🚨 Georgian State Security Service: A Georgian citizen has been arrested for allegedly possessing nuclear material illegally and attempting to sell uranium-238.
The suspect intended to sell the uranium to a foreign national for $700,000. Security officers launched an investigation after receiving information about the transaction and subsequently arrested the suspect.
Georgian authorities have not disclosed the foreign national’s nationality. The investigation remains ongoing.
🔴 Android’s October 2026 Updates Patch 25 Vulnerabilities
Google this week announced the rollout of fresh Android security updates that resolve 25 vulnerabilities in the Framework and System components.
The fresh release arrives on devices as the 2026-10-01 security patch level and marks a change from the updates released over the past several years, which have been split into two parts.
Android’s October 2026 patches resolve seven flaws in Framework and 18 in System, including a total of seven critical-severity bugs (one in Framework and six in System).
🚨 Documents reportedly obtained indicate that Saudi Arabia, in coordination with Turkey, transferred hundreds of extremist fighters from Syria to Saudi territory before deploying them to battlefronts in Yemen.
Atlassian has rolled out patches for a critical-severity vulnerability that impacts all versions of eight of its products.
The security defect, tracked as CVE-2026-21589 (CVSS score of 9.3), is described as an arbitrary file access issue.
It can be exploited without authentication to access specific files in the web application root directory.
“Exploitation requires prior knowledge of the target file’s exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be sensitive files present that increase your risk,” Atlassian notes in its advisory.
🚨 October 7, 2023: The Day the Israel–Hamas War Began
On the morning of October 7, 2023, Hamas launched a large-scale attack on Israel. The attack involved thousands of rockets fired from the Gaza Strip, while armed militants crossed into southern Israel by land, sea, and air.
The attackers reached several Israeli cities, towns, kibbutzim, and the site of the Nova music festival. Around 1,200 people were killed, and 251 others were taken hostage and brought into Gaza.
The attack, described as the deadliest in Israel’s history, triggered a massive Israeli military response in Gaza and marked the beginning of a war with far-reaching humanitarian and regional consequences.
🔴 Threat Actor Claims Leak of Russian Ministry of Industry and Trade Military Data
A darkweb forum post alleges the theft and sale of sensitive data from the Russian Ministry of Industry and Trade. According to the listing, the actor claims to possess a 1.62 GB dataset comprising 1,502 files, which they describe as "original-source material" acquired through independent work rather than resold from other actors.
The post details that the alleged data dump includes highly sensitive defense-related information, such as:
- Arms and military-equipment licenses - Suppliers for defence orders - Mobilisation reservation of officers - Defense-industry registers - Service licenses for arms and military equipment - Defence-order reports covering the period 2020–2026
🔴 AI and Privacy: What Happens to the Data We Entrust to Artificial Intelligence?
Artificial intelligence relies on the processing of data provided to it. When we use a chatbot, we send it questions, text, documents, images, or code. From the moment we press "Send," this information reaches the infrastructure that provides the service, where it is processed and, depending on the platform, account, and settings, may also be stored or used for further purposes.
🔴 Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
🔴 Social Engineering Detection Moves Into the Live Conversation
Companies are pouring time and dollars into security awareness training, but there is little empirical evidence to suggest it actually works against social engineering.
Social engineering remains a primary and successful attack vector. While system vulnerabilities can be patched, social engineering cannot. The most common pseudo ‘patch’ is user awareness training, but this has failed to block the vector. Human defenders should not and cannot be expected to detect trickery designed to manipulate their psychology. And the tricks are becoming better hidden and more sophisticated with the use of AI deep fakery.
🔴 50 Petabytes of Logs to Be Scrubbed: OpenAI Searches for Signs of AI Leaks
The cost of AI misbehavior is now measured not only by the consequences, but also by the cost of investigation. OpenAI revealed that the review of its past activity covers approximately 50 petabytes of archived data and costs more than $500,000 per day. The company has already allocated enormous computing resources and plans to increase them as the investigation progresses.
The scale of the dataset explains the unusual expense. The study involved approximately 7,000 NVIDIA GB200 and GB300 accelerators, and the logs were examined month after month in reverse order. According to OpenAI, if the entire volume were imagined as a standard English text, it would take a person approximately 66 million years of continuous reading at a speed of 240 words per minute.
Undercover Blockchain Probe Maps Financial Pipeline Behind North Korean Cyber Heists
Blockchain investigator ZachXBT says he penetrated a Chinese organized-crime network suspected of processing cryptocurrency stolen in major cyberattacks attributed to North Korean hackers.
