Blahalla

12 Best Passwordless Authentication Solutions Compared (2026): Features & Pricing

gbhackers.com · 14 days ago

The article compares 12 passwordless authentication solutions across workforce, product, hardware, and OEM deployment lanes. It recommends Microsoft as the best starting point for workforces leveraging Windows Hello and passkeys with existing licensing. For specialized needs, the analysis identifies HYPR for dedicated platforms and Stytch for product-login scenarios.

Alleged ShinyHunters Leader Arrested in Jordan

www.securityweek.com · 14 days ago

Reportedly, the FBI detained Saif al-Din Khader, known as Rey, in Jordan, believing him to be the leader of the ShinyHunters extortion group. Khader is now cooperating with the FBI to identify and locate other members of the group. ShinyHunters previously hacked and defaced FBIJobs.gov, boasting about stealing 2-3 terabytes of data.

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

thehackernews.com · 14 days ago

Citrix released security updates for a high-severity flaw, CVE-2026-88779, impacting NetScaler ADC and Citrix NetScaler Gateway. This memory overflow vulnerability carries a CVSS score of 8.7 out of 10.0.

GlassWorm Supply Chain Attack Hides Malware Inside VS Code Color Themes

gbhackers.com · 14 days ago

GlassWorm exploited VS Code color themes via the Marketplace. Malicious loaders in extensions used AES-256-CBC and queried Solana transaction memos.

Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign to Gain Remote Access

gbhackers.com · 14 days ago

Malware detection is being bypassed by abusing legitimate Remote Monitoring and Management (RMM) software. Attackers used a genuine, digitally signed ConnectWise ScreenConnect client in a recent phishing campaign. They configured the executable to establish remote access to the attacker's infrastructure, enabling potential full remote control of the compromised endpoint.

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

www.securityweek.com · 14 days ago

Citrix issued a zero-day alert for CVE-2026-88779 in NetScaler ADC/Gateway. Attackers used shell commands via auth requests causing DoS. CISA added CVE-2026-88779 to its KEV catalog, following prior flaws like CVE-2026-88771 and CVE-2026-88772. Agencies must patch now.

Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940

gbhackers.com · 14 days ago

Microsoft released a revised security update package for on-premises Exchange Server, fixing CVE-2026-96940. This V2 update applies to Exchange Server Subscription Edition, 2019, and 2016, mandating enrollment in the Extended Security Update program. Microsoft advised administrators to check all on-premises components in hybrid environments, ensuring all mailboxes remain protected.

South Korea Orders Investigation Into AI-Powered Cyberattacks on Major Banks

gbhackers.com · 14 days ago

South Korean President Lee Jae Myung ordered a comprehensive investigation after data breaches at major financial institutions. Shinhan Bank, KB Kookmin Bank, and others reported exposing customer records, including incomes and resident registration numbers. Authorities suspect attackers may use AI tools, prompting an investigation into the ARTEX AI penetration testing framework.

Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications

gbhackers.com · 14 days ago

Google's PageBreak, an internal AI security agent, found and confirmed over 500 cross-site scripting (XSS) flaws in company web apps. This project goes beyond standard AI vulnerability checking by using deterministic testing to confirm findings. PageBreak proves flaws by running specific payloads against a live environment, giving a near-zero false-positive rate.

Citrix NetScaler SAML Vulnerability Enables Unauthenticated Remote DoS Attacks

gbhackers.com · 14 days ago

Citrix released emergency updates addressing CVE-2026-88779, a high-severity memory overflow vulnerability in NetScaler ADC and Gateway. This flaw enables unauthenticated remote attackers to cause persistent Denial-of-Service conditions. The vulnerability specifically impacts appliances utilizing SAML authentication configurations.

Citrix patches NetScaler SAML zero-day exploited in attacks

www.bleepingcomputer.com · 14 days ago

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution.

Sentence Tossed After A.I. Video of Victim ‘Forgiving’ His Killer Is Played

www.nytimes.com · 14 days ago

An appellate court in Arizona threw out the prison sentence of a man convicted of manslaughter after an A.I.-generated video of his victim was played in court.

Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force

www.securityweek.com · 15 days ago

The announcement comes after Trump hosted top executives of AI companies at the White House last week.

