Senator Warns Federal Sites Expose Whistleblowers to Hackers Sen. Ron Wyden that hundreds of federal websites fail to encrypt visitor connection data, exposing whistleblowers, crime tipsters, and crisis-support callers to hackers and foreign spies. His office found over 350 sites, including an FBI tip line and a VA suicide-prevention hotline, that still lack Encrypted Client Hello protections despite the technology being available. Wyden urged CISA and the White House budget office to make ECH mandatory for all public federal websites and cloud vendors. Source: [Cyber Security News](

Telegram

Cyber Security News

Senator Warns Federal Sites Expose Whistleblowers to Hackers Sen. Ron Wyden warned that hundreds of federal websites fail to encrypt visitor conne...

🔍 What’s Really Attacking Your Industry? Insights From 74K Sandbox Analyses analyzed 74,086 sandbox sessions from a financial organization to uncover what threat data can show about enterprise security: 📊 12.8% of submissions were malicious, compared with the 13.0% banking-sector median ⚡ 15.1 seconds median time to detect threats, versus 16.9 seconds across the banking sector 💻 88.2% malicious yield for PowerShell scripts, the highest among analyzed file formats 🕵️ 19 unique malware families observed, placing the organization in the top 1% of banking-sector peers for malware family diversity For SOC leaders, individual verdicts tell only part of the story. combines interactive sandbox analysis with industry-wide threat intelligence to help enterprise security teams understand their threat landscape and measure SOC performance. Read full article to discover what threat data can reveal about your organization. ----- 'https://cdn4.telesco.pe/file/uXaVaCcHWFYFBXo27O5vpbphLloaonhvOQwGuKp0RaYrg4udMzEOgMWkCiu6Q7sSt9Rx97PINMPs32MK0yPBasNUEejTnLl5WS2rHqz9-hEatkrPUfc1UFi77eP0Xd1xXPy94M6RoA6Tj55t8G_UvSpUaMitd-iVh5tYnodHxMegHQbQDeWVfQ4BPsmeWad2_HuWZ6pM2cr-cVgxKuwM3c3rLKEaXdel6XdBbkr_azdJrcnHi7Dw1jm-5aw3wp0miiOcSXZHzOX4-qOBcRYPnzrsJDU-aYB-KSPiDxzIhPXG93QODJQhpSsVHYBq6QJh1k5qQpI2csNcWiJ2tSqfGw.jpg' Source: [Cyber Security News](

Telegram

Cyber Security News

🔍 What’s Really Attacking Your Industry? Insights From 74K Sandbox Analyses ANY.RUN analyzed 74,086 sandbox sessions from a financial organiz...

Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide A cybercriminal operator used AI agents built on OpenAI's Codex and DeepSeek to automatically develop and launch exploits against internet-facing PaperCut print-management servers. GreyNoise said the campaign at least 440 servers across 395 organizations in 48 countries, chaining two flaws, CVE-2026-81578 and CVE-2026-82078, to bypass authentication and gain remote code execution. PaperCut urges customers to update to patched releases 26.0.5, 25.0.13, or 24.1.10 to close the vulnerabilities. Source: [Cyber Security News](

Telegram

Cyber Security News

Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide A cybercriminal operator used AI agents built on OpenAI's Codex ...

Join the ImmuniWeb AI Platform Webinar: New Products and Capabilities (Q3 2026 Update) to discover the latest products, capabilities and innovations of the ImmuniWeb ® AI Platform, earn CPE credits, and explore practical ways to strengthen cybersecurity while reducing operational costs. ⚡ Key Insights: ✔️ New cybersecurity & compliance products by ImmuniWeb ✔️ Latest product features, functionalities and integrations ✔️ Practical use of Machine Learning and AI by ImmuniWeb in 2026 ✔️ Cybersecurity cost reduction strategies ✔️ Cybersecurity compliance with ImmuniWeb ✔️ Live demo of the ImmuniWeb AI Platform ✔️ 2026 product roadmap and upcoming capabilities 📅 Date: 22nd of October, 2026. The 60-minute webinar will be held in English, with live subtitles available in 35+ languages. You can join via Zoom or Microsoft Teams. 🎤 Host: Dr. Ilia Kolochenko, Founder & Chief Architect at ImmuniWeb ✅ Registration – tap to secure your spot. ----- 'https://cdn4.telesco.pe/file/YK2d5ZKLNCxHUeoXOFidFuUFCGAnKOBbmF7581ovsG61Y-0DyuDnOpEyrlcAtrIMjC7z-hUnqWlLbb2l5QD0l-rdMMTmai6aIWFun2PiVr9jU3rY5zpDzFdfgIdvHh06ThoZ3YwlnllW7vOZSgv2ASpP4wtlzdYiKgsStrac9zsPH5uIb7X_j7sdEL3qTerhduQdi6nQ5LfSHffBpwINmUy7oN6A5FfWOvwsVYpoT94sXKaRzLllKmU4mumbmR0r_oYD59071IGbcEvqBi3h9S1lRqCoV6Femw1vtpT1j7eKAl5d9wBucnpzzOKU_nTRdBc4VeFPY6JWM8N6KiAt1w.jpg' Source: [Cyber Security News](

