RatHat Android Trojan Uses AI for Automation - Zimperium discovered a new Android trojan that uses generative AI to navigate and control infected devices in real time while stealing credentials, PINs, banking data and hijacking the accessibility.
Source: securityweek.com/rathat-android…
A new campaign uses VBScript, scheduled tasks and hidden PowerShell modules to harvest business documents, Wi-Fi passwords and clipboard contents, with redundant token-authenticated C2 servers.
Source: thehackernews.com/2026/09/taskst…
Cyberattack hits University of Munich, potentially exposing student financial data - LMU Munich is investigating a breach exposing enrollment data, including bank account details, health insurance numbers and 52,000 students' financial info.
Source: therecord.media/cyberattack-hi…
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure - A previously undocumented Node.js remote access trojan called ChainScript is delivered via ClickFix lures and uses a Polygon smart contract.
Source: thehackernews.com/2026/09/clickf…
Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems - Hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles at two Colorado water utilities; officials described the attackers as Iran-linked
Source: securityweek.com/colorado-water…
Gemini breached three companies during security test - Gemini AI model accessed real company systems without authorization during a May cybersecurity evaluation, using a guessed password and credentials exposed in a public repository.
Source: therecord.media/gemini-google-…
Rust Team Members and Popular Crate Owners Targeted via Video Calls - The Rust project warned of an ongoing social engineering campaign, linked to North Korea, luring Rust-lang maintainers and crates.io owners.
Source: securityweek.com/rust-team-memb…
Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities - CISA added three Linux kernel flaws to its KEV catalog, warning federal agencies to patch within three days; the bugs allow denial-of-service, memory disclosure
Source: securityweek.com/organizations-…
Helpfeel's Gyazo image-sharing service confirms a breach exposing ~23.6 million user records (names, emails, password hashes, billing info) and ~490 million image metadata records after a hacker exploited a flaw in its image upload server on September 11.
Hacktron researchers used Claude to build an exploit for an unpatched libheif flaw in OpenAI's Discourse forum and chained it with an over-privileged sign-in token bug to take over employee ChatGPT/Codex accounts and reach internal GitHub repositories.
China-linked espionage group NightEagle (APT-Q-95), previously focused on Asia's tech and defense sectors, expands to Russian enterprises, breaching Microsoft Exchange servers with the GhostContainer backdoor via stolen VPN credentials.
Google Threat Intelligence reveals it had an undercover Mandiant analyst inside TeamPCP's inner circle during the group's record-breaking open-source supply-chain hacking spree, helping revoke stolen credentials and feeding identifying details that led to two arrests in Australia
Brevo suffered a supply-chain attack in which a compromised long-lived Cloudflare API key injected malware into scripts embedded in 100,000+ websites, serving ClickFix 'verify you are human' pages and attempting to backdoor WordPress admin sessions with PHP webshells.
A critical unauthenticated RCE (CVE-2026-58138, CVSS 9.8) in the open-source Orkes Conductor workflow engine is under active exploitation; GraalVM HostAccess.ALL lets malicious JS/Python expressions run OS commands as the (often root) Conductor process.
The Plugin4Shell flaw lets a repository owner swap pinned plugin code across Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI AI coding agents, bypassing commit-hash pinning; Anthropic and OpenAI shipped fixes while Copilot and Gemini CLI remain exposed
A financially motivated actor posing as a bug bounty hunter ships LLM-written npm packages carrying the PhantomRaven stealer, which harvests CI/CD secrets (GitHub Actions, GitLab CI, Jenkins, CircleCI) and git/npm credentials from developers' machines.
A cluster of 13 malicious npm packages delivers WeaselBiscuit, a stripped-down DPRK-linked JavaScript stealer that harvests Chrome extension storage across Windows, macOS and Linux, using Npoint dead drops for payloads and C2 config.
17K Followers 416 FollowingOpen-source tests of web browser privacy.
Developed and maintained by @arthuredelstein.
Follow @privacytests for the latest browser test results!
11K Followers 65 FollowingLatest news from the Linux world and open-source software. Reviews, analyses, tutorials, and more. Everything FOSS, all in one place.
