Putin's comments echoed warnings Russia issued to NATO on Sept. 30, saying that it would be ready to use nuclear weapons if alliance members attempt to isolate the Russian exclave of Kaliningrad.
Chained Zammad flaws enabled session hijacking, code execution, and root escalation in seconds
Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organizations and threatening to publish it...
This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system does a little more than people expect. A...
Kyiv’s Institute for Nuclear Research of the National Academy of Sciences of Ukraine, which houses a research reactor, was struck by a Russian drone on Sept.…
Led by a "sanctioned and convicted criminal fraudster," and a state-owned Russian bank tied to the military, the A7 shadow network has helped Russian entities evade sanctions since 2024.
Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having...
The latest strike follows other attacks on the Southern Bridge on Oct. 1, where two Russian drones hit near the bridge's supports. This was the first time Russian drones have targeted one of the...
Kiteworks security advisory (AV26-988)
The teenager-run cybercrime group victimized roughly 500 organizations in less than two years. The post Authorities seize KillSec extortion group infrastructure, arrest 3 alleged members appeared...
RUSI wants procurement rethink that could put US suppliers under scrutiny too
Fortra security advisory (AV26-987)
The findings, released Thursday by Asymmetric Security, are just the latest example of rogue behavior spurred by OpenAI’s software.
MISP security advisory (AV26-986)
n8n security advisory (AV26-985)
Your invite to a fake AI policy advisory committee has strings attached
Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on...
The first combat use of FP-7 is a significant milestone in what has been a long road to developing an indigenous ballistic missile. The post Ukraine Claims First Combat Use Of FP-7 Ballistic...
Google security advisory (AV26-984)
The jet-black Russian munition slammed into the Presidium building of Ukraine's National Academy of Sciences, an iconic Tsarist-era structure right in the center of Kyiv, setting the building on...
Key developments on Oct. 1:Russian losses soar by 46% during 2026Russian drones strike Kyiv school, key bridge linking eastern, western banks of cityRussian drone strikes Kyiv nuclear institute...
In this week’s edition, Amy reflects on the importance of prioritizing family and personal well-being over the pressure to remain constantly productive.
Traverse barriers and checkpoints in the occupied West Bank—your choices reflect the reality of nearly 3.5 million Palestinians who live there.
The Russian tugboat Sarmat spent nearly a week operating near critical underwater cables off the Danish coast, according to observations shared by open source…
The Kyiv Independent’s new Companion Collection 🐾 brings together matching items for people and their pets while supporting animals rescued from Ukraine’s front-line communities.
On the night of Aug. 1, Olena Rozhniativska and her 18-year-old daughter Kateryna rushed to a bomb shelter as ballistic missiles tore into Kyiv during one of Russia's mass attacks. They were...
Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take...
A researcher at the Foreign Policy Research Institute analyzed satellite and declassified intelligence imagery of a base on the Kola Peninsula belonging to the…
A key House lawmaker focused on federal cybersecurity is warning that CISA’s recent workforce reduction has left the agency unable to prove it can counter surging, AI-driven threats against...
Asked what the missile struck, Zelensky's communications advisor told the Kyiv Independent: "We're not telling."
Redvanovich, who was 25 years old, served as the commander of the "Ghost of Kyiv" 40th Tactical Aviation Brigade.
Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorce statistics. [...]
A vulnerability has been discovered in Kiteworks EPG (Email Security Gateway) that could allow for arbitrary code execution. Kiteworks Email Protection Gateway (EPG) is a cloud-based security...
Attackers were probing the mail server flaw weeks before it had a CVE to its name
A vulnerability has been discovered in WordPress that could allow arbitrary code on the web server. WordPress is a free, open-source content management system (CMS) that allows you to build and...
Russian-Israeli military journalist Serhiy Auslender said on Oct. 1, citing his own source and noting that the information required further verification, that there had been an assassination...
OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from its artificial intelligence (AI) models. A...
Russian exports of diesel fuel and gasoil through the Black Sea fell to zero in the week ending Sept. 24, the first such occurrence since records began,…
Institutions told to trace who is really financing their work or risk falling foul of national security law
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited...
[Control systems] CODESYS security advisory (AV26-983)
Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and...
Replacing letters with symbols still doesn’t make it good.
The commander of a Ukrainian uncrewed ground vehicle unit gives us exclusive insights into how vehicles were designed or modified for amphibious combat operations. The post Inside Ukraine’s First...
