{"data":[{"id":16845705,"title":"Google Fined €403 Million Over Location Data Practices","link":"https://securityaffairs.com/199494/laws-and-regulations/google-fined-e403-million-over-location-data-practices.html","summary":"Ireland’s DPC fined Google €403 million over GDPR violations involving location data, transparency, retention and user control. Ireland’s Data Protection Com...","source":"Security Affairs","category":"general","vendor":"Google","published_at":"2026-09-21T20:20:23.000Z","created_at":"2026-09-21 21:11:11","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["Google"],"dedup_hash":"18e0ccbe2e7c5cfc","entities_processed":1,"tlp":"WHITE"},{"id":16835581,"title":"CISA alerts of active exploitation of three Linux kernel flaws","link":"https://www.bleepingcomputer.com/news/security/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws/","summary":"The U.S.","source":"BleepingComputer","category":"general","vendor":"Amazon","published_at":"2026-09-21T20:12:17.000Z","created_at":"2026-09-21 20:26:11","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["Amazon","Linux"],"dedup_hash":"65415546935df880","entities_processed":1,"tlp":"WHITE"},{"id":16823133,"title":"EU data regulator fines Google more than $460 million for location data violations  ","link":"https://therecord.media/google-europe-location-data-fine","summary":"Ireland’s Data Protection Commission will fine Google more than €403 million ($462 million) over the tech giant’s processing of location data, concluding an ...","source":"The Record","category":"general","vendor":"Google","published_at":"2026-09-21T19:15:00.000Z","created_at":"2026-09-21 19:26:12","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["Google"],"dedup_hash":"43803d9ab3489095","entities_processed":1,"tlp":"WHITE"},{"id":16809241,"title":"WordPress Click2Shell flaw lets hackers execute PHP on the server","link":"https://www.bleepingcomputer.com/news/security/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server/","summary":"Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell'...","source":"BleepingComputer","category":"general","vendor":"WordPress","published_at":"2026-09-21T18:23:11.000Z","created_at":"2026-09-21 18:26:11","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["WordPress"],"dedup_hash":"a3ba0e36cba94c79","entities_processed":1,"tlp":"WHITE"},{"id":16819355,"title":"Foreign Hackers Target Two Colorado Water Utilities","link":"https://securityaffairs.com/199480/ics-scada/foreign-hackers-target-two-colorado-water-utilities.html","summary":"Hackers targeted two Colorado water utilities, changing OT settings and disabling alarms, but causing no impact on water services or safety. Foreign hackers ...","source":"Security Affairs","category":"general","vendor":null,"published_at":"2026-09-21T18:09:32.000Z","created_at":"2026-09-21 19:11:11","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":null,"dedup_hash":"d59f1e7c04d5aaf6","entities_processed":1,"tlp":"WHITE"},{"id":16802761,"title":"Microsoft to retire Microsoft 365 Companion apps in December","link":"https://www.bleepingcomputer.com/news/microsoft/microsoft-to-retire-microsoft-365-companion-apps-in-december/","summary":"Microsoft will retire the Calendar, People, and Files Microsoft 365 companion apps on December 16 and has asked admins to remove them from managed devices. [.","source":"BleepingComputer","category":"general","vendor":"Microsoft","published_at":"2026-09-21T17:54:49.000Z","created_at":"2026-09-21 17:56:11","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["Microsoft"],"dedup_hash":"2d2d556108fb582a","entities_processed":1,"tlp":"WHITE"},{"id":16806393,"title":"The API was built for applications. What happens when the user is an AI agent?","link":"https://www.scworld.com/perspective/the-api-was-built-for-applications-what-happens-when-the-user-is-an-ai-agent","summary":"AI agents need stronger guardrails as they gain authority to take real-world financial actions.","source":"SC Media","category":"general","vendor":null,"published_at":"2026-09-21T17:50:23.000Z","created_at":"2026-09-21 18:11:12","sector":"Financial","mitre_techniques":null,"iocs":null,"vendors_all":null,"dedup_hash":"dae005b999f0d382","entities_processed":1,"tlp":"WHITE"},{"id":16802995,"title":"Microsoft