China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026.

The vulnerability, tracked a… Continue reading China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers→

Posted in Uncategorized

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15.

The agents went beyond their assigned tas… Continue reading CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing→

Posted in Uncategorized

Why Active Directory weaknesses stay open for years in teams with one or two admins

David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a cohort works, with weekly se… Continue reading Why Active Directory weaknesses stay open for years in teams with one or two admins→

The cyber talent shortage? Job postings just hit a four-year low

US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job data pr… Continue reading The cyber talent shortage? Job postings just hit a four-year low→

Stolen AI API keys are paying for hackers’ autonomous scans

A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across t… Continue reading Stolen AI API keys are paying for hackers’ autonomous scans→

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.

The attack involves the exploitation of CVE-2025-61624 (CVSS score… Continue reading PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions→

Posted in Uncategorized

DDoS attacks can knock services offline before links reach capacity

More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Large attacks and distributed targeting strain defenses At… Continue reading DDoS attacks can knock services offline before links reach capacity→