20K Followers 2K Followingᴛʜᴇ ʙᴇsᴛ ɢɴᴜ/ʟɪɴᴜx ᴄᴏᴍᴘᴜᴛᴇʀs🐧 💻 Elegant and powerful hardware with the best customer service 🇪🇺 EU brand from Spain 🌏 Shipping to the whole world
324K Followers 525 FollowingProgressive JavaScript framework for building modern web interfaces. Created by @evanyou, maintained by https://t.co/GBCO6zpR6W.
6K Followers 102 FollowingFocused on helping you opt out of surveillance capitalism and learn more about how you can take back your privacy + data-sovereignty.
Hosted by @sethforprivacy
6K Followers 316 FollowingSharing practical online privacy tips and security best practices that anybody can start using.
YouTube: https://t.co/7lVrfLYlAC
472K Followers 1K FollowingWe're the Electronic Frontier Foundation. This account is no longer active or monitored. Find EFF's active social media at https://t.co/dIWsCr4uCF.
95K Followers 6K FollowingFounder https://t.co/ap056uzeZu
https://t.co/YzI5yG1YLK
https://t.co/QbGtbvXNuW
Dance like no one's watching. Encrypt like everyone is.
435K Followers 190 FollowingBrowse and search faster and privately. Now over 128M users!
Support us: https://t.co/yFEtGCXExI
Build: https://t.co/JjscXOnw78
Get help: @BraveSupport
5K Followers 206 FollowingTrusted by millions to build the world's alternative search engine since 2004 as pioneer of private, transparent and sustainable access to knowledge on the web
10K Followers 22 Following👀 Signal Messenger of note-taking apps 🤓 aka 100% open source and free (as in freedom) note taking app focused on your experience and your privacy. 🔑🛡️
6K Followers 1 FollowingOpen-source Anonymous Email Forwarding. Block tracking pixels and protect your real email from spam by using a different address for every website.
45K Followers 1K FollowingCrowd-sourced software recommendations, tech news & great apps! What application, service or game would you like to replace? Co-founded by @olaj & @raawmarkus
22K Followers 924 FollowingBuilding technology with #security, #privacy, #freedom for a society that respects people. Contact support via e-mail, not Twitter: https://t.co/F5EHDHPNjP
231K Followers 180 FollowingBrowse without borders. No logs. No ads.
The only open-source, audited VPN with free & unlimited access.
By the scientists behind @ProtonMail 🇨🇭
5K Followers 0 FollowingAffordable zero-knowledge end to end encrypted cloudstorage made in Germany.
For support inquiries please use https://t.co/H0oOCaCNxY
145K Followers 0 FollowingOpen source privacy and security focused mobile OS with Android app compatibility.
Forum, Discord and Matrix: https://t.co/C0RaJbZosj
375K Followers 478 FollowingProtect your privacy with one encrypted ecosystem: Mail, VPN, Drive, Pass, & more.
Swiss & Open Source
🛟 @ProtonSupport | 🐾 Private AI @asklumo
24K Followers 21 FollowingSimpleLogin by @ProtonPrivacy lets you send and receive emails anonymously. Protect your email address today with our privacy-preserving email aliases.
21K Followers 172 FollowingPrivacy focused mobile phone operating system built on top of the android open source project. Produced as part of the mission of the non-profit @calyxinstitute
38K Followers 4 FollowingPrivacy Guides is an impartial, non-profit media outlet focused on consumer tech rights and freedoms. Privacy is a human right, we need to defend it.
78K Followers 74 FollowingTails is a liberatory, FOSS operating system. We help people assert control over their digital lives.
Tails runs on your donations: https://t.co/hUQ7cyw4kE
46K Followers 722 FollowingPrivacy tools, apps & services to counter mass surveillance with encryption for better privacy. Estd. in 2015. Follow @PrivacyNotesApp and @GitGem
1K Followers 222 FollowingKubuntu Focus sells computers optimized for Kubuntu LTS. Save time every day with powerful tools, curated apps, docs, and validated upgrades.