Teams to allow admins to customize weaponizable file protection","link":"https://www.scworld.com/brief/microsoft-teams-to-allow-admins-to-customize-weaponizable-file-protection","summary":"The upcoming update to Weaponizable File Protection in Microsoft Teams will grant administrators the ability to manually adjust which file types are blocked ...","source":"SC Media","category":"general","vendor":"Microsoft","published_at":"2026-09-21T17:39:50.000Z","created_at":"2026-09-21 17:56:11","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["Microsoft"],"dedup_hash":"5d64a46ec5da494f","entities_processed":1,"tlp":"WHITE"},{"id":16806225,"title":"Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR","link":"https://thehackernews.com/2026/09/fake-lastpass-authenticator-installer.html","summary":"A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a pass...","source":"The Hacker News","category":"general","vendor":"Microsoft","published_at":"2026-09-21T17:31:01.000Z","created_at":"2026-09-21 18:11:11","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["Microsoft","GitHub","Linux"],"dedup_hash":"777e2fb6fd1d63b1","entities_processed":1,"tlp":"WHITE"},{"id":16799843,"title":"CISA recommends cyber decoys to enhance intrusion detection","link":"https://www.scworld.com/brief/cisa-recommends-cyber-decoys-to-enhance-intrusion-detection","summary":"CISA's guidance addresses the challenge organizations face in detecting adversaries who utilize legitimate credentials and \"living off the land\" (LOTL) techn...","source":"SC Media","category":"general","vendor":null,"published_at":"2026-09-21T17:26:17.000Z","created_at":"2026-09-21 17:41:12","sector":null,"mitre_techniques":[{"id":"T1021","name":"Remote Services","tactic":"Lateral Movement"}],"iocs":null,"vendors_all":null,"dedup_hash":"e0a3875a3b3b5ea8","entities_processed":1,"tlp":"WHITE"},{"id":16796518,"title":"Google Hit With $463 Million Fine for EU Location Data Rule Breach","link":"https://www.securityweek.com/google-hit-with-463-million-fine-for-eu-location-data-rule-breach/","summary":"Google has been fined 403 million euros ($463 million) for breaching the European Union’s strict privacy rules because it mishandled users’ location data. Th...","source":"SecurityWeek","category":"general","vendor":"Google","published_at":"2026-09-21T17:19:53.000Z","created_at":"2026-09-21 17:26:12","sector":null,"mitre_techniques":[{"id":"T1598","name":"Phishing for Information","tactic":"Reconnaissance"}],"iocs":null,"vendors_all":["Google"],"dedup_hash":"18985f75656d8450","entities_processed":1,"tlp":"WHITE"},{"id":16806226,"title":"Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto","link":"https://thehackernews.com/2026/09/contagious-interview-campaign.html","summary":"The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and sipho...","source":"The Hacker News","category":"general","vendor":"Apple","published_at":"2026-09-21T17:19:00.000Z","created_at":"2026-09-21 18:11:11","sector":"Financial","mitre_techniques":null,"iocs":null,"vendors_all":["Apple"],"dedup_hash":"5c979d9149d4250c","entities_processed":1,"tlp":"WHITE"},{"id":16793143,"title":"Microsoft resolves incorrect Defender Antivirus alerts","link":"https://www.scworld.com/brief/microsoft-resolves-incorrect-defender-antivirus-alerts","summary":"The problem, which surfaced in the Windows Insider program as early as June and was acknowledged by Microsoft in late August, led to erroneous notifications ...","source":"SC Media","category":"general","vendor":"Microsoft","published_at":"2026-09-21T17:03:38.000Z","created_at":"2026-09-21 17:11:12","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["Microsoft"],"dedup_hash":"23b1241b4ecae643","entities_processed":1,"tlp":"WHITE"},{"id":16793144,"title":"PhantomRaven malware distributed via npm package registry","link":"https://www.scworld.com/brief/phantomraven-malware-distributed-via-npm-package-registry","summary":"The malware, likely developed using a large language model, according to CrowdStrike's Counter Adversary Operations, was distributed through typosquatted and...","source":"SC Media","category":"general","vendor":"CrowdStrike","published_at":"2026-09-21T16:58:21.000Z","created_at":"2026-09-21 