September 2026

Cybercrooks trawl Fishbrain to net password hashes

Armed with password hashes and salts, attackers could already be kraken those creds

UK’s Online Safety Act has made ‘absolutely no difference,’ kids say

Children's Commissioner also furious with Ofcom over a string of failures

Terminated employee cost company hundreds of thousands of dollars because nobody revoked access

They had more access than the average Joe, and IT didn't track what needed to be cut off

To keep the AI hacking genie bottled up, try one-way networks

Sandboxes, permissions, and VMs aren't enough to keep frontier models at bay. "Data diodes" might do the job

SonicWall’s SMA1000 boxes under active attack again

Miscreants use chained zero days to pwn boxen as third-party SOCs say further attacks 'almost certain'

Legacy Lenovo login opens 5,000 Dropbox accounts to attackers

Cloud storage biz severs old integration and urges victims to reset credentials

UK cyber bill targets AI users, not the vendors building it

Ministers reject proposed red lines and emergency shutdown powers, pointing instead to voluntary safeguards

Another Artifactory CVE under attack by AI agents or humans

Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit

33-hour BGP hijack of Softaculous traffic prompts security scramble

Hosting software vendor tells customers to reset credentials and hunt for malicious packages

Copyright © 2026 Lugapel