Latest security news

Thu, 10 Sept 2026

1. 19:15
   Surfshark VPN says hackers breached internal testing, proxy servers

   Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet.

   BleepingComputer
2. 19:07
   Microsoft Excel KB5002914 update breaks copy and paste for some users

   Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality.

   BleepingComputer·Microsoft
3. 18:59
   Cybersecurity experts raise alarm after back-to-back data breaches

   Hacker News
4. 18:55
   IDScan confirms breach after hackers offer 153 million driver’s license scans for sale

   A notice dated September 4 but not widely shared shows that IDScan acknowledged a data breach but did not specify how many people were affected.

   The Record
5. 18:49
   Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script

   Human operator: don't touch CIS orgs. AI agents: look a squirrel!

   The Register·PaperCut
6. 18:48
   IDScan confirms data breach with more than 150M driver's licenses stolen

   Hacker News
7. 18:25
   Cyber Command turns to veteran of intelligence agencies for top AI role

   Ronzelle Green, most recently a senior official at the National Geospatial-Intelligence Agency, will be U.S. Cyber Command's chief AI officer.

   The Record
8. 18:13
   HPE security advisory (AV26-909)

   Serial number: AV26-909 Date: September 10, 2026 As of September 9, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: ClearPass Policy Manager (CPPM) Prior to or equal to 6.11.14 Prior to or equal to 6.12.8 HPE IceWall products Multiple versions and models The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HPESBNW05130 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking ClearPass Policy Manager (CPPM) HPESBMU05142 rev.1 - HPE IceWall products, Remote Bypass of Security Restrictions HPESBMU05147 rev.1 - HPE IceWall products, Denial of Service vulnerability HPE Security Bulletin Library

   Canadian Centre for Cyber Security
9. 18:00
   We've got one word for it, and it's usually the wrong one

   In this week's Threat Source newsletter, Joe explores why the word "burnout" often fails to capture the true toll of working in the cybersecurity industry and why we need better language to address it.

   Cisco Talos
10. 17:47
    ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

    A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An exposed system stays exposed. A package looks useful right up until it isn’t. Different stories, same basic problem: the path in was often already

    The Hacker News·Android