International

MITRE released ATT&CK v20 adding nine Enterprise techniques that explain how attackers might target AI systems, steal app-specific passwords to bypass multi-factor authentication (MFA), and avoid CAPTCHA checks. The update also covers industrial control systems (ICS) and mobile devices better, and it includes detection tips for some of the new …

Microsoft shared its September 2026 security updates on September 8. These updates fix 973 flaws, including two serious issues that attackers are already using. This big update comes after Microsoft’s recent change to AI for finding security weaknesses. It uses a special scanning system that works in different ways on …

Russian-backed hacker group BlueDelta, also known as APT28, Fancy Bear, and Forest Blizzard, has used a small Windows backdoor called HOOKEDGE in spying activities aimed at government, diplomatic, and defense-making groups in Europe. The team at PolySwarm recorded an action that aimed at groups in Romania, Spain, and Turkey from late …

Chinese-speaking hackers have added Claude, Qwen, and DeepSeek to their hacking system to automate cyberattacks on governments and other targets in Asia, according to a report from the threat intelligence company Hunt.io. Hunt.io says this operation is different from the campaign seen in July, where a Chinese-speaking operator used Claude …

India is making its communication systems safer and stronger by launching 14 local quantum products. These products were made by the Centre for Development of Telematics (C-DOT), which is the research and development part of the Department of Telecommunications (DoT) in the Ministry of Communications. The products were shown at …

The market for AI SOC agents is early, crowded, and full of claims that haven’t been tested in production. This Gartner research arms security operations leaders with a list of specific questions to ask vendors across seven critical areas before committing to a solution. Key criteria and questions: Seven evaluation categories …

Singapore has picked four data-centre plans for a total of 200MW of power in its second Data Centre Call for Application (DC-CFA2). This helps improve the country’s digital infrastructure and meet the rising need for data-centre services. The selection was announced by the Infocomm Media Development Authority (IMDA) and the …

National Institute of Standards and Technology (NIST) demands feedback from industry and the government on how to update the National Vulnerability Database (NVD) since artificial intelligence is changing how groups find, evaluate, and fix cybersecurity problems. NIST has asked for information (RFI) about the future of the NVD. They want …

A group of almost 800 harmful packages was added to the npm registry in a new effort to spread malware that works on Windows, Mac, and Linux. “These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer …

The Open Web Application Security Project (OWASP) has published the Top 10 for LLM Applications 2026. This guide focuses on the main security risks in current AI apps and self-driving agents. The new version sets a clear guideline for developers, architects, and CISOs working with fast-changing enterprise GenAI systems, based on …