Latest security news

Thu, 10 Sept 2026

1. 10:00
   The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

   Learn how root access on a compromised K8s node allows attackers to utilize SPIFFE/SPIRE metadata to spoof and harvest co-located workload identities.

   Unit 42
2. 09:59
   Copyright scammers get Instagram accounts suspended and demand payment

   Scammers are filing fraudulent copyright complaints to suspend Instagram accounts, then demanding payment to withdraw them.

   Malwarebytes Labs
3. 09:51
   Fake GTA 6 download delivers malware-packed bundle to impatient gamers

   Grand Theft Auto VI (GTA 6) is still three months from release, but cybercriminals are not waiting for the launch date. Security firm Huntress found malware disguised as a leaked copy of the game, aimed at fans hoping to get their hands on it early. The sample Huntress pulled apart contained several different malware components. Researchers described an opportunistic bundle, “throwing everything they can at the users who attempt an installation,” a package that includes … More →

   Help Net Security
4. 09:10
   CISA: WatchGuard RCE flaw now exploited in ransomware attacks

   The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critical WatchGuard Firebox firewall vulnerability, which it flagged as actively exploited in December.

   BleepingComputer
5. 09:00
   GuardBreaker: Derailing AI-assisted malware analysis with a code comment

   LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor

   WeLiveSecurity
6. 08:45
   Anthropic Reveals Yet Another Cybersecurity Incident

   Anthropic has found a fourth case of its model accessing third-party systems without authorization

   Infosecurity Magazine
7. 08:18
   Apple is building photo verification for the people who need it most

   Apple has introduced Apple Reference Image, an opt-in feature designed to verify the authenticity of photos taken with iPhone 18 Pro models. Apple Reference Image provides users with an unalterable reference photo, visually confirming what the sensor saw at the moment of capture. (Source: Apple) Apple said the technology would be particularly important for photojournalists and photographers, as well as everyday viewers. The company will also add support for the SynthID standard in a software … More →

   Help Net Security·Apple
8. 08:08
   Microsoft fixes bug that wiped Windows desktop settings

   Microsoft says the September 2026 Patch Tuesday updates fix a known issue causing desktop settings to be lost or reset on some Windows devices.

   BleepingComputer·Microsoft, Windows
9. 08:00
   OFAC Sanctions Chinese Scam Platform Xinbi Guarantee

   The US Treasury has placed sanctions on notorious Chinese cybercrime marketplace Xinbi Guarantee

   Infosecurity Magazine
10. 07:12
    Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

    Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI gateway, the software a company puts between its applications and the model providers it pays for. That key is the gateway's administrator credential. Anyone who holds it can read every

    The Hacker News