# cybersecurity Published articles for cybersecurity. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Cisco drops another exploited zero-day, this time a perfect 10 DevFeed: [Cisco drops another exploited zero-day, this time a perfect 10]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-17T12:40:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cisco](), [Authentication](), [Security](), [patches]() Tags: [authentication-bypass](), [cisco](), [cybersecurity](), [security](), [zero-day]() ### AI overview Cisco's ISE authentication bypass is under active attack, following another Cisco zero-day that prompted administrators to urgently apply patches. ### Source excerpt ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch ## GPT-6 Astra Is the First Model OpenAI Classifies as Critical for Cybersecurity DevFeed: [GPT-6 Astra Is the First Model OpenAI Classifies as Critical for Cybersecurity]() Original publisher: [Read original article]() Author: Steef-Jan Wiggers Published: 2026-09-17T04:59:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [Cybersecurity](), [gpt-6-astra](), [OpenAI](), [Vulnerabilities](), [Exploit](), [browser](), [Kernel](), [Chain-of-thought]() Tags: [agents](), [ai](), [ai-ml-data-engineering](), [architecture](), [architecture-design](), [azure](), [browser](), [chain-of-thought](), [cloud](), [cybersecurity](), [development](), [devops](), [exploit](), [generative-ai](), [governance](), [gpt-6-astra](), [gpt-6-astra-critical-cyber](), [kernel](), [machine-learning](), [ml-data-engineering](), [news](), [openai](), [vulnerabilities](), [zero-day]() ### AI overview OpenAI classified GPT-6 Astra as the first model to reach its Critical cybersecurity threshold. Expert-led evaluations reported previously unknown vulnerabilities in a browser and an operating-system kernel, along with working exploit chains. The system card also reported a substantial decline in chain-of-thought monitorability. ### Source excerpt OpenAI has classified GPT-6 Astra at the Critical cybersecurity threshold under its Preparedness Framework, a first. In expert-led testing the model found previously unknown vulnerabilities in a browser and an OS kernel and built working exploits. The same system card reports a substantial decline in chain-of-thought monitorability. By Steef-Jan Wiggers ## When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts DevFeed: [When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts]() Original publisher: [Read original article]() Author: Denzil Correa Published: 2026-09-16T20:06:17Z Content type: article Language: en Sources: [Cloudflare Blog]() Topics: [Cloudflare](), [Machine Learning, Security Attacks](), [Security](), [JavaScript]() Tags: [ai](), [application-security](), [attacks](), [client-side-security](), [cloudflare](), [cybersecurity](), [developer-platform](), [developers](), [ecommerce](), [javascript](), [machine-learning](), [malicious-javascript](), [page-shield](), [security](), [security-research](), [virustotal](), [workers-ai]() ### AI overview Cloudflare describes how its Client-Side Security machine learning model detected four malicious JavaScript operations involving eight payloads in live storefront traffic. The post says humans verified the findings after automated detection, while most payloads were absent from VirusTotal and received no malicious verdict from URLScan. ### Source excerpt A modern storefront can look healthy while malicious JavaScript quietly siphons revenue, hijacks clicks, or rewrites analytics. See how Cloudflare's machine learning models surface evasive client-side attacks for analyst investigation. ## "Regex for Rows": Simplifying Pattern Detection in SQL with MATCH\_RECOGNIZE DevFeed: ["Regex for Rows": Simplifying Pattern Detection in SQL with MATCH\_RECOGNIZE]() Original publisher: [Read original article]() Author: Kent Marten; Sergei Fedorov Published: 2026-09-16T17:14:05Z Content type: tutorial Language: en Sources: [Databricks]() Topics: [SQL](), [databricks](), [Cybersecurity](), [Security & Privacy]() Tags: [count](), [cybersecurity](), [databricks](), [failed](), [false-positives](), [functions](), [login](), [partition](), [product](), [real-time](), [regex](), [sql](), [window-functions]() ### AI overview This tutorial explains how Databricks supports SQL MATCH_RECOGNIZE for detecting ordered event patterns. It shows how the clause can simplify sequence detection, including identifying repeated login failures followed by a successful login, compared with complex SQL queries and window functions. ### Source excerpt Imagine you work in cybersecurity and you have a table that tracks login attempts... ## Forensic Walkthrough of a Compromised MikroTik Router and Its Persistence Mechanisms DevFeed: [Forensic Walkthrough of a Compromised MikroTik Router and Its Persistence Mechanisms]() Original publisher: [Read original article]() Author: j2sw Published: 2026-09-16T13:32:46Z Content type: article Language: en Sources: [Justin Wilson (j2sw)]() Topics: [MikroTik](), [Vulnerabilities](), [Persistence](), [remote access](), [backdoor](), [ssh]() Tags: [backdoor](), [cybersecurity](), [firmware](), [forensics](), [incident-response](), [mikortrick](), [mikrotik](), [network-operations](), [network-security](), [persistence](), [remote-access](), [security](), [ssh](), [vulnerabilities]() ### AI