Daily Security Feed - 2026-09-29

Security Feed Digest (2026-09-29)

Hacker News: Best

• Jeff – Jev-compatible 0.8B decision models, trained at home, ~30 ms — Mon, 28 Sep 2026 20:23:36 +0000
• It’s Time to Investigate the AI Labs — Mon, 28 Sep 2026 19:53:35 +0000
• So long Google, and thanks for all the nudes — Mon, 28 Sep 2026 18:04:47 +0000
• Sonnet 5.5 — Mon, 28 Sep 2026 17:58:11 +0000
• Windows 11½ — Mon, 28 Sep 2026 17:51:24 +0000
• The problem is not AI code, but not knowing about system architecture or intent — Mon, 28 Sep 2026 16:11:42 +0000
• Pirating the Pirates — Mon, 28 Sep 2026 15:54:15 +0000
• Kids turned low-traffic NPR Spotify comments into a secret group chat — Mon, 28 Sep 2026 15:35:09 +0000
• Updated Google Maps shows destruction of the city of Rafah — Mon, 28 Sep 2026 15:32:18 +0000
• MongoDB CEO resigns to join Meta — Mon, 28 Sep 2026 14:54:21 +0000
• Coding is not solved — Mon, 28 Sep 2026 13:52:57 +0000
• Parley: Federated, decentralised chat that speaks plain IRC — Mon, 28 Sep 2026 10:30:54 +0000
• SpaceX’s Starship launching to orbit for first time ever today — Mon, 28 Sep 2026 09:15:04 +0000
• AI companies in race to demonstrate their model most threatening to humanity — Mon, 28 Sep 2026 08:35:40 +0000
• Owed a billion dollars in Nvidia stock — Mon, 28 Sep 2026 02:05:13 +0000
• Self-Hosting on the Dark Web — Sun, 27 Sep 2026 20:03:36 +0000
• Don’t couple your Go code to GitHub — Sun, 27 Sep 2026 16:50:58 +0000
• Replacing the old battery on rechargeable bike lights — Sun, 27 Sep 2026 13:30:11 +0000

Krebs on Security

• Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation — Mon, 28 Sep 2026 15:08:57 +0000

BleepingComputer

• Japan’s Keio confirms ransomware attack disrupted business systems — Mon, 28 Sep 2026 16:56:47 -0400
• Times Car confirms data breach affecting 6.6 million user accounts — Mon, 28 Sep 2026 16:31:16 -0400
• Dutch police confirm arrest in ShinyHunters hacking investigation — Mon, 28 Sep 2026 15:49:10 -0400
• Over 16,000 Supabase databases expose PII, passwords, auth tokens — Mon, 28 Sep 2026 14:50:59 -0400
• JadePuffer agentic AI attacks target Azure, destroy cloud resources — Mon, 28 Sep 2026 11:49:27 -0400
• 80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking — Mon, 28 Sep 2026 10:00:10 -0400
• Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist — Mon, 28 Sep 2026 05:25:29 -0400
• US soldier gets 70 months in prison for extorting 10 tech, telecom firms — Mon, 28 Sep 2026 03:30:15 -0400
• CISA orders feds to patch exploited Citrix flaws by Wednesday — Mon, 28 Sep 2026 02:24:19 -0400

Darkreading

• One Packet Can Crash OT Servers in Industrial Sectors — Mon, 28 Sep 2026 21:13:04 GMT
• Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts — Mon, 28 Sep 2026 20:23:58 GMT
• AI Agents Are Privileged Users; Who Is Auditing Their Access? — Mon, 28 Sep 2026 18:44:22 GMT
• Chrome Store Hosts ‘Poper Blocker’ Spyware Downloaded by Millions — Mon, 28 Sep 2026 16:51:25 GMT
• JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack — Mon, 28 Sep 2026 15:33:21 GMT
• Why the CISO-CFO Relationship Is a Key to Cybersecurity Success — Fri, 25 Sep 2026 20:28:10 GMT

The Hacker News

• Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks — Tue, 29 Sep 2026 00:48:01 +0530
• Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks — Tue, 29 Sep 2026 00:05:42 +0530
• IAM for AI agents: A Practical Enterprise Framework — Mon, 28 Sep 2026 23:50:38 +0530
• Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M — Mon, 28 Sep 2026 23:12:18 +0530
• RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims — Mon, 28 Sep 2026 23:08:33 +0530
• ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats — Mon, 28 Sep 2026 19:30:53 +0530
• Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI — Mon, 28 Sep 2026 17:28:00 +0530
• Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent — Mon, 28 Sep 2026 17:16:00 +0530
• JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources — Mon, 28 Sep 2026 14:38:21 +0530
• CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally — Mon, 28 Sep 2026 12:51:49 +0530

데일리시큐 - 최근인기기사

• 빅오, 네트워크 인증 취약점 재현…비밀번호 틀렸는데 접속 성공 — 2026-09-28 15:55:35
• 목소리까지 흉내 내는 피싱…보안 책임자 41% “딥페이크 전화 공격 경험” — 2026-09-28 16:18:58
• [정보보안 연재소설-로그아웃되지 않는 밤] 제44화 ‘유출은 안에서 샌다’ — 2026-09-28 21:18:24
• ‘K-시큐리티’ 해외 진출 속도…국제공동 R&D로 수출·고객 확보 — 2026-09-28 21:10:52
• 한국 생성형 AI 사용률 40.6%, 세계 12위로 상승 — 2026-09-28 16:26:32
• ‘트러스트404’ 29일 결선, 디지털자산 탈취 막을 기술 겨룬다 — 2026-09-28 16:00:58
• 인스피언, AI 보안 분석 고도화…침투테스트 자동화 활용 가능성 검토 — 2026-09-28 16:10:50
• KISA, ‘디지털 시대의 법’ 학술 경연대회 첫 개최…10월 20일까지 접수 — 2026-09-28 16:30:00
• 카스퍼스키, 백신 업데이트 개발·배포 과정 SOC 2 Type II 감사 완료 — 2026-09-28 16:21:54
• HCL소프트웨어 “금융권 패치 관리, 배포보다 실제 적용 확인이 중요” — 2026-09-28 15:45:59