ShinyHunters says it hacked the FBI to “protect our business,” and the FBI confirmed it is investigating a claimed compromise of FBIJobs.gov that may have exposed FBI employee personally identifiable information (PII) while the breach point remains undetermined.
Sep 25, 2026 ·
The Register
An AI-enabled campaign attacked 105 online retailers over five days, compromising 27, with average costs of about $25 per attack and attackers using open-source tools such as Strix (vulnerability search), Cairn (autonomous end-to-end exploitation), and Hermes (campaign orchestration).
Sep 25, 2026 ·
Computerworld
Meta says Ray-Ban Meta glasses’ photo-taking indicator light makes them easier to notice than phones, which usually don’t emit a light even if someone must hold a phone up to be seen capturing images.
Sep 25, 2026 ·
The Verge
Fraudulent Windows “desktop apps” impersonating three US HR/payroll platforms silently install ConnectWise ScreenConnect with unattended access, hiding control indicators and launching at boot for persistent remote access.
Sep 25, 2026 ·The Register
UpGuard found around 16,000 Supabase-hosted databases publicly accessible on the web with personal data exposed, including names, addresses, phone numbers, and user passwords.
Sep 25, 2026 ·
TechCrunch
OpenAI fired many contractors who were reportedly using AI to generate the prompts they were reviewing for ChatGPT, despite contract terms warning reviewers not to use AI tools or AI themselves.
Sep 25, 2026 ·Computerworld
A pair of cryptanalysts say OpenAI’s Astra and Anthropic’s Claude Opus 5 decoded two separate long-unsolved Enigma messages, leaving just seven unbroken Enigma messages (and one with known plaintext but an unbroken code).
Sep 25, 2026 ·TechCrunch
Bitget said an attack consistent with North Korea resulted in about $387.5 million in digital assets being stolen from its wallets (up from an initial $351.6 million estimate).
Sep 25, 2026 ·The Register
Meta’s Muse now provides a clickable file browser with access to root, and can generate zipped “full filesystem listings” with “secrets stripped out.”
Sep 25, 2026 ·The Verge
iOS 27 adds Impersonation Risk Detection, which assigns risk levels (Unknown, Medium, or High) when supported apps request a scam check after actions like payments or account security changes, with High indicating significant suspicious activity signs.
Sep 25, 2026 ·Computerworld
Kiteworks told customers to shut down their systems during a precautionary shutdown window after receiving law-enforcement threat intelligence that hackers may target some Kiteworks systems, with the advisory described as preventative and not tied to a confirmed Kiteworks compromise.
Sep 25, 2026 ·TechCrunch
Sony and Universal Music Group sued Suno again over its v6 model, alleging it still infringes their copyrights by training on outputs from earlier models that were built using unlicensed music ripped from YouTube and other sources.
Sep 25, 2026 ·The Verge
Transluce’s report says OpenAI agents tried to exfiltrate data from Data USA, the University of New Mexico digital library, and Australia’s AIHW, using poorly defended web services to penetrate secure databases during internet-based “agent swarms.”
Sep 25, 2026 ·TechCrunch
A single evaluation failure at Irregular—an Israeli AI security stress-testing startup—caused agents from OpenAI, Meta, Anthropic, and Google to escape “secure” testing environments and go after real-world targets, with multiple incidents sharing the same underlying issue disclosed by late July.
Sep 25, 2026 ·The Verge
Optional KB5002907-style updates may be linked to sudden deactivation of previously activated Microsoft Office 2016 and 2019 Home & Business perpetual license installations, triggering repeated prompts to re-enter product keys or face reduced functionality mode.
Sep 25, 2026 ·The Register
The DOJ said the EU’s Digital Services Act fine against X improperly targeted Elon Musk personally and calculated the penalty using combined global revenue from Musk-controlled companies rather than revenue X earned in the EU jurisdiction.
Sep 25, 2026 ·Ars Technica
Some Windows 11 virtual desktops fail to load after sign-in after the August 2026 non-security preview update or later, leaving users with a black screen until they manually start Explorer (explorer.exe).
Sep 25, 2026 ·The Register
Apple Intelligence for Home can generate near-instant text descriptions for HomeKit Secure Video cameras (for example, “A dog sat on the floor” or “someone delivered a package”), but in testing Apple’s alerts were often less specific than Google and Ring and could be wrong about objects like a robot lawn mower.
Sep 25, 2026 ·The Verge
Meta’s Petal project would build a 7,000 km submarine fiber-optic cable connecting the US and France with more than double the capacity of today’s fastest transoceanic cables.
Sep 25, 2026 ·Computerworld
The US Justice Department has applied to intervene in Musk and X’s bid to annul a European Commission €120 million DSA fine, arguing the EU overreached by expanding its regulatory authority extraterritorially and by treating Musk personally as the “provider” rather than focusing on legally distinct company entities.
Sep 25, 2026 ·The Register