overview A forensic walkthrough examines a compromised MikroTik router in a honeypot. The intruders established persistence and remote access through scheduled tasks, scripts, new users, and tunnels. The author suspects, but cannot prove, that the compromise involved the MikroTrick RouterOS vulnerability chain. ### Source excerpt What it looks like when an intruder tries to make your own router work against you. A note before we start: Anything in this post that could identify my network, my organization, or my router's real hostname and IP address has been redacted or made generic. The attacker's own infrastructure, such as IP addresses, ports, ... Read more The post A first-hand forensic walkthrough of a real router compromise appeared first on Justin Wilson (j2sw). ## Spain gets its first taste of AI-aided cyber attack DevFeed: [Spain gets its first taste of AI-aided cyber attack]() Original publisher: [Read original article]() Author: Connor Jones Published: 2026-09-16T11:56:55Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Security Attacks](), [Cybersecurity](), [Artificial Intelligence]() Tags: [ai](), [cyber-crime](), [cybersecurity](), [data-protection](), [security](), [spain]() ### AI overview The article reports that Spain has experienced its first AI-aided cyber attack. It also reports that data protection chiefs are calling for an immediate review of data protection models. ### Source excerpt Data protection chiefs call for 'immediate review' of data protection models ## How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team DevFeed: [How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team]() Original publisher: [Read original article]() Author: Alex Tray Published: 2026-09-15T21:03:09Z Content type: tutorial Language: en Sources: [freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More]() Topics: [data loss prevention](), [Development](), [Access Control](), [data]() Tags: [access-control](), [cybersecurity](), [cybersecurityawareness](), [data-loss-prevention](), [data-protection](), [database](), [development](), [encryption](), [endpoint-security](), [hardcoded-credentials](), [it-security](), [net-conf](), [remote-access](), [secrets](), [sensitive-data](), [web-development]() ### AI overview A tutorial for development teams on building endpoint data loss prevention strategies. It covers auditing laptops for secrets and sensitive data, removing unnecessary copies, rotating exposed credentials, and establishing access controls. ### Source excerpt A developer's laptop holds more sensitive data than most people realize: API keys, database credentials, staging environment secrets, and sometimes entire copies of production data pulled down "just f ## Infoblox reports malicious infrastructure beneath illegal gambling sites DevFeed: [Infoblox reports malicious infrastructure beneath illegal gambling sites]() Original publisher: [Read original article]() Author: Thomas Claburn Published: 2026-09-15T19:38:58Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Security](), [Threat Research]() Tags: [command-and-control](), [cybersecurity](), [infoblox](), [infosec](), [malware](), [online-gambling](), [security]() ### AI overview Infoblox reports that malicious infrastructure is operating beneath illegal gambling sites and is linked to threat actors. ### Source excerpt Security firm Infoblox shines light on malicious infrastructure lurking beneath illegal gambling sites ## Iranian spies hit Windows machines with Chosen Brick data-stealing malware DevFeed: [Iranian spies hit Windows machines with Chosen Brick data-stealing malware]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-15T18:01:57Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Malware](), [Windows](), [Cybersecurity]() Tags: [cyber-crime](), [cybersecurity](), [iran](), [malware](), [microsoft](), [security](), [windows]() ### AI overview The article reports that Iranian spies targeted Windows machines with Chosen Brick, a data-stealing malware. ### Source excerpt 'Enemies of the regime' on notice ## Critical Cisco email security flaw is being exploited by attackers DevFeed: [Critical Cisco email security flaw is being exploited by attackers]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-15T16:01:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cisco](), [Security](), [Cybersecurity]() Tags: [cisco](), [cybersecurity](), [email](), [security]() ### AI overview Attackers are exploiting a critical vulnerability in Cisco email security appliances. Cisco warns that attackers may be able to conceal their activity after gaining access. ### Source excerpt Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they're in ## Australia's Essential Eight replacement shifts cybersecurity compliance toward continuous exposure management DevFeed: [Australia's Essential Eight replacement shifts cybersecurity compliance toward continuous exposure management]() Original publisher: [Read original article]() Author: Ben Mudie Published: 2026-09-15T13:32:00Z Content type: article Language: en Sources: [Tenable Blog]() Topics: [Exposure Management](), [Cybersecurity](), [Security](), [Cloud](), [App]() Tags: [australia](), [ciso](), [cloud](), [compliance](), [cybersecurity](), [enterprise](), [essential-eight](), [exposure-management](), [identity](), [operational](), [organization]() ### AI overview The article describes Australia's replacement of the Essential Eight with an outcomes-focused cybersecurity framework covering enterprise IT, cloud, operational technology, and potentially agentic AI. It argues that organizations will need continuous evidence of their security posture, and presents exposure management as a way to identify and prioritize weaknesses and support current posture validation. ### Source excerpt Australia's move from the Essential Eight to an outcomes-based cybersecurity model will push organizations from conducting periodic point-in-time, checklist compliance assessments to having continuous evidence of a solid security posture. Key takeaways The Australian Signals Directorate (ASD) is moving from the Essential Eight cybersecurity framework to a new outcomes-focused Essentials series covering enterprise IT, cloud, operational technology (OT), and potentially agentic AI. The Essential Eight itself only ever covered on-premises enterprise IT, built around eight named technical controls, such as application control and patching. It never extended to the security of cloud, identity, or OT. The shift challenges the traditional checklist approach to cybersecurity, where organizations demonstrate compliance through periodic assessments and point-in-time reports. In dynamic environments spanning IT, cloud, identity, and OT, security posture can change quickly and repeatedly between assessments. Exposure management can help organizations continuously understand where they are exposed, prioritize the most critical weaknesses, and provide evidence of their current security posture. ASD's strategic shift to active security posture validation Can you prove your security posture is solid, right now, on demand? That's the question the Australian Signals Directorate (ASD) has effectively put in front of every Australian organization's board, CISO, and C-suite. ASD's decision to retire the Essential Eight signals a fundamental move away from point-in-time, checklist-based security toward an outcomes-focused model where organizations will need to demonstrate continuous compliance. It's no longer enough to show that your organization had a control in place at the time of the last assessment. In a technology environment that changes continuously across IT, cloud, identity, and operational technology (OT), organizations must be able to answer a much more immediate question: Ho ## Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA DevFeed: [Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA]() Original publisher: [Read original article]() Author: Norman St. Laurent Published: 2026-09-15T13:13:53Z Content type: article Language: en Sources: [Cisco Blogs]() Topics: [Cybersecurity](), [Cisco](), [telemetry](), [Zero Trust](), [vulnerability](), [Network]() Tags: [benchmark](), [cisco](), [cisco-secure-network-analytics-sna](), [cybersecurity](), [department-of-defense-dod](), [government](), [hardening](), [industries](), [nist](), [public-sector](), [stig](), [visibility]() ### AI overview The article explains how the DISA Security Technical Implementation Guide for Cisco Secure Network Analytics turns Zero Trust policy into testable configuration requirements. The STIG provides a shared hardening baseline for the platform and its management functions, with 31 requirements derived from NIST SP 800-53 and related requirements. ### Source excerpt Discover how the new DISA STIG for Cisco Secure Network Analytics helps defense organizations securely configure and harden their analytics platform, ensuring trusted network visibility for Zero Trust operations. ## Safeguarding LLM-Assisted Dev at Guardsquare | Guardsquare DevFeed: [Safeguarding LLM-Assisted Dev at Guardsquare | Guardsquare]() Original publisher: [Read original article]() Author: Noah Fraiture - Backend Engineer Published: 2026-09-15T13:03:38Z Content type: article Language: en Sources: [Guardsquare Blog]() Topics: [Development](), [Large Language Model](), [Cybersecurity](), [Security & Privacy](), [agent observability]() Tags: [ai-agents](), [android](), [containers](), [cybersecurity](), [data](), [dev](), [developer](), [development](), [ios](), [llm](), [llm-gateway](), [thought-leadership]() ### AI overview Guardsquare explains why it adopted LLM-assisted software development despite risks involving sensitive intellectual property, personally identifiable information, and agent access to developer infrastructure. The post describes safeguards including separating sensitive code, isolating agent execution, and controlling model access and outbound data through an LLM gateway and guardrail service. ### Source excerpt This post is not meant to tell you how to use large language models (LLMs) or to claim we've found the right approach. As a cybersecurity company working with particularly sensitive IP, our decision to use LLMs for development was never just about productivity. The broader enthusiasm around LLMs was not itself a reason for us to adopt them quickly. For some time, our position was