I checked the latest reporting from The Hacker News and the original Okta Threat Intelligence research published on September 9, 2026. The core finding is that cybercriminals are stealing AI account session tokens and API keys from infected computers, creating a way to access AI services without using the normal login process. Infostealer malware such … Continued
The U.S. government has accused six Chinese artificial intelligence companies of carrying out large-scale campaigns to extract capabilities from advanced American AI models. The companies named are DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI. According to the NSA, FBI and CISA, these firms extracted billions of tokens through millions of exchanges and requests from … Continued
OpenAI has introduced GPT-6 Astra, its newest and most advanced AI model, with major improvements in computer use, software engineering, science and cybersecurity. The company says Astra represents a major jump in cyber capabilities and has reached the “Critical” level under its Preparedness Framework. One of the biggest findings from OpenAI’s testing is that Astra … Continued
Hackers linked to the recent Liquid Network incident have returned around 3,400 Bitcoin after taking nearly 4,000 BTC from the network’s federation wallet. The stolen Bitcoin was worth about $320 million when the attack happened on September 6. Liquid said the withdrawal was processed through SideSwap, but its authorization key was not compromised. The incident … Continued
Hackers are actively exploiting two newly disclosed security flaws in MikroTik RouterOS to take control of routers that have SSH services exposed to the internet. The attacks can allow hackers to gain full administrative access to affected devices without needing the legitimate user password. The two vulnerabilities work together as an attack chain known as … Continued
Trezor, the company known for its cryptocurrency hardware wallets, has revealed that a data breach involving its shipping provider ShipMonk affected far more customers than first reported. The total number of affected customers has now reached about 81,000, after another 67,000 customers in the United States were identified. Trezor had first disclosed the incident on … Continued
Microsoft is currently dealing with an Exchange Online service issue that is causing delays when users send or receive emails from external domains. The incident is being tracked as EX1467029, with Microsoft investigating reports of intermittent “Server busy” errors affecting multiple mailboxes. The problem does not mean that all Exchange Online email services are completely … Continued
A new zero-day exploit called FalconFlank has been publicly released targeting CrowdStrike Falcon Sensor on Windows systems. The proof-of-concept was published on September 3, 2026, by a security researcher known as Chaotic Eclipse, also associated with the names MSNightmare and Nightmare-Eclipse. The exploit reportedly targets Falcon’s ability to detect and remove malicious macros from Microsoft … Continued
SonicWall has warned customers about two new zero-day vulnerabilities affecting its SMA 1000 Series secure remote access appliances. The company confirmed that both vulnerabilities are being actively exploited in the wild, making the issue an urgent security concern. The flaws are tracked as CVE-2026-83548 and CVE-2026-83549, with the first rated critical at CVSS 10.0. SonicWall … Continued
A 40-year-old Russian national has been extradited to the United States to face charges over an alleged malware campaign that targeted around 80,000 users of a freelance employment platform. The man, Searzhudin Tamirlanovich Aktulaev, was arrested in Cyprus in May 2025 and was extradited to the US on August 28, 2026. He appeared in federal … Continued
