Daily Recap, The coverage highlights how agentic AI is speeding up both attack and defense, alongside emerging legal exposure tied to AI-driven intrusions and ongoing investment in keeping AI agents from “internet misadventures.” It also reports critical fixes across GitLab’s AI Gateway and Fortra/Dell products, while noting espionage tradecraft including the Antino backdoor and targeted phishing that impersonated the White House and Anthropic. #Microsoft #GitLab #Fortra #BoKS #Dell #Dell CSM #Antino #Outlook #OneDrive #Pegasus #Pegasus #Vicksburg #Warlock #SharePoint #Frontline Education #ALPR #Tren de Aragua #EDR #CFAA #Anthropic
Category: Cyber Security News
Last week’s security news was dominated by active exploitation of multiple zero-days in Citrix NetScaler, Apple, Cisco SD-WAN, and FortiMail, alongside a major breach of OpenInfra Europe’s JFrog Artifactory and a reported FBI portal compromise linked to ShinyHunters. The roundup also highlighted growing AI-related risks, including malicious Custom GPT abuse, leaked company screenshots from coding agents, and research showing AI systems can expose secrets and weaken security controls. #Citrix #NetScaler #Apple #Cisco #FortiMail #OpenInfraEurope #JFrogArtifactory #ShinyHunters #DIVD #KillSec
TA419, a China-nexus espionage group, has been using credential phishing campaigns to target AI experts at U.S. think tanks, universities, and legal organizations by impersonating economists, AI policymakers, and a prominent Anthropic employee. The group uses shortened URLs, multi-stage redirection, and a Frameless BitB adversary-in-the-middle setup to steal Microsoft credentials and…
A suspected ShinyHunters member known as “Rey” has allegedly been detained in Jordan and is reportedly cooperating with the FBI to identify other members of the group. The case follows fresh arrests and revelations about ShinyHunters’ attacks on organizations including the FBI portal, Cl0p’s darknet site, and more than 140 victims,…
A suspected ShinyHunters member known as “Rey,” identified as Saif al-Din Khader, has reportedly been detained in Jordan and is now cooperating with the FBI and other law enforcement agencies. The reported arrest comes amid intensified action against ShinyHunters following claims of an FBI breach, as the group’s infrastructure appeared to go offline even while a new data leak site later surfaced. #ShinyHunters #SaifalDinKhader #Rey #FBI #Jordanianauthorities
Warlock, also known as Gold Salem, Longlegs, and Storm-2603, is still exploiting Microsoft SharePoint vulnerabilities to attack organizations in Portuguese- and Spanish-speaking countries across Europe, Africa, and Latin America. The group has targeted critical infrastructure, government, and education sectors while using web shells, BYOVD, legitimate tools, and SYSVOL staging to disable…
MI5 has warned that more than 100 U.K.-linked academics may have helped China’s Ministry of State Security strengthen its intelligence capabilities through research funded by CGTRI, which the agency assesses is a front company for the MSS. The alert urges U.K. institutions to review collaborations with CGTRI and warns that continued…
The Technical University of Denmark (DTU) says attackers used compromised credentials to access its DTUBasen identity and access management system and potentially exposed data for up to 200,000 users. The breach may have revealed CPR numbers, names, addresses, profile photos, and next-of-kin details, prompting warnings about identity fraud and targeted phishing. #DTU #DTUBasen #CPRnumbers
![Cybersecurity News | Daily Recap [03 Oct 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [03 Oct 2026]")
Daily Recap, Critical patch activity highlighted a FortiMail zero-day reportedly exploited in the wild, along with Dell CSM issues that could grant admin privileges and Kiteworks code injection flaws; WordPress malware also demonstrated self-repair behavior by rebuilding from files, database, and shared memory after cleanup. On the threat front, autonomous AI agents attempted SQL injection against U.S. and Canadian government sites, while law enforcement actions targeted the KillSec ransomware operation and officials reported additional cloud and identity abuse spanning hijacked social accounts and a MetaMask incident.
#FortiMail #FortiMailWrites #DellCSM #Kiteworks #WordPress #AutonomousAIAgents #SQLInjection #KillSec #MicrosoftX #MetaMask #Warlock #SharePoint #GCP #YAML #Osavul
Cybersecurity is evolving to keep pace with cloud expansion, AI, distributed systems, and the growing complexity of modern digital environments. The report shows how organizations are shifting toward continuous visibility, stronger identity control, faster remediation, and unified protection across identities, endpoints, cloud, and connected devices. #KeeperSecurity #Cribl #Automox #Nisos #SurfAI #AdaptiveSecurity…
Fortra has patched eight vulnerabilities in Core Privileged Access Manager (BoKS), including three critical flaws that could lead to authentication bypass, command injection, and remote memory corruption. The issues affect BoKS Manager deployments, with notable risks tied to Active Directory service account management and network-accessible interfaces such as BCC and WSI….
doxx.net has raised $38 million in a Series A round led by Andreessen Horowitz to expand its Agentic Defined Networking platform for humans and AI agents. The platform combines private, serverless networking with DNS-level threat protection to block malicious destinations, phishing sites, and malware before connections are made. #doxxnet #AndreessenHorowitz #AgenticDefinedNetworking…
A ransomware attack has temporarily shut down the computer systems of Vicksburg, Mississippi, affecting utility payments but not emergency services. The city is working with the FBI, DHS, state officials, and private cybersecurity experts to investigate whether any personal or confidential information was accessed. #Vicksburg #FBI #DepartmentofHomelandSecurity…
Two new congressional bills show that bipartisan backlash against AI-powered ALPR cameras has intensified, putting Flock and other license plate reader companies under growing political pressure. Lawmakers and privacy advocates argue the systems enable mass surveillance and abuse, while Flock says the technology needs guardrails, oversight, and support for public safety….
A California federal judge dismissed a lawsuit brought by El Faro journalists whose phones were targeted with Pegasus spyware, ruling the case lacked jurisdiction in California. The Knight First Amendment Institute said Pegasus was used against Carlos Dada and colleagues at least 226 times, and it plans to appeal the decision….