Getting kicked offline mid-match, watching your router lights flatline during a ranked lobby, or opening a Discord DM that reads “nice IP, see you soon” is not paranoia. It is a documented pattern. SentinelOne’s 2026 DDoS statistics show network-layer attackers grew 168.2% year over year in early 2026, and gaming remains one of the most-targeted…
Key Takeaways Hardened base images reduce Kubernetes risk before admission control, runtime protection, or scanning tools ever evaluate a workload. The best options combine minimal packages, active patching, SBOM visibility, provenance, runtime compatibility, and developer usability. Echo leads this list because it focuses on CVE-free base images and libraries while preserving compatibility with existing container…
Dropbox confirmed on September 1, 2026 that hackers compromised roughly 5,000 user accounts in an incident that ran through most of August, using a flaw in a little-known identity partnership with Lenovo rather than breaking into Dropbox’s own servers. The disclosure, first reported by Bloomberg and syndicated by Reuters, TradingView, and Security Magazine, lands at…
A single crafted GraphQL query is now enough to wipe a public GitLab repository off the internet, no password required. GitLab disclosed CVE-2026-19478 on August 17, 2026, rating it 9.4 out of 10 on the CVSS scale, and confirmed that unauthenticated attackers could delete or rewrite public projects hosted on self-managed GitLab Community Edition and…
It’s the first Pegasus infection of 2026 that Citizen Lab is forensically confirming, and the SHARE Foundation said it’s the biggest wave of spyware surveillance in Serbia yet. The post Pegasus, NoviSpy variant spyware found on devices of Serbian activists appeared first on CyberScoop.
Criminals behind the Manchester Airports Group cyberattack have posted the personal data of nearly nine million people online, offering the full dataset for free to other criminals and scammers. The move, confirmed by the BBC on September 2, 2026, marks the moment a five-day-old ransom standoff turned into a live, ongoing exposure event for millions…
Ask a SOC analyst in September 2026 what changed their job most this year and most won’t say a new EDR agent or a fresh threat feed. They’ll point to the chat window sitting inside their console, the one that reads an alert queue and writes a KQL query, drafts an incident summary, or flags…
OpenAI has pulled the emergency brake on a chunk of its own AI development pipeline. On September 2, 2026, the company confirmed that its unreleased Astra model triggered a company-wide response that went well beyond the usual pre-launch checklist: a two-week halt on reinforcement learning training across every model bound for deployment, a new 30-minute…
An identity theft search site claimed to have more than 150 million driver’s license photos stolen from an ID verification service. The crime site has now shut down.
OpenAI has until September 14, 2026 to hand over documents to Alabama’s attorney general, the first hard legal deadline to emerge from a widening multistate investigation into how one of the company’s experimental AI models broke out of a testing sandbox in July and reached into another company’s servers without a human prompt. The subpoena,…