Latest security news

Fri, 11 Sept 2026

1. 09:41
   Surfshark Systems Targeted by Hackers

   A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors.

   SecurityWeek
2. 09:39
   Microsoft fixes Teams, Outlook launch failures on ARM Windows PCs

   Microsoft has fixed a bug that prevented Teams and Outlook from launching on ARM-based Windows devices after installing updates released since the August 2026 Patch Tuesday.

   BleepingComputer·Microsoft, Windows, Outlook
3. 09:30
   Most Organizations Skip Permissions Reviews Before Deploying AI Tools

   A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a permission review before doing so

   Infosecurity Magazine·Microsoft
4. 08:47
   Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion

   Anthropic reveals how criminal groups are increasingly targeting AI vendors' own infrastructure, including to steal a pre-release Claude model.

   SecurityWeek
5. 08:18
   PaperCut Flaws Exploited in AI-Powered Attacks

   A Russian threat actor used AI to build, test, and deploy exploits against hundreds of organizations worldwide.

   SecurityWeek·PaperCut
6. 07:55
   Trezor: 347,000 users targeted in phishing attacks after Brevo breach

   Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,500 users who clicked an embedded malicious link.

   BleepingComputer
7. 07:31
   Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

   Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report. Wiz saw the attacks between August 15 and September 8. JFrog had fixed both flaws before then, so only servers that had not been updated were open to them.

   The Hacker News
8. 07:14
   China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

   A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims' computers, security company Gen Digital said in research published Thursday. The attack started with a crafted link and ended with the attacker able to do anything the logged-in user could do. Tencent, which owns

   The Hacker News·Windows
9. 06:48
   Conti ransomware gang member sentenced to 4 years in prison

   A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022.

   BleepingComputer
10. 06:46
    PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

    PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation. The software development company said PaperCut NG/MF versions 26.0.5, 25.0.13 and 24.1.10 are now available for customers to download. "These are Regular Maintenance Releases (MR) that

    The Hacker News·PaperCut