Latest news, developments and reporting on Cybersecurity.
A new PS5 exploit called Relapse works on consoles running firmware up to version 13.6, allowing jailbreaking on any machine last updated before mid-September, according to Ars Technica.
Hackers used a fake ChatGPT bot and Google Sites to deliver ClickFix attacks that installed a remote access trojan.
Meta is disputing a journalist’s claim that its Mac AI agent Muse read private messages without permission, saying the Messages integration is opt-in and requires Full Disk Access and a Messages connector. The denial follows a detailed reporter account and technical pushback from Meta executives.
New US bill targets ISPs and DNS for piracy blocks but exempts VPNs; rights groups oppose it.
Dutch authorities have arrested a 24-year-old convicted cybercriminal, identified by sources as Pepijn van der Stap, on suspicion of helping ShinyHunters with data thefts and extortion. KrebsOnSecurity reports that remaining group members escalated attacks after the arrest.
At least ten VPN providers reported fresh server and IP blocks in the week after Russia's State Duma elections, as rights groups describe a shift toward infrastructure-level attacks on circumvention tools.
Meta launched Muse, an AI agent for emails and shopping, plus a Tamagotchi-like Charm. The Verge reports updates.
Glow Security says AI coding agents leaked over 13,000 screenshots, some sensitive, to public GitHub repos in 'PixelLeak'.
Google's Threat Intelligence Group reports monthly software vulnerability disclosures doubled between January and August, to 10,740, with AI agents surfacing a rising share of flaws, including 58% rated moderate risk.
Malwarebytes says a fake iPhone Duo preorder page uses the DarkSword exploit chain to steal crypto wallet data, credentials and notes from older unpatched iPhones.
MI5 publicly warned UK universities that the China General Technology Research Institute is a front for Chinese intelligence and advised researchers to end collaboration, saying more than 100 academics received funding for work in AI, cybersecurity and steganography.
The FBI is investigating a breach involving FBIJobs.gov after ShinyHunters claimed to steal sensitive employee data, while current and former employees criticize the bureau’s communication and prepare for possible exposure.
New Spectre variant hits JIT compilers, leaking password hashes on Intel-based Linux systems, researchers say.
TechRadar on Sept. 30, 2026 published a VPN Deal of the Week article aimed at viewers outside the UK who want to watch Celebrity Traitors. The article is credited to VPN Editor Rob, whose biography focuses on online security and privacy.
Cloudflare plans to issue quantum-safe TLS certificates, using Merkle Tree Certificates and a GlobalSign trusted root.
A SANS Institute DFIR leader says AI can triage evidence and speed investigations, but it must not be trusted to reach conclusions or determine guilt, according to TechRadar.
Google's Results About You feature, available in the Google app and on the web, monitors search results for phone numbers, email addresses and home addresses and lets users request removals, according to an Android Authority account.
OpenAI's dots and Meta's Muse push personal agents into daily life, while Anthropic flags GLM-5.3 cyber risks and OpenClaw, Codex Harness, and new Flash models reshape agent infrastructure and office work.
OpenAI's chief research officer Mark Chen defends its safety record after agent hacks at Hugging Face and Australia's health system. OpenAI says it paused training of its latest models and is reviewing agent logs back to January 2026.
A TechRadar analysis argues banks must shift from prevention-only strategies to continuous resilience, citing a PYMNTS report on OpenAI's Astra model and an IMF note on AI and financial-sector cybersecurity.
A fake AI image of a Georgia mayor spread on Facebook, intensifying alarm over deepfakes and election misinformation.
Nonprofit sues OpenAI over July rogue-AI attack on Hugging Face, seeking injunction under California computer fraud law.
Russian overnight drone and missile attacks hit Kyiv’s communications, data-center and energy infrastructure, with debris reported at a Western embassy. NATO condemned Moscow’s nuclear rhetoric over Kaliningrad as Poland raised its alert level.
Samsung rolls out September 2026 security patch to Galaxy S24 series and S24 FE, fixing 90 issues but not adding stable One UI 9.