HPE security advisory (AV26-982)
A new benchmark of eight leading AI systems shows that an intelligent model still needs a good context-rich harness.
WatchGuard security advisory (AV26-981)
China controls more than 70 percent of the world’s supply of several critical minerals, and it has shown a willingness to weaponize that dominance through export controls. The resulting price...
In a stance that puts him at odds with much of his party and the White House, Sen. Josh Hawley, R-Mo., used a Senate hearing on Wednesday to call for new artificial intelligence regulations,...
The strike, which occurred at around 6:18 p.m. local time on Sept. 30, sparked a fire that was quickly extinguished. No one was injured in the attack, according to a statement.
The town of Oleshky and the surrounding district in southern Kherson Oblast in Ukraine are under a total blockade imposed by Russian occupation forces.Since May 26, 2026, no humanitarian aid has...
OpenSSL security advisory (AV26-980)
Cybersecurity firm Proofpoint said TA419 impersonated officials and AI industry figures in an effort to gain access to cloud accounts held by U.S. think tank, university and legal-sector experts....
The nation’s infrastructure relies on information systems to support its varied functions. This includes the networked Internet of Things (IoT) and operational technology (OT) devices that...
The company of Poland's richest man raised 500 million zloty as it seeks to develop a fleet of BWRX-300 reactors in Poland and beyond.
According to this year’s Microsoft Digital Defense Report, government agencies and services were the sector most impacted by cyber threats in 2026, accounting for 27% of observed activity, up from...
Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to grow more interconnected. The post Insights from the 2026 Microsoft Digital...
The White House has nominated Lt. Gen. David N. Miller Jr. to lead U.S. Space Command, succeeding Gen. Stephen Whiting, who is expected to retire by January 2027. A notice of Miller’s nomination...
In July 2026, TA419 impersonated multiple individuals, including a former member of the White House Office of Science and Technology Policy leadership team, in credential phishing campaigns...
From Sept. 18 to 20, Russia held its first State Duma elections since the start of the full-scale invasion of Ukraine. The official results — nearly 58% in favor of the Kremlin’s ruling United...
JetBrains security advisory (AV26-979)
Two-thirds report immediate recovery, although teachers remain divided over whose job security is
An international group of authorities from nine countries, coordinated by Eurojust and Europol, has successfully shut down a ransomware group responsible for almost 1 000 attacks worldwide. During...
“There are paths that lead into darkness, and once you set foot upon them, the way back is never certain. Somewhere ahead, the dragon waits.” One of the latest operations uncovered involving...
On Sept. 30, the offices of the Prosecutors General of Russia, Belarus, Kazakhstan, Kyrgyzstan, Tajikistan, and Uzbekistan signed an agreement on countering…
Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled out to a set of trusted cyber defenders through its Fairwind...
On Sept. 29, the administration of Penal Colony No. 6 in St. Petersburg's Obukhovo district confiscated books by foreign authors from inmates, the city outlet…
AI sovereignty is not a zero-sum game, but many governments now believe it is. Cloudflare's answer: more local open-source models, model-agnostic security tools, and a commitment to giving nations...
Australia putting its new long-range air-to-air missile to the test during Gray Flag makes a lot of sense. The post AIM-260 JATM Missile Spotted On Australian Super Hornet appeared first on TWZ.
China-nexus group behind Warlock is still exploiting SharePoint vulnerabilities, attacking organizations in Portuguese and Spanish-speaking countries, hitting critical infrastructure, government,...
The Huntress Tragic Quadrant ranks the cyber threats hitting businesses most, from RMM abuse to AiTM, ClickFix, using real SOC data.
The Information Commission replaces the Information Commissioner, putting statutory powers under collective control
TIKTOUK brings together WordPress probing, collection of exposed configuration data, recovery of encrypted email credentials, and JavaScript secret scanning. Its two Python components and Go-based...
The answer to AI-accelerated threats is now available worldwide
A technical walkthrough from runtime preparation and network-share discovery to concurrent file encryption DragonForce is a Ransomware-as-a-Service (RaaS) operation that first surfaced in...
The 60-year-old Farion was a prolific figure in Ukraine who devoted her life to popularizing and defending the Ukrainian language and culture. She was shot in the head near her home on July 19, 2024.
The aim of the experiment is to help the U.S. better spot a kind of nuclear testing that China is alleged to be conducting in secret. The post U.S. Mimics “Decoupled” Nuclear Detonation By Blowing...
