Latest security news

Thu, 10 Sept 2026

1. 12:20
   Critical NetScaler Vulnerability Exploited in Attacks

   Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3.

   SecurityWeek
2. 12:18
   Will AI kill us all within the next decade?

   AI researchers are warning that the technology could kill us all within the next decade, although they say the risk from current models is low.

   Malwarebytes Labs
3. 12:15
   FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors

   The new document appears to be part of a broader shift by the US government towards the proactive disruption of cyber threat actors

   Infosecurity Magazine
4. 12:10
   Palo Alto Networks security advisory (AV26-905)

   Serial number: AV26-905 Date: September 10, 2026 As of September 10, 2026, Palo Alto Networks is affected by vulnerabilities in the following products: Cloud NGFW All on AWS*, All on Azure* PAN-OS Multiple versions Prisma Access Multiple versions Prisma Browser Prior to 151.26.5.170 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing PAN-SA-2026-0012 Chromium: Monthly Vulnerability Update (September 2026) Palo Alto Networks Security Advisories

   Canadian Centre for Cyber Security·AWS, Palo Alto
5. 11:52
   Widened Scan Turns Up Fourth Rogue Claude Cyber Incident

   Anthropic is most concerned about Claude Mythos 5’s reckless behavior after recent incidents in which real systems were hacked.

   SecurityWeek
6. 11:45
   Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

   Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only "under specific conditions" that it has not described. One flaw affects Check Point's Security Gateways, its firewall appliances. The other affects those gateways and the Security

   The Hacker News
7. 11:41
   PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

   A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to independent reports from Blackpoint Cyber and GreyNoise, the activity originates from "45.142.193[.]132," an IP address that has been linked to

   The Hacker News·PaperCut
8. 11:33
   Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

   The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it, security firm Group-IB said in a report published on September 9. A work profile is a separate space that Android typically reserves for employer apps, and what's inside it is kept separate from everything in the personal space. That

   The Hacker News·Android
9. 11:22
   Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)

   State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC), which is used for centrally managing multiple Cisco Secure Firewall devices across a network. Two FMC vulnerabilities under active attack “Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software,” the company’s researchers confirmed on Wednesday. These are the above mentioned CVE-2026-20079 and CVE-2026-20316, which Cisco flagged … More →

   CriticalUsed in attacksHelp Net Security·Cisco
10. 11:20
    4.1 Million Impacted by AdaptHealth Data Breach

    In June 2026, hackers stole personal, health, and insurance information from AdaptHealth’s systems.

    SecurityWeek