Telegram

Cyber Security News

Join the ImmuniWeb AI Platform Webinar: New Products and Capabilities (Q3 2026 Update) to discover the latest products, capabilities and innovation...

Governments Abuse Online Ads to Deploy Zero-Click Spyware Researchers at Citizen Lab and Confiant that spyware vendors are hijacking online ad networks to infect devices with zero-click attacks requiring no user interaction. The investigation ties Israeli ad platform Discover-Tech to spyware makers Candiru and Bindecy, which used it to target specific devices via malicious ad bids. At least 45 Al Jazeera computers were hacked in 2024-2025, and bidding data shows ads reaching militaries, governments, and agencies like the IAEA and ICC. Source: [Cyber Security News](

Telegram

Cyber Security News

Governments Abuse Online Ads to Deploy Zero-Click Spyware Researchers at Citizen Lab and Confiant disclosed that spyware vendors are hijacking onl...

Ransomware Recovery CEO Indicted for $19M Fraud Scheme Federal prosecutors Zohar Pinhasi, owner of ransomware remediation firm MonsterCloud, for defrauding ransomware victims. He allegedly charged clients over $19 million while secretly paying hackers $8 million in ransom, falsely claiming to use proprietary decryption tools. Pinhasi pleaded not guilty to wire fraud and conspiracy charges in Brooklyn federal court and was released on a $2 million bond. He faces up to 60 years in prison as the case exposes fraud in the unregulated ransomware recovery industry. Source: [Cyber Security News](

Telegram

Cyber Security News

Ransomware Recovery CEO Indicted for $19M Fraud Scheme Federal prosecutors indicted Zohar Pinhasi, owner of ransomware remediation firm Monst...

AT&T to Pay $177 Million After Two Massive Customer Data Breaches Federal judge AT&T's $177 million settlement over two massive 2024 customer data breaches, with no admission of wrongdoing. The first exposed Social Security numbers and other details for 73 million customers after data surfaced on the dark web, while the second, tied to a Snowflake workspace breach, exposed call and text records for nearly all AT&T cellular customers. The deal sets up $149 million and $28 million funds for the two incidents, though the claims deadline already closed. Source: [Cyber Security News](

Telegram

Cyber Security News

AT&T to Pay $177 Million After Two Massive Customer Data Breaches Federal judge approved AT&T's $177 million settlement over two massive...

Hackers Steal Records of 8 Million Citizens From Danish Government Database Attackers abused a Danish company's lawful access to the Central Person Register, stealing names, addresses, and ID numbers of roughly 8 million citizens and residents. The breach happened in September but wasn't found until October 2, and the government it as Denmark's largest data breach on record. Minister Christina Egelund called it a serious incident, noting the exposure also includes citizens living abroad and the deceased, with no attacker yet named. Source: [Cyber Security News](

Telegram

Cyber Security News

Hackers Steal Records of 8 Million Citizens From Danish Government Database Attackers abused a Danish company's lawful access to the Central Perso...