"Thank you to all our defenders who are working to return Russia's sick war to where it came from," President Volodymyr Zelensky said on Telegram.
Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals....
Younger workers often overlooked for senior roles due to historical issues and fears they’ll get pregnant, says survey
Cisco security advisory (AV26-978)
Researchers at Northeastern University, in collaboration with Consumer Reports, evaluated how much modern cars spy in their drivers: To determine this, CR dug through thousands of pages of...
Cryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last week exploited a zero-day flaw in third-party security products, citing ongoing investigation...
New data from Google Threat Intelligence Group (GTIG) found that artificial intelligence is changing the pace of vulnerability... The post Google GTIG finds AI accelerating vulnerability discovery...
A new report from the U.S. Government Accountability Office (GAO) found that industry representatives from three critical infrastructure... The post GAO finds overlapping federal cyber regulations...
Intelligent automation company Gluware announced Gluware IoMT Exposure Management, bringing its proven automation platform to the Internet of... The post Gluware extends automation platform to...
MetaMask on Thursday said it's responding to what it described as an "ongoing security incident" impacting part of its infrastructure. "We are actively addressing and remediating the issue...
Bitdefender, a European-based company, announced a partnership with Aruba S.p.A., one of Italy’s IT, cloud and data center... The post Bitdefender, Aruba bring sovereign cybersecurity to critical...
The September figure surpassed previous summer highs of 42,860 in July and 42,020 in August.
An international law enforcement operation dubbed "Operation KillSwitch" seized the KillSec ransomware gang's data leak site and servers, led to three arrests, and identified a 16-year-old as the...
The attack took place at around 12:20 p.m. local time, as cars and a metro train continued to cross the bridge.
Image: Shutterstock What’s new: A discussion of unmanned aircraft traffic management and the impact of low navigation integrity/spoofing. Why it’s important: UTM (Unmanned Aircraft System Traffic...
A U.K. government press statement describes the decision to facilitate Tokyo and Seoul's continued import of fossil fuels as "part of the U.K.'s work with international partners to support their...
Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt theft of...
Zero Trust can verify users once they are established, but onboarding creates a gap where organizations must decide who to trust before strong authentication exists. Specops explains why identity...
What really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower and riskier. From deception and behavioral detection to breaking attack...
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security...
Asked what is holding Ukraine back from EU membership, 32% cited corruption in central government bodies. Another 29% said the EU or some of its member states are unwilling to accept Ukraine.
In an exclusive interview with WIRED, Paragon Solutions CEO Andrew Boyd reveals the limits of the company’s promise to keep bad actors from abusing its powerful espionage tool.
In June 2026, Zscaler ThreatLabz identified a new malware family, tracked as SloppyRAT, that is likely leveraged by a ransomware-related threat actor. ThreatLabz observed SloppyRAT being delivered...
The Air Force said Russia attacked Ukraine with 107 drones, including Shahed-type drones, Gerbera drones, and decoys. Sixty-three of the drones were jet-powered.
"Russia attacks Ukrainian ports, blocks Ukraine's grain exports, and then looks for new routes for its own grain," Estonian Foreign Minister Margus Tsahkna said on X. "Estonia will not provide one."
Access to abortion is tightly restricted in Poland, which has some of the world's strictest laws.
The South African state-owned company that provides air traffic control (ATC) and weather operations for approximately 10% of the world's airspace discovered ransomware-linked malware in an...
Microsoft announced that Windows settings backup and restore is now enabled by default on all Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems upgraded to Windows 11 26H2. [...]
The number includes 1,900 casualties that Russian forces suffered over the past day.
October 1, 2026 According to detection statistics collected by Dr.Web Security Space for mobile devices, Android.Proxy trojan activity surged in the third quarter (Q3) of 2026. These malicious...
The Pentagon's Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data after breaching the Pentagon's human resources management system...
On Thursday, cryptocurrency wallet provider MetaMask has disclosed an ongoing infrastructure security incident affecting some of its infrastructure. [...]
Kyiv fears that once Russia completes the satellite constellation, Moscow could use the network to obtain real-time information for strikes against Ukraine.
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by PortSwigger.You can hear a podcast...
October 1, 2026 According to statistics collected by the Dr.Web anti-virus, in the third quarter (Q3) of 2026, users encountered various threats 14.86% less often, compared to the second quarter...