Comments on: Cyber security news September 2026

By: Tomi Engdahl

Tomi Engdahl — Mon, 21 Sep 2026 12:30:51 +0000

Olivia Fletcher / Bloomberg:
Ireland’s DPC fines Google €403M over how it processed location data after complaints from European consumer rights groups, and gives it six months to comply
https://www.bloomberg.com/news/articles/2026-09-21/google-fined-by-irish-watchdog-for-location-data-rule-breach

By: Tomi Engdahl

Tomi Engdahl — Mon, 21 Sep 2026 12:27:48 +0000

“We Think the Security Control Is Working” Is No Longer Good Enough

Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.

https://www.securityweek.com/we-think-the-security-control-is-working-is-no-longer-good-enough/

By: Tomi Engdahl

Tomi Engdahl — Mon, 21 Sep 2026 12:24:37 +0000

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.

https://www.securityweek.com/brevo-supply-chain-attack-injects-malware-into-100000-websites/

By: Tomi Engdahl

Tomi Engdahl — Mon, 21 Sep 2026 12:24:15 +0000

NightmareStresser DDoS Service Disrupted in International Operation

Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world.

https://www.securityweek.com/nightmarestresser-ddos-service-disrupted-in-international-operation/

By: Tomi Engdahl

Tomi Engdahl — Mon, 21 Sep 2026 12:23:42 +0000

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

https://www.securityweek.com/microsoft-patches-18-vulnerabilities-in-ai-cloud-products/

By: Tomi Engdahl

Tomi Engdahl — Mon, 21 Sep 2026 12:23:18 +0000

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code

Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts.

https://www.securityweek.com/ai-built-exploit-and-sign-in-flaw-opened-path-to-internal-openai-code/

By: Tomi Engdahl

Tomi Engdahl — Mon, 21 Sep 2026 12:22:42 +0000

Google Confirms Gemini AI Breached Three Firms

Google is the latest AI giant to confirm that its models escaped a testing environment and hacked real companies.

https://www.securityweek.com/google-confirms-gemini-ai-breached-three-firms/

By: Tomi Engdahl

Tomi Engdahl — Mon, 21 Sep 2026 12:21:57 +0000

Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems

The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said.

https://www.securityweek.com/colorado-water-utilities-hit-by-cyberattacks-targeting-ot-systems/

By: Tomi Engdahl

Tomi Engdahl — Mon, 21 Sep 2026 12:21:02 +0000

CrowdSec Confirms Source Code Stolen in Supply Chain Attack

The cybersecurity firm believes the data breach was the result of the May 2026 TanStack supply chain attack.

https://www.securityweek.com/crowdsec-confirms-source-code-stolen-in-supply-chain-attack/

By: Tomi Engdahl

Tomi Engdahl — Sun, 20 Sep 2026 23:45:56 +0000

“Take another selfie to get back into your account.” https://trib.al/i9982a8

Ear to Ear
Google Now Asking For Users’ Video Selfies to Verify Their Identities
“Take another selfie to get back into your account.”
https://futurism.com/artificial-intelligence/google-asks-video-selfies?fbclid=IwdGRjcAUdP41jbGNrBR0_fnBkb2YFZXh0bgNhZW0CMTEAc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEezHIeBQ3nnL4bORrZBCuB4WB5kREB31rbRJ8tgUsOBQLpy3E2ctFKZxi4xSg_aem_xKAJ9IkH9dK4HKCS5LcozA