🔴 Engineer sentenced for locking over 3,000 devices on employer network
A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer's network in a ransomware-style attack.
57-year-old Daniel Rhyne from Kansas City, Missouri, pleaded guilty to his role in a failed extortion plot targeting the New Jersey company that employed him after being arrested in August 2024 and released after his initial appearance in federal court.
According to court documents, he remotely accessed the company's network without authorization using an administrator account between November 8 and November 25 and scheduled tasks on the domain controller that changed the password of the administrator account to "TheFr0zenCrew!", deleted 13 domain admin accounts, and changed the passwords for 301 domain user accounts to "TheFr0zenCrew!".
🔴 Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory.
The attacker must already know a file's exact name and path and cannot list what the directory holds. Atlassian disclosed the flaw, CVE-2026-21589, on October 5, rated it 9.3 out of 10, and listed a fixed version for each product.
The web application root directory is the folder on the server that holds the web application itself. In some configurations, it may contain sensitive files, which raises the risk, according to Atlassian.
🔴 FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees.
That's according to a report from Reuters, citing two sources familiar with the matter.
"To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization — after a contractor failed to implement a security patch explicitly issued to secure the platform," Brett Leatherman, assistant director of the FBI's cyber division, was quoted as saying to Reuters.
🔴 AI flooded arXiv with useless papers, now limiting it to two articles per month
arXiv is an open repository where researchers publish preprints of scientific papers. Recently, the service announced it was introducing limits on the number of submissions due to the rise of AI-generated content —articles entirely produced by artificial intelligence. Neural networks have made submitting materials so easy that the moderator team has become overwhelmed. Now, you can submit a maximum of two papers per month and have no more than three active submissions under review at any one time.
"The foundation of arXiv's process for identifying and rejecting low-quality articles is our many volunteer moderators," explained arXiv Editorial and Advisory Board Chair Thomas Dietterich." We are deeply grateful to them […]. However, a relatively small group of authors submits a tremendous amount of low-quality work, taking up a disproportionate amount of moderators' time."
🔴 VERMONT SCHOOL DISTRICT HIT BY RANSOMWARE — BOARD REFUSES TO PAY, KAIROS THREATENS LEAK
Slate Valley Unified Union School District (Fair Haven, Vermont) has confirmed a cyberattack that began Sept 3, knocking out internet, email and internal systems for about a week.
According to the district:
• It received a ransom demand (reported as hundreds of thousands of dollars) • Its school board voted Sept 28 not to pay • The FBI is investigating and advised against paying • Current and former teachers' personal information was compromised, and staff have been notified
The Kairos ransomware group has since claimed the attack. Kairos claims:
• About 762 GB of stolen data, including SQL databases with student and employee personal and medical information • Data on more than 1,500 employees, including SSNs and home addresses • It will leak the data
🔴 ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
FortiGuard Labs researchers spotted a Linux malware family they call ClingSTUN, and the name gives away its trick immediately. Instead of relying on a dedicated command server, the malicious code leans on STUN, the protocol that helps devices behind a router figure out their real public IP address. Video calling apps use it constantly, which means ClingSTUN’s network traffic hides inside something that already looks completely normal.
“ClingSTUN functions as a back-connect proxy backdoor, turning infected systems into remotely controlled proxy nodes. It abuses public STUN (Session Traversal Utilities for NAT) infrastructure to discover externally mapped IP addresses and ports, maintain NAT bindings, and improve connectivity between compromised hosts and remote operators.” reads the report published by Fortinet. “Because many of the STUN servers it contacts are legitimate public services, the resulting traffic easily blends with normal VoIP and WebRTC communications.”
🔴 Robot learns new skill from single video, debuts in Nvidia factory
Robotic AI developer Skild AI taught the S1 model to master a new, complex, multi-step task through a single video, without any additional task-specific training. The technology has already been implemented in industrial production: Skild AI , Nvidia, and Foxconn are using the Skild Brain family of robotic manipulators in the assembly of Nvidia Blackwell systems.
Instead of programming each movement, the operator shows S1 how to perform the task, and the model transforms what it sees into autonomous actions. The developers call this approach contextual learning : the example serves as an instruction for the model as it performs the task, so there's no need to adjust the neural network's weights.
🔴 Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions.
The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.
"Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network," Microsoft said in an advisory released on October 2, 2026.