that the risks outweighed the productivity gains, and incidents involving AI agents elsewhere in the industry reinforced that assessment. ## HBO Max Reddit account compromised to serve ClickFix attacks DevFeed: [HBO Max Reddit account compromised to serve ClickFix attacks]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-14T22:43:01Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [ClickFix](), [Malware](), [Reddit](), [Cybersecurity](), [macOS](), [Windows]() Tags: [clickfix](), [cyber-crime](), [cybersecurity](), [hbo-max](), [macos](), [malware](), [reddit](), [security](), [windows]() ### AI overview The article reports that an HBO Max Reddit account was compromised and used to serve ClickFix attacks in a massive 48-hour malvertising campaign targeting macOS and Windows machines with malware. ### Source excerpt Part of a 'massive 48-hour malvertising blitz' targeting macOS and Windows machines with malware ## Open Secure AI Alliance Joins the Linux Foundation to Build a Shared, Open Defense Stack for the AI Era DevFeed: [Open Secure AI Alliance Joins the Linux Foundation to Build a Shared, Open Defense Stack for the AI Era]() Original publisher: [Read original article]() Author: andrewb@proximabiz.com (The Linux Foundation) Published: 2026-09-14T16:00:00Z Content type: news Language: en Sources: [Linux Foundation - Blog]() Topics: [Linux](), [Artificial Intelligence](), [Securing AI](), [open-source-security](), [Cybersecurity](), [Security](), [Resilience](), [Inference]() Tags: [ai](), [ai-security](), [collaboration](), [cybersecurity](), [governance](), [infrastructure](), [linux](), [models](), [nvidia](), [open-source](), [open-source-security](), [open-source-software](), [resilience](), [security](), [september-2026](), [standards]() ### AI overview The Open Secure AI Alliance has joined the Linux Foundation under neutral governance. It aims to help organizations collaborate on open AI security tools, research, shared standards, and verifiable defenses spanning models, inference, agents, identity, policy, enforcement, containment, and infrastructure. ### Source excerpt Originally founded by dozens of enterprise leaders and NVIDIA, the Alliance moves to neutral governance to expand industry collaboration on open AI security tools, research and shared defenses ## Cyberattack sends International Meteor Organization crashing back to Earth DevFeed: [Cyberattack sends International Meteor Organization crashing back to Earth]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-14T16:00:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybersecurity](), [Security](), [datacenter]() Tags: [cyber-crime](), [cybersecurity](), [infrastructure](), [security]() ### AI overview A cyberattack dealt a critical blow to the International Meteor Organization's aging infrastructure, with several weeks of disruption expected. ### Source excerpt Attack dealt a 'critical blow' to aging infrastructure, with several weeks of disruption expected ## Perfect-10 GitLab bug under attack days after patch lands DevFeed: [Perfect-10 GitLab bug under attack days after patch lands]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-14T14:30:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [GitLab](), [bug](), [Cybersecurity](), [Internet](), [servers]() Tags: [bug](), [cisa](), [cybersecurity](), [cybersecurity-and-infrastructure-security-agency](), [exploit](), [gitlab](), [internet](), [security](), [servers]() ### AI overview CISA confirms active exploitation of a critical GitLab vulnerability shortly after a patch was released. Security researchers observed attackers probing internet-facing servers. ### Source excerpt CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers ## A week in security (September 7 - September 13) DevFeed: [A week in security (September 7 - September 13)]() Original publisher: [Read original article]() Author: Malwarebytes Labs Published: 2026-09-14T07:01:00Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Security](), [Cybersecurity]() Tags: [2026](), [bluemoon](), [cybersecurity](), [grindr](), [lg-tvs](), [news](), [security]() ### AI overview A weekly security roundup covering topics discussed from September 7 to September 13, 2026. ### Source excerpt A list of topics we covered in the week of September 7 to September 13 of 2026 ## Asia Pacific research networks commit to stronger cyber resilience cooperation DevFeed: [Asia Pacific research networks commit to stronger cyber resilience cooperation]() Original publisher: [Read original article]() Author: Dan Fidler Published: 2026-09-13T22:22:29Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Resilience](), [Networks](), [incident](), [Security]() Tags: [apan](), [collaboration](), [community](), [cybersecurity](), [global](), [incident](), [infrastructure](), [network](), [networks](), [new-zealand](), [research](), [research-networks](), [resilience](), [security]() ### AI overview Asia Pacific research and education network leaders signed the Auckland Declaration of Intent on Cyber Resilience during APAN62. The declaration commits signatories to cooperation on trust-building, preparedness, information sharing, incident coordination, and mutual support, while linking regional efforts with the