17:11:12","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["CrowdStrike"],"dedup_hash":"fed33dfe6a124bc7","entities_processed":1,"tlp":"WHITE"},{"id":16806227,"title":"Google Fined €403 Million Over GDPR Violations Tied to Location Data","link":"https://thehackernews.com/2026/09/google-fined-403-million-over-gdpr.html","summary":"Google has been fined €403 million for breaking the EU's data protection law, the GDPR, in the way three of its features handled people's location data from ...","source":"The Hacker News","category":"general","vendor":"Google","published_at":"2026-09-21T16:57:31.000Z","created_at":"2026-09-21 18:11:11","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["Google"],"dedup_hash":"9dcab3e9bd37e050","entities_processed":1,"tlp":"WHITE"},{"id":16793145,"title":"Iran-linked Handala Hack group utilizes HEAVYGRAM and CRUDEEXCLUDE malware","link":"https://www.scworld.com/brief/iran-linked-handala-hack-group-utilizes-heavygram-and-crudeexclude-malware","summary":"HEAVYGRAM is a versatile tool capable of remote command execution, system and network information discovery, data exfiltration, screenshot capture, and estab...","source":"SC Media","category":"general","vendor":"Microsoft","published_at":"2026-09-21T16:51:36.000Z","created_at":"2026-09-21 17:11:12","sector":null,"mitre_techniques":[{"id":"T1041","name":"Exfiltration Over C2 Channel","tactic":"Exfiltration"}],"iocs":null,"vendors_all":["Microsoft"],"dedup_hash":"70bf9761bc9b5f40","entities_processed":1,"tlp":"WHITE"},{"id":16783594,"title":"After spending billions, OpenAI still has gaps in its cybersecurity","link":"https://www.csoonline.com/article/4224453/after-spending-billions-openai-still-has-gaps-in-its-cybersecurity.html","summary":"Two separate reports of security flaws in OpenAI systems highlight how even a company spending billions on developing its own AI-powered cybersecurity testin...","source":"CSO Online","category":"enterprise","vendor":"Amazon","published_at":"2026-09-21T16:24:03.000Z","created_at":"2026-09-21 16:26:12","sector":"Transportation","mitre_techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactic":"Initial Access"}],"iocs":null,"vendors_all":["Amazon"],"dedup_hash":"623009851fe25c1a","entities_processed":1,"tlp":"WHITE"},{"id":16780313,"title":"Dems seek top-to-bottom assessment of CISA workforce","link":"https://cyberscoop.com/house-democrats-cisa-force-structure-assessment-act/","summary":"After the exit of around 1,000 CISA workers, legislation from three top House Democrats orders a force structure assessment like that more common to military...","source":"Cyberscoop","category":"general","vendor":null,"published_at":"2026-09-21T16:05:51.000Z","created_at":"2026-09-21 16:11:12","sector":"Defense","mitre_techniques":null,"iocs":null,"vendors_all":null,"dedup_hash":"27cb4c6ffa95fa89","entities_processed":1,"tlp":"WHITE"},{"id":16779933,"title":"New InjectEave technique allows eavesdropping via electromagnetic signals","link":"https://www.scworld.com/brief/new-injecteave-technique-allows-eavesdropping-via-electromagnetic-signals","summary":"InjectEave is an electromagnetic side-channel attack that targets non-linear analog components found in many electronic devices, such as amplifiers and conve...","source":"SC Media","category":"general","vendor":null,"published_at":"2026-09-21T15:58:18.000Z","created_at":"2026-09-21 16:11:12","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":null,"dedup_hash":"69ac54c92abab34a","entities_processed":1,"tlp":"WHITE"},{"id":16776465,"title":"Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer","link":"https://www.securityweek.com/fake-lastpass-installers-push-kernel-level-edr-killer-rapuncel-stealer/","summary":"The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware. The post Fake LastPass Installers Push Kerne...","source":"SecurityWeek","category":"general","vendor":"Linux","published_at":"2026-09-21T15:46:58.000Z","created_at":"2026-09-21 15:56:11","sector":null,"mitre_techniques":null,"iocs":null,"vendors_all":["Linux"],"dedup_hash":"4e77d5c90fed43a6","entities_processed":1,"tlp":"WHITE"}],"pagination":{"page":1,"limit":20,"total":7411,"pages":371}}