🚨 September Attacks US Security Teams Should Watch and Act on Now September campaigns targeted US organizations with session theft, trusted-tool abuse, hidden delivery, and real-time fraud. 🎯 Industries in focus: Technology, manufacturing, government, healthcare, and consulting. 🔹 CSuite: Steals Microsoft 365 sessions and compromises endpoints 🔹 IronToll: Uses 114 domains for payment phishing 🔹 Wazza: Hides phishing behind anti-bot filtering 🔹 TerminalFix: Delivers malware through trusted components Together, they enable account takeover, payment fraud, operational disruption, and costly response. 👉 See the attack chains, close critical gaps, and get actionable IOCs for faster response. Read now by clicking for the full material. ----- 'https://cdn4.telesco.pe/file/XquKRoGV_LNm-CqdLKnC-4xbTCah9nFAeMuW16pEFi2uibLwD5sikKJ2K-rGw6I8MPQghHs5nScCeJ6m7NIJZEfhfUwXJRKB0LwNYbHuG5vqCvX7Uw8l6r1kTZmbK6o1mA7pah-Rh8VjfvKRIjCLENKw8Fu_t1MeZJKc2o8YeJsewqLssn5M3XyiJaxQqNFxSDfSzbQHZHyIrbVtPt14ZxcQYvoGPyXV9tKRxfqnEe2cV06X8E4zKxylMBlxT35V0eN6hbnFnxo-Ae0foR493Zka-FtGNXMtJaHvOXcDxmSE6pzmnYIu6OHQ3-KyBZEii_4IFUo7BKZU6xNIL1CKyA.jpg' Source: [Cyber Security News](

Telegram

Cyber Security News

🚨 September Attacks US Security Teams Should Watch and Act on Now September campaigns targeted US organizations with session theft, trusted-too...

Google Freezes Open-Source Bug Bounty Program Over AI Slop Submissions Google its Open Source Software Vulnerability Rewards Program on October 1, citing a “significant rise” in automated, AI-generated bug reports. The company said most of these submissions were invalid or contained outright hallucinations, overwhelming the engineers and maintainers who had to review them. Google plans to resume the program with an update in early 2027 and is directing researchers to its other bug bounty programs meanwhile. Source: [Cyber Security News](

Telegram

Cyber Security News

Google Freezes Open-Source Bug Bounty Program Over AI Slop Submissions Google paused its Open Source Software Vulnerability Rewards Program on Oct...

OpenAI Disrupts Encryption Bypass Used to Steal AI Reasoning Data OpenAI that it disrupted a months-long campaign using a novel encryption bypass to extract protected AI reasoning data, without breaching its systems or databases. By late July, the company had identified roughly 15,000 suspicious accounts behind over 16,000 extraction prompts and fully shut down the operation. OpenAI linked a core cluster of the activity to individuals tied to Chinese AI rival Moonshot AI, though it offered no public technical evidence for the claim. Source: [Cyber Security News](

Telegram

Cyber Security News

OpenAI Disrupts Encryption Bypass Used to Steal AI Reasoning Data OpenAI disclosed that it disrupted a months-long campaign using a novel encrypti...

Researchers Used Claude to Hack Into OpenAI A three-person team at Hacktron AI used Anthropic's Claude Opus 5 to chain two vulnerabilities and breach OpenAI's systems under a bug bounty program. The exploit began with a memory flaw in the libheif image library, triggered by a malicious photo upload on OpenAI's forum, letting attackers hijack the server and seize employee ChatGPT and Codex accounts. Researchers the flaws, OpenAI patched them and paid a $6,500 bounty; the same exploit failed under Opus 4.8 but worked hours after Opus 5 launched. Source: [Cyber Security News](

Telegram

Cyber Security News

Researchers Used Claude to Hack Into OpenAI A three-person team at Hacktron AI used Anthropic's Claude Opus 5 to chain two vulnerabilities and bre...

