Latest security news

Yesterday · Tue, 15 Sept 2026

1. 15:30
   Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data

   A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems.

   SecurityWeek
2. 15:23
   MacOS 27 - First Boot, (Tue, Sep 15th)

   I have not done this type of diary in a while: What traffic will you see from a system on boot, before a user logs in? I just took a quick look at macOS 27 "Golden Gate" to see what traffic you should expect. Here are some of the highlights:

   SANS Internet Storm Center
3. 15:23
   BambooToken Malware Uses MQTT to Control Windows and Linux Systems

   Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at least February 2023 and put to use in attacks targeting organizations across Asia and South America.

   The Hacker News·Windows, Linux
4. 15:15
   Most Fraudulent Hires Receive Credentials Before Detection

   A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations

   Infosecurity Magazine
5. 15:10
   GNU security advisory (AV26-923)

   Serial number: AV26-923 Date: September 15, 2026 As of September 15, 2026, GNU is affected by vulnerabilities in the following product: libextractor Prior to v1.15 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. libextractor CVE-2026-91752: GNU libextractor Stack Overflow via OLE2 GNU Libextractor

   Canadian Centre for Cyber Security
6. 15:09
   Zelensky appoints former police chief to lead Ukraine’s cyber coordination center

   Ihor Klymenko, who has experience in law enforcement and as interior minister, will run Ukraine's National Cybersecurity Coordination Center.

   The Record
7. 15:00
   Who's governing your AI? A trust framework for enterprise agents and models

   SPONSORED FEATURE: DigiCert wants to hand every agent a passport, complete with an expiry date and a named human owner

   The Register
8. 15:00
   BambooToken malware controls Windows and Linux systems via MQTT

   A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems.

   BleepingComputer·Windows, Linux
9. 14:47
   Companies’ AI strategies don’t account for agentic tools

   Businesses are taking AI governance seriously, but their plans lag behind the technology they’re using, according to an EY survey.

   Cybersecurity Dive
10. 14:45
    Hackers target WordPress sites via third-party WooCommerce plugin

    Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor.

    BleepingComputer·WordPress