Information

Cisco Patches a Dozen Critical Vulnerabilities

Cisco on Wednesday announced patches for 35 vulnerabilities across its products, including over a dozen critical-severity bugs. A fresh Meraki security hardening release fixes multiple bugs grouped together under seven CVEs, based on the underlying weakness type. The most severe of these is CVE-2026-76464, which covers memory issues such as buffer overflows and out-of-bounds writes. Cisco also resolved eight bugs in License On-Prem, including five critical-severity issues. Two of them could lead to unauthorized access…

Read More

The quest for simplicity: Why SMBs want advanced protection without the complexity

Cybersecurity has never been easy. Threats evolve at breakneck speed. Corporate attack surfaces continue to expand with each new digital investment. Regulatory requirements add extra pressure on stretched teams. And behind it all, the unpredictability of human nature means there is no such thing as 100% security. But the market for security solutions doesn’t make things any easier for SMBs. Smaller organizations usually have fewer resources and less expertise to throw at the problem than…

Read More

Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts

Southern Company is notifying roughly 400,000 customers that their utility account information was accessed by an unauthorized third party through its online customer portal. The Atlanta-based energy holding company serves more than 9 million customers through electric utilities in three states and natural gas distribution businesses in four. Its electric subsidiaries are Georgia Power, Alabama Power and Mississippi Power. Roughly 300,000 of the affected accounts belong to Georgia Power customers. According to Southern Company, the…

Read More

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle “Rey,” was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by…

Read More

FBI Blames Contractor’s Missed Patch for ShinyHunters Breach

The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees, Reuters reported on Tuesday, citing two people familiar with the matter. The FBI has not publicly named the contractor or the organization involved. However, a senior bureau official told Reuters that its review so far points to a security patch that had not been applied by the contractor responsible for the affected system. “To date,…

Read More

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

Google has temporarily closed its Open Source Software Vulnerability Reward Program (OSS VRP) to product vulnerability submissions, saying a growing number of automated reports, most of them invalid, prompted the move. The pause was announced on X on October 1. “This pause is due to a significant rise in automated submissions, the vast majority of which are not valid,” Google said. Only product vulnerabilities are covered by the pause. According to Google, it has no…

Read More

Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force

President Donald Trump on Sunday tapped Jay Clayton, his director of national intelligence, to lead a new government task force on artificial intelligence. Trump is calling it the “Super Intelligence Force,” because he has tried to rebrand AI as “super intelligence.” The announcement comes after Trump hosted top executives of AI companies at the White House last week and said they had signed a voluntary accord that would effectively self-police the development of the technology.…

Read More

doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures

Miami, FL-based doxx.net has raised $38 million in a Series A funding round led by Andreessen Horowitz, with participation from Animo Ventures and Focal.vc. The firm was founded in 2025 by serial founder and hacker-at-heart Barrett Lyon, and it operates across six continents. The new funding was announced at the same time as the doxx.net Agentic Defined Networking (ADN) platform, currently in open beta, was announced. This platform gives agents an environment with defined connectivity…

Read More

In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats

SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers stay well-informed about the evolving cybersecurity environment. Here are this week’s highlights:  Microsoft threat report sees phishing triple as exploit windows shrink Microsoft’s 2026 Digital…

Read More

This month in security with Tony Anscombe – September 2026 edition

Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year’s worth of security patches in one go – here’s how to keep pace 30 Sep 2026 As another month draws to a close, ESET Chief Security Evangelist Tony Anscombe reviews some of the top cybersecurity stories that have made the news over the past 30 days while offering insights that they hold for your or your company’s cyber-defenses.…

Read More