🤝 Cyber Security News is looking for ADVERTISERS Our community is continuously growing and we are searching for exciting companies & products to share with our audience. Requirements to Qualify • Relevant to channels niche / industry • Long-term approach and collaboration mindset • $2,000+ monthly ad spend budget to invest in campaigns What We Offer • Exposure to 80,000+ community members • Personal success manager to scale your campaigns • Brand awareness, leads, sign-ups, customers, followers, etc. 📩 Contact for Partnership If you are serious about promoting your business, send us an introduction Email → cybersecnewsinfo.com Important Note Spots to become a sponsor are limited. Reach out before they fill up. (we only have 7 left) Let's talk soon! - - - - - 'https://cdn4.telesco.pe/file/HO7QzOk1pdSdnhzHbg_1FIivYehBt3DRa0S0d8lgbPt3y7P-4uj0iOSEj_bI8Al_75_RkbEDYBYi32tVn3lgiBxBbP8rT0qgD635J0Q8VDcEnN_gDPU5CThGe3wIjrJB-lsRqLoCaTcQgPGyvztGvaa8ODhytEPyy2pbQD3oGrzZRXXwhquuYta2iYP6rPbzzsv3z6kJ_66xK2YNx6LExExgAc5rdKUARMAd2JgFFUMdiHvfEqxxxHB1Ea1V6cQOXoe1UyEDBrAMBrRjUmxBTfzyhRARnbfp4ES_pUz05AiSCRJ_V70twKj7yo8E2QznX7TCwCMMVjtDR0uS5mpK9Q.jpg' Source: [Cyber Security News](

Telegram

Cyber Security News

🤝 Cyber Security News is looking for ADVERTISERS Our community is continuously growing and we are searching for exciting companies & products t...

North Korean Hackers Posed As Employers To Steal $11 Million In Crypto Security agencies from the US, Japan, Germany, and Australia that North Korean group WaterPlum poses as employers to target software developers and IT professionals worldwide. The group has infected more than 30,000 devices across over 100 countries. Operators have drained nearly $11 million in cryptocurrency from over 7,000 wallets, funneling the funds back to North Korea. Investigators found WaterPlum sharing infrastructure with North Korean IT workers embedded in corporate contracts. Source: [Cyber Security News](

Telegram

Cyber Security News

North Korean Hackers Posed As Employers To Steal $11 Million In Crypto Security agencies from the US, Japan, Germany, and Australia warned th...

Google Confirms Gemini Autonomously Hacked Three Companies During Security Testing Google its Gemini AI model autonomously breached the protected systems of three companies during red-team testing by security firm Irregular. In one case, Gemini simply guessed a set of leaked credentials to gain unauthorized access, marking the model's first known autonomous hacks. Irregular notified Google in late July, but the incidents stayed private until this week, when Google said Gemini had acted appropriately by halting each breach on its own. Source: [Cyber Security News](

Telegram

Cyber Security News

Google Confirms Gemini Autonomously Hacked Three Companies During Security Testing Google confirmed its Gemini AI model autonomously breached the ...

As of recently: Revolut Confirms Data Breach via Fake Government Requests British fintech Revolut a data breach after a fraudster used a spoofed government agency email domain to trick staff into handing over customer records. Exposed data included customers' names, birth dates, addresses, phone numbers, and copies of passports and driver's licenses. Revolut said a limited number of customers were hit, blocked the fraudulent address, and alerted law enforcement and regulators, adding that funds and systems remain secure. Source: [Cyber Security News](

Telegram

Cyber Security News

As of recently: Revolut Confirms Data Breach via Fake Government Requests British fintech Revolut confirmed a data breach after a fraudster used a...

📊 15 Cyber Threat Trends Security Leaders Need to Watch in 2026 SOC teams are under pressure to move faster, but more attacks now hide inside trusted platforms, legitimate login flows, and everyday business processes. ’s new report highlights 15 trends making detection and response harder, including: 🔹 +483.7% growth in device code phishing 🔹 +437% increase in fake CAPTCHA attacks 🔹 +104.7% growth in ClickFix activity See where detection gaps are growing and what security leaders should prioritize next. 👉 Read the full report – tap to access. ----- 'https://cdn4.telesco.pe/file/iVM0K5eBgCqIGiGOC-1IIXmefFnscjj9XfHhioFtQJOlU2NAfmKc0CUaTh_uwktnc6jxJQekwhqQIsdJFd7WM-t66PHSZBJL2OshrPx4r2prlgdEKCEof1mkZneLK9UjAKq2sc5NU_VzG9NHVSpJ-DpaPr3glm5HHGgqDWXrQ58iP-pdWJ8f02HXIdCr9AiCNuI0IcKT_QKMXze_-mIOQ2eaCok-XVa4LJ0YJfi09iiYjFQT1hTIauc9ifgJzQmR5bZSconxUJqG5lJLnPD1qLh4zgYBi2p0DvxD9N-Zx_TYciXCNFVwaeN_VqXGCF9K6pFWxG57VLFmStl2UQ7-Qg.jpg' Source: [Cyber Security News](

Telegram

Cyber Security News

📊 15 Cyber Threat Trends Security Leaders Need to Watch in 2026 SOC teams are under pressure to move faster, but more attacks now hide inside ...

Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks On Wednesday, the US cybersecurity agency CISA CVE-2025-25249 to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch it within three days, in line with BOD 26-04’s requirements. Source: [Cyber Security News](

Telegram

Cyber Security News

Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks On Wednesday, the US cybersecurity agency CISA added CVE-2025-25249 to its Known Exp...

Join the Upcoming ImmuniWeb Webinar: “AI in Penetration Testing: The Good, The Bad and The Ugly”. → Explore how AI is transforming penetration testing, discover real-world benefits & risks, earn CPE credits, learn about latest AI application testing approaches. ℹ️ Key Insights: ✔ Use of AI in pen testing: pitfalls, best practices ✔ Risks & benefits of AI-driven pen testing ✔ Testing LLMs for AI-specific vulnerabilities ✔ OWASP Top 10 for LLM applications and emerging attack vectors ✔ OWASP Top 10 for Agentic Applications ✔ Red teaming and Continuous Breach & Attack Simulation (CBAS) ✔ Legal and regulatory landscape of pen testing in 2026 ✔ Leveraging the MITRE ATT&CK Matrix for pen testing ✔ Continuous vs. one-time pen testing ✔ External vs. in-house pen testing ✔ ImmuniWeb pen testing products 📅 Date: September 24, 2026 🎤 Host: Dr. Ilia Kolochenko, Founder & Chief Architect at ImmuniWeb ✅ Registration → click for personal access. ----- 'https://cdn4.telesco.pe/file/mIi2VkGRXbEOcTeUnGWQ6D3FIegL8gO9uonJfkfKVLDt2j6wShwkKnjbDFKlwpW1nJCCxSBtTpu155Mu1UcQVCVCXxmWXTNomklvsQCNeSuNSk_wI72XHfOp9UQiuPyqq5NSRtqsVHThPZsJpLLa0738NM5NjxP8nfbEVmRNLnQvHEfFlGzS3i4O4N4cd36vlWPhwycnLhpfevc7NzEEg8qAjhP6i7JwMRrO1Sj0Tx7tG5SEw8KX6cNBIix80CLp8sc97XRzIJy_0T47cNt1np63nSkeMXU9AaAzwlttPN22KTIBui5vGPLAUY6ZabLW8XwebFLGOoSRXMgtdvl2cQ.jpg' Source: [Cyber Security News](

Telegram

Cyber Security News

Join the Upcoming ImmuniWeb Webinar: “AI in Penetration Testing: The Good, The Bad and The Ugly”. → Explore how AI is transforming penetrati...

‼️ UPDATE: Apple admits an issue with the inner display of some $1,999 iPhone Duos. Owners describe a crunch as they unfold it, then a crack along the crease within hours or days. Apple says only "a small number" are affected and has not said what causes it. 'https://cdn4.telesco.pe/file/VKxBTvOmkAnEdAnvboz1YBI89mHs_KDUqw7Z0po12-QDwx8i2KiqaX3o50MrOGwQ4Ek9auKD77ry5rdRPdx2Q_tbGHzPQU3ziet1Ak7CsVRlQgET191WvW3zQMmKcNO6fuSR0UZOaiAU4KrChQteSJl-Ig21N9MLnOUKPP54964n5t_NgPa8TbqtHy0ceVXBbaJ4Ja8lD7RRXvrjnzOoopvUED6tj0EiOLunzoAcViMrP17lPyNf0sEoIPzcKDq7QpII0tfcBgjpPk_jWVN2YsDeiJIjBkrHVWyeZ4AipRM67x7CcCbAbwofWgZ_Xx44VVDAW_aEHK5HuQPJQoFCIw.jpg' Source: [International Cyber Digest](

Telegram

International Cyber Digest

‼️ UPDATE: Apple admits an issue with the inner display of some $1,999 iPhone Duos. Owners describe a crunch as they unfold it, then a cr...