump Mobile separately confirmed a third-party data exposure in May involving names, emails, mailing addresses, phone numbers and order identifiers — but that earlier incident should NOT be assumed to be the source of this new claim
Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments.
VCO is a cloud-based centralized management platform that helps admins configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated edge devices.
Tracked as CVE-2026-93952, this maximum-severity flaw stems from an improper input validation weakness and affects VCO deployments where certificate-based authentication from the VeloCloud Edge to VeloCloud Orchestrator (VCO) is configured.
America leads the world in artificial intelligence. As it should. But tech leaders keep warning, with alarming frequency, that we are at risk of losing control.
President Donald Trump has called for an AI czar and an “AI Force.” The details remain unclear, but the announcement underscores something fundamental. A technology this consequential demands clear leadership, accountability and action inside the U.S. government. The question now is what that leadership should do.
🔴 LinkedIn adds new tools to fight fake profiles and bogus work histories
AI has made it significantly easier for people to create fake accounts and identities to engage in online manipulation and scams. On Wednesday, LinkedIn announced a new set of tools to combat the problem while helping people and companies better control their presence on the platform.
The company says it will now let members vouch for each other’s experience and give businesses new controls to manage who associates with their brand, among other changes.
🔴 Honeywell: OT Security Teams Embrace AI, but Autonomy Still Rare
Honeywell released its 2026 OT Cybersecurity Benchmark Report on Tuesday, and the findings point to a disconnect between how industrial organizations rate their operational technology (OT) security programs and how prepared they actually are. The report also examines AI’s impact on OT security.
Among 603 surveyed leaders across critical infrastructure sectors, 88% characterized their OT security programs as mature or design-led, yet only 21% maintain a complete inventory of their OT assets.
Respondents worked across critical infrastructure sectors, including energy, oil and gas, healthcare, maritime, and manufacturing, with participation spanning the Americas, EMEA and APAC regions.
New Windows PoC Can Leave Microsoft Antivirus Running on Stale Threat Intelligence
Security researcher Abdelhamid Naceri, also known as Nightmare Eclipse and Chaotic Eclipse, has released a proof-of-concept tool designed to prevent Microsoft Defender Antivirus from installing platform and security-intelligence updates.