Anthropic asks Claude users to share voice data for AI model training

www.bleepingcomputer.com · 15 days ago

Anthropic has started asking Claude users to voluntarily share their voice conversations to help train and improve its AI models.

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members

thehackernews.com · 15 days ago

A suspected member of the ShinyHunters digital extortion group, who goes by the online alias "Rey," has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar with the matter. Rey, whose real name is Saif ‌al-Din Khader, is said to have been brought into custody on September 29, 2026, cooperating with the U.S.

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing

thehackernews.com · 15 days ago

A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations.

Post quantum migration is the thing nobody in SMB is talking about... and timelines make that a problem

www.snippipedia.com · 15 days ago

NIST finalized three post-quantum cryptography standards in August 2024... FIPS 203, 204, and 205... replacing RSA and ECC for key exchange and digital signatures Most enterprise security teams are at least tracking this. most small SaaS companies are not. and SMB migration timelines run 3, 4 years for discovery and planning alone, extending to 8, 10 years for full completion.

Google Gemini could soon get full access to your Mac’s files, apps and the web

www.bleepingcomputer.com · 15 days ago

Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time.

OpenAI safety leader quits, warning AI company’s culture is ‘broken’

www.theguardian.com · 16 days ago

David Robinson joins other insiders in urging industry to take more care over rapidly developing technology A safety leader at OpenAI has quit the company, warning that its culture was broken and that AI firms were not “being nearly careful enough” about developing the technology.

ShinyHunters hacker reportedly detained in Jordan, aiding FBI

www.bleepingcomputer.com · 16 days ago

A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with the FBI to help locate other members of the extortion group.

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

thehackernews.com · 16 days ago

The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing's state security service.

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

thehackernews.com · 16 days ago

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat Hunter Team, has hit critical infrastructure, government, and education organizations.

Danish university DTU breach exposes data of up to 200,000 people

www.bleepingcomputer.com · 16 days ago

The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data.

doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures

www.securityweek.com · 16 days ago

doxx.net’s new ADN platform prevents agentic misadventure while the agent is operating under the user’s authority.

Fortra Patches Critical Vulnerabilities in BoKS

www.securityweek.com · 16 days ago

The bugs could lead to authentication bypass, shell command execution, and memory corruption.

The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations

thehackernews.com · 16 days ago

Featuring: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. As organizations manage more identities, devices, data, and internet-facing infrastructure, security is shifting toward continuous visibility, control, and the ability to respond to risk at scale.

An A.I. Songwriting Experiment: Humans Against the Machine

www.nytimes.com · 16 days ago

Five humans convened for a weekend to create new music from scratch. Could they do better than A.I.? Could you even tell the difference?

N0n ransomware: what you need to know

www.fortra.com · 16 days ago

N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.

Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices

gbhackers.com · 16 days ago

A newly identified IoT botnet, Cling, disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to originate from Google’s public STUN infrastructure. The technique enables attackers to manage compromised internet-facing devices while blending activity into routine NAT-traversal traffic used by real-time communications platforms.

RCE and bad crypto in Internxt's 'post-quantum' cloud storage

schaerli.org · 16 days ago

Internxt is a post-quantum secure encrypted cloud storage provider which is open-source and has passed multiple independent audits. I reviewed their code and found that post-quantum security should have been the least of their problems. Clicking a link in your browser could trigger remote code execution on the desktop app or leak your long-term encryption keys to an attacker-chosen URL.

Microsoft Warns ClickFix Attacks Use Fake CAPTCHA Lures to Execute Malicious Commands

gbhackers.com · 16 days ago

Microsoft Threat Intelligence has identified a ClickFix campaign in which compromised websites use fake CAPTCHA-style verification prompts to trick Windows users into executing malicious commands.

Critical GitLab AI Gateway Flaw Lets Attackers Execute Arbitrary Commands

gbhackers.com · 16 days ago

GitLab has issued emergency security updates for a critical vulnerability in its Self-Hosted AI Gateway that could allow authenticated attackers to execute arbitrary commands on vulnerable AI Gateway deployments. The flaw, tracked as CVE-2026-90970, carries a CVSS severity score of 9.9 out of 10. The company released GitLab AI Gateway versions 19.2.4, 19.3.2, and 19.4.

