Daily Security Feed - 2026-09-30

Security Feed Digest (2026-09-30)

Hacker News: Best

• Dots: Always-on agents — Tue, 29 Sep 2026 17:07:57 +0000
• GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price — Tue, 29 Sep 2026 17:06:45 +0000
• DraftKings is using AI to behaviorally target chronic gamblers — Tue, 29 Sep 2026 16:30:48 +0000
• macOS Golden Gate Is a Buggy Mess — Tue, 29 Sep 2026 14:32:33 +0000
• America.gov — Tue, 29 Sep 2026 14:04:57 +0000
• How Delhi cut electricity loss from 50 to 5 percent — Tue, 29 Sep 2026 12:43:29 +0000
• US sanctions force The Netherlands off Microsoft and toward alternative NixOS — Tue, 29 Sep 2026 11:44:25 +0000
• 500k facial scans at UK stations yield no arrests, 1 false positive — Tue, 29 Sep 2026 11:35:18 +0000
• Everybody’s home. No one’s coming over — Tue, 29 Sep 2026 11:14:45 +0000
• A Privacy Analysis of Web and Mobile Conversational AI Agents [pdf] — Tue, 29 Sep 2026 09:03:41 +0000
• World Labs is Joining AMD — Mon, 28 Sep 2026 20:18:05 +0000
• California farmers are struggling to sell grapes as demand for wine drops — Mon, 28 Sep 2026 20:00:06 +0000
• MicroLLM Lab – Try 7 tiny LLM’s in the browser — Mon, 28 Sep 2026 18:58:53 +0000
• Hijacking the PS5’s RTMP stream — Mon, 28 Sep 2026 15:35:23 +0000
• Does Reddit have an astroturfing problem? What the data suggests — Mon, 28 Sep 2026 13:30:54 +0000

BleepingComputer

• Microsoft is rolling out Linux container support to WSL — Tue, 29 Sep 2026 20:40:57 -0400
• Signal adds encypted local backup support to iOS, desktop apps — Tue, 29 Sep 2026 17:30:08 -0400
• Custom ChatGPTs push ClickFix attacks to deploy RAT malware — Tue, 29 Sep 2026 16:59:39 -0400
• FBI tells ShinyHunters members to turn themselves in after recent arrest — Tue, 29 Sep 2026 16:09:55 -0400
• Hackers exploit Citrix NetScaler zero-day to deploy web shells — Tue, 29 Sep 2026 14:37:12 -0400
• Former US Air Force members sent to prison over BEC attacks — Tue, 29 Sep 2026 14:09:39 -0400
• Windows 11 2026 Update released, here’s everything you need to know — Tue, 29 Sep 2026 13:37:40 -0400
• New Spectre v2 attack variant leaks Linux root password hash in minutes — Tue, 29 Sep 2026 13:10:11 -0400
• Automated AI agent used to breach cybersecurity nonprofit DIVD — Tue, 29 Sep 2026 11:39:19 -0400
• Catch threats before they escalate with real-time Identity Telemetry — Tue, 29 Sep 2026 10:01:11 -0400
• Vietnamese man charged in $16 million ‘pig butchering’ crypto scam — Tue, 29 Sep 2026 07:41:53 -0400
• Kiteworks patches critical flaw, brings customer systems online — Tue, 29 Sep 2026 05:04:06 -0400
• Apple patches CoreGraphics zero-day flaw exploited in attacks — Tue, 29 Sep 2026 03:33:12 -0400

Darkreading

• Apple Zero-Day Vulnerability Weaponized in Targeted Attacks — Tue, 29 Sep 2026 21:31:29 GMT
• Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution — Tue, 29 Sep 2026 21:08:42 GMT
• Cloudflare Announces Public Certificate Authority for the Post-Quantum Web — Tue, 29 Sep 2026 17:02:16 GMT
• ‘NeedyMantis’ Provides Long-Term Access to Compromised Networks — Tue, 29 Sep 2026 15:12:39 GMT
• Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers — Tue, 29 Sep 2026 14:19:43 GMT
• Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities — Mon, 28 Sep 2026 22:02:46 GMT

The Hacker News

• French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks — Tue, 29 Sep 2026 23:17:01 +0530
• New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses — Tue, 29 Sep 2026 22:50:17 +0530
• Russia’s Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor — Tue, 29 Sep 2026 22:50:08 +0530
• Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown — Tue, 29 Sep 2026 19:43:20 +0530
• 101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent — Tue, 29 Sep 2026 19:15:10 +0530
• Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation — Tue, 29 Sep 2026 14:05:10 +0530
• Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials — Tue, 29 Sep 2026 11:38:25 +0530
• OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions — Tue, 29 Sep 2026 10:42:32 +0530
• OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot — Tue, 29 Sep 2026 10:15:20 +0530

데일리시큐 - 최근인기기사

• 애플, 아이폰·맥 긴급 보안 업데이트…표적 공격에 악용된 취약점 패치 — 2026-09-29 14:04:47
• [부고] 조규민 국민연금공단 정보보안부장 부친상 — 2026-09-29 10:46:47
• 인스피언, 자동차 공급망 특화 EDI 솔루션 ‘Auto-X’ 출시 — 2026-09-29 12:41:45
• 아우토크립트, 미디어텍 칩셋 보안 취약점 발견해 CVE 등록 — 2026-09-29 14:35:31
• [전문가 칼럼-9] 잘 정리된 데이터의 역설: AI Ready Data가 바꾸는 보안의 기준 — 2026-09-29 14:17:48
• KISA, 한국벤처투자와 정보보호 중소·벤처기업 투자유치 지원 위해 협력 — 2026-09-29 14:12:16
• 쿠도커뮤니케이션, 자체 플랫폼 CUVIA 기반 AI 물리보안 통합관제 구축 나선다 — 2026-09-29 15:26:39
• 팔로알토 네트웍스, 유닛42 지속형 프런티어 AI 디펜스 발표 — 2026-09-29 14:23:55
• 페스카로, 미국 오토아이삭 사이버보안 서밋서 AI 기반 자동차 보안 전략 발표 — 2026-09-29 14:16:54
• 에브리존-명정보기술, 랜섬웨어 대응 협력 위한 업무협약 체결 — 2026-09-29 12:47:49