Global Security Policy Alliance. ### Source excerpt Research and education network leaders across the Asia Pacific have signed the Auckland Declaration of Intent on Cyber Resilience, committing to stronger regional cooperation on cyber preparedness, information sharing, and incident coordination. ## Teaching AI to Reason Through Detection Triage DevFeed: [Teaching AI to Reason Through Detection Triage]() Original publisher: [Read original article]() Author: Amol Khanna - Manu Nandan - Cristian Viorel Popa - Joan Pujol-Roig - Diana Bolocan - Laura Vasilie - Alexandru Apostu - Chase Helwig - Mihaela Gaman - Mickey Brautbar - Edward Raff - Chase Midler - Sv Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [AI Chat]() Tags: [agentic](), [agentic-soc](), [ai](), [automation](), [chain-of-thought](), [classification](), [cybersecurity](), [language-models](), [llm](), [model](), [nemotron](), [nvidia](), [open](), [reasoning](), [research](), [security](), [soc](), [windows]() ### AI overview CrowdStrike describes research on a reasoning-enabled language-model classifier for security detection triage. The model produces a verdict and an auditable rationale, with the stated goals of improving accuracy, transparency, and safe alert automation. ### Source excerpt New CrowdStrike research shows how step-by-step reasoning can improve detection triage accuracy, transparency, and safe automation. ## Benchmaxxing: When the Benchmark Becomes the Target DevFeed: [Benchmaxxing: When the Benchmark Becomes the Target]() Original publisher: [Read original article]() Author: Nathan Danneman Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [Benchmark](), [Artificial Intelligence](), [Cybersecurity](), [Ground truth / benchmark quality](), [Detection engineering]() Tags: [ai](), [ai-and-cybersecurity](), [benchmark](), [benchmarking](), [benchmarks](), [blog](), [cybersecurity](), [leaderboards](), [securing-ai](), [security](), [validation]() ### AI overview The article explains how public AI and cybersecurity benchmarks can become targets for optimization, a practice it calls "benchmaxxing." It argues that gaming, ceiling effects, data leakage, binary scoring, omitted costs, and aggregate scores can make benchmark results poor proxies for real-world defensive capability. The article proposes task-coupled internal benchmarks intended to evaluate end-to-end cyber agents and support rigorous science rather than visibility-driven score optimization. ### Source excerpt The more attention a benchmark receives, the stronger the incentive to optimize for it. In AI and cybersecurity, this can have significant consequences. ## The aircraft might not be flying, but the certificate has gone on vacation DevFeed: [The aircraft might not be flying, but the certificate has gone on vacation]() Original publisher: [Read original article]() Author: Richard Speed Published: 2026-09-12T09:00:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybersecurity](), [Artificial Intelligence](), [NVLink](), [Vibe coding](), [ARKTunnel](), [Cybercrime](), [.NET](), [how to create smooth CSS transitions]() Tags: [ai](), [bork](), [cybersecurity](), [malware](), [nvidia](), [offbeat](), [phishing](), [security](), [tailwind](), [ubuntu]() ### AI overview A news roundup covering security incidents, AI-related developments, semiconductor infrastructure, phishing, ransomware, open-source software, and web development. The supplied title concerns an aircraft certificate, while the body mainly contains unrelated headlines. ### Source excerpt Information is not forthcoming from this screen ## OpenAI's safety system is already cutting off API responses mid-task DevFeed: [OpenAI's safety system is already cutting off API responses mid-task]() Original publisher: [Read original article]() Author: Amanda Caswell Published: 2026-09-11T17:52:56Z Content type: news Language: en Sources: [The New Stack]() Topics: [releases](), [AI Bots]() Tags: [agents](), [ai](), [ai-models](), [ai-strategy](), [api](), [cybersecurity](), [developers](), [model-development](), [models](), [openai](), [reinforcement-learning](), [release](), [responses](), [safety](), [software-development]() ### AI overview OpenAI is reportedly considering slower development of its most advanced AI systems as safety concerns could delay releases and limit access. The article cites pauses in model work and restrictions following cybersecurity evaluations and an AI-agent containment incident. ### Source excerpt AI companies have spent the last few years competing to build the best models, faster than the other, with each The post OpenAI's safety system is already cutting off API responses mid-task appeared first on The New Stack. ## More JFrog Artifactory bugs under attack, and all 3 have patches DevFeed: [More JFrog Artifactory bugs under attack, and all 3 have patches]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-11T17:43:30Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybersecurity]() Tags: [bugs](), [cyber-crime](), [cybersecurity](), [security](), [vulnerability]() ### AI overview Three JFrog Artifactory bugs are under attack, and patches are available. ### Source excerpt If you're waiting for a sign to upgrade to a fixed version: this is it [Next page]()