AWS AI Agent Vulnerabilities Let Attackers Bypass Authentication and Steal Credentials

gbhackers.com · 16 days ago

AWS has released security fixes for four vulnerabilities affecting its open-source Loom AI agent orchestration platform and Amazon SageMaker Unified Studio. The flaws could allow attackers to bypass authentication, steal OAuth2 tokens and temporary cloud credentials, access internal services, and execute arbitrary code in another user’s SageMaker environment.

Citrix NetScaler Appliances Reboot Repeatedly After 0-Day Security Update

gbhackers.com · 16 days ago

Citrix NetScaler administrators report repeated appliance crashes and forced reboots after deploying emergency updates for recently disclosed zero-day vulnerabilities, with the disruption now linked to a newly observed issue affecting SAML authentication deployments. The reports involve internet-facing NetScaler ADC and Gateway systems running patched releases, including version 14.1-73.

A police search using Flock was a form of ‘mass surveillance,’ judge rules

www.washingtonpost.com · 16 days ago

A federal judge said that police conducted an “unconstitutional warrantless search” by using Flock cameras to reconstruct a woman’s travels without probable cause.

Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing

www.schneier.com · 16 days ago

The EU is recommending import controls to combat unregulated squid fishing in the Southwest Atlantic. I’m not optimistic. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

Elon Musk splits with longtime business confidante, co-parent ‘with no warning’

www.washingtonpost.com · 16 days ago

Shivon Zilis, the mother of four children with Musk, said their breakup was sudden but wished him the best.

RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail

www.darkreading.com · 16 days ago

The offensive cyber operations startup looks to evolve red teaming beyond traditional methods to simulate attackers' increasingly advanced capabilities.

Frontline Education breach exposes school district employee data

www.bleepingcomputer.com · 17 days ago

Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers.

Warlock ransomware breach SharePoint in water, telecom operator attacks

www.bleepingcomputer.com · 17 days ago

The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access.

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

thehackernews.com · 17 days ago

A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gateway need to act. The flaw is fixed in gateway versions 19.2.4, 19.3.2, and 19.4.1.

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

thehackernews.com · 17 days ago

Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the deployment of a previously undocumented backdoor codenamed Antino.

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

thehackernews.com · 17 days ago

Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems. The vulnerabilities are listed below - CVE-2026-63688 (CVSS score: 10.

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

www.darkreading.com · 17 days ago

One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported attacks prior to releasing a patch for its product.

Bypassing Secure Boot via Unbounded RLE8 Splash Images in U-Boot (CVE-2026-71972)

pop.byteray.co.uk · 17 days ago

When analysing firmware attack surfaces, image decoders built into bootloaders get less scrutiny than cryptographically verified OS kernels. If image parsing happens before signature verification, any memory corruption in the parser breaks the secure boot trust model. researchers analysed U-Boot's video subsystem (drivers/video/videobmp.

Trump expected to name intelligence chief Jay Clayton as new AI czar

www.washingtonpost.com · 17 days ago

The appointment comes after the White House this week hosted tech executives for a summit on artificial intelligence.

SWIFT Banking & Government Middleware Enables RCE

www.darkreading.com · 17 days ago

Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.

GitLab warns of critical RCE vulnerability in AI Gateway service

www.bleepingcomputer.com · 17 days ago

GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances.

8 out of 10 Banks HATE This One Weird 3SKey RCE

amibeingpwned.com · 17 days ago

TL;DR. SConnect - 1M+ users, an extension middleware+native host for authentication with eIDs, 3SKeys and other hardware signing tokens had a drive-by RCE which enabled any site or iframe a user saw to silently download and execute a dll due to a poor hand-rolled implementation of RSA-2048 token validation, enabling a use of uninitialized memory validation bypass which enabled "plugins" (DLLs) to

Is Your Organization Ready for 2027's AI Accountability Era?

www.darkreading.com · 17 days ago

Organizations may face an artificial intelligence (AI) reckoning over the next year. Omdia and Gartner weigh in on how to tackle the governance, security, and value challenges ahead.