Tech

Kiteworks patches max-severity code execution flaw after warning of zero-day attacks

Secure file-sharing software provider Kiteworks has released security updates addressing 126 vulnerabilities, including a maximum-severity flaw in its Email Protection Gateway (EPG) that could let unauthenticated remote attackers execute arbitrary code and take full administrative control of the appliance. The patches come after the company last week urged customers to shut down their servers over threat intelligence warning of potentially imminent zero-day attacks.

Police Dismantle KillSec Ransomware Gang and Arrest Alleged 16-Year-Old Administrator

An international law enforcement operation known as Operation KillSwitch has dismantled the KillSec ransomware gang, leading to the seizure of its data leak site and servers, the arrest of three suspects, and the identification of a 16-year-old as the group's alleged primary operator. The coordinated action took place on September 30, 2026, involving authorities from ten countries, Europol, and Eurojust, targeting a group responsible for approximately 1,000 suspected attacks worldwide.

Microsoft detects hackers exploiting critical Zimbra bug before public disclosure

Microsoft Threat Intelligence has detected attackers actively exploiting a critical unauthenticated command injection vulnerability in Zimbra Collaboration Suite, CVE-2026-73570, weeks before the flaw was publicly disclosed. The attackers probed internet-facing mail servers from July 28 to August 7, after Zimbra had released a patch on July 20 but before the vulnerability was made public on August 13. Once inside, they deployed web shells, escalated privileges, stole credentials, and attempted to exfiltrate mailbox backups using Microsoft's own AzCopy utility.

1 Oct·3 min

DeepSeek and Huawei Release Open-Source AI Programming Tools for Ascend Chips

Chinese AI company DeepSeek, in partnership with Huawei, has released open-source programming tools for Huawei's Ascend AI chips, designed to offer developers an alternative to Nvidia's dominant CUDA platform. The release includes libraries for matrix multiplication and chip-to-chip communication, as well as native support for the TileLang programming language on the latest Ascend 950 hardware.

1 Oct·3 min

England's secondary schools report fewer cyber incidents and faster recoveries, Ofqual survey finds

England's secondary schools reported slightly fewer cybersecurity incidents during the 2025/26 academic year and recovered more quickly when attacks did occur, according to a survey by exams regulator Ofqual.

1 Oct·3 min

Satlyt Raises $8M to Build Middleware for AI in Space, Launches Software on SpaceX Rocket

Satlyt, a startup co-founded by a former Google and SpaceX product manager, has raised $8 million in seed funding to develop software that lets satellites run AI models collaboratively in orbit. The company's software is set to launch Thursday on a SpaceX rocket alongside the first prototype for Google's space data center effort, Project Suncatcher.

1 Oct·3 min·2 sources

OpenAI says Moonshot AI led campaign to extract hidden model reasoning

OpenAI has revealed that a coordinated campaign in July attempted to extract protected reasoning traces from its large language models, with the company saying the effort was linked to actors associated with China-based Moonshot AI. The campaign, which OpenAI described as consistent with adversarial distillation, was disrupted by July 28, and the company stated that no database was compromised and encryption was not broken.

1 Oct·2 min·2 sources

EU regulators examine Binance's use of MiCA licensing exemption

European regulators are investigating whether Binance is lawfully serving customers in the European Union under a exemption in the bloc's crypto-asset regulation, according to a report from the Financial Times cited by Cointelegraph. The European Securities and Markets Authority (ESMA) alongside regulators in France, Germany and Greece are examining the exchange's use of reverse solicitation under the Markets in Crypto-Assets Regulation (MiCA).

Hackers stole Pentagon personnel records of over 3 million people

The Pentagon's Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data after breaching the human resources management system in October 2025, exploiting a vulnerability in file-sharing systems that went undetected until July 2026.

MetaMask discloses infrastructure security incident, exits validators as precaution

Cryptocurrency wallet provider MetaMask has disclosed an ongoing security incident affecting some of its infrastructure, prompting the company to proactively exit affected validators in its non-custodial staking operations as a precautionary measure.

Dogecoin DeFi Testnet Launches as DogeOS Aims to Expand DOGE Beyond Payments

Dogecoin has entered the DeFi arena with the launch of a testnet for DogeOS, a platform designed to turn the meme coin into more than just a vehicle for payments and speculation. However, the project's applications currently depend on selected operators rather than Dogecoin miners, raising questions about its decentralization.

MetaMask says no funds at risk as it exits Ethereum validators after security incident

MetaMask said it is responding to a security incident affecting part of its infrastructure by exiting affected Ethereum staking validators as a precaution, and said it has not identified an immediate threat to wallets. An Ethereum security researcher estimates that about 0.36 ETH in rewards was diverted, while the exits cover validators holding roughly 523,000 ETH.

1 Oct·1 min·2 sources

China introduces world's strictest rules on human-like AI chatbots

China has brought in the most far-reaching regulations in the world on human-like AI chatbots, placing strict limits on any system capable of a 'sustained emotional interaction' with a human. The rules, introduced on 15 July, extend Beijing's existing machinery for monitoring technology into the realm of AI relationships.

Hackers exploiting critical Zimbra flaw to steal emails, Microsoft warns

Attackers have been actively exploiting a critical unauthenticated command injection vulnerability in the Zimbra Collaboration Suite to steal email backups and authentication credentials from vulnerable organizations, Microsoft warned on Wednesday. The flaw, tracked as CVE-2026-73570, was patched by Zimbra maintainer Synacor on July 20, but was not publicly disclosed until more than three weeks later, leaving a window for exploitation.

OpenAI unveils Decisions API, a fast classifier reminiscent of startup Jev

OpenAI has unveiled a new Decisions API at its Dev Day event, a product that allows developers to give the company's Luna model a predefined set of choices — such as image categories or agent behaviours — and receive fast, probability-weighted outputs. The API closely resembles Jev, a model released earlier this month by TypeSafe AI, a startup founded by former OpenAI engineer Diogo Almeida. Altman said the tool is designed to be extremely fast while maintaining capabilities like image understanding and safety protections.

30 Sept·3 min·2 sources