"Weaponizing GitLab email addresses."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 24 September 2026, 0320 UTC.

Content and Source:  "Dark Reading" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

159K followers22 articles per week

#security#tech

34

Today

EDR Evasion Stack Helps Process Injection Slip Past Defenses

by Alexander Culafi / 6h

A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.

GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

Leaked GitLab email enables pushes

•

by Rob Wright / 6h

Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.

Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign

by Elizabeth Montalbano / 12h

Threat actors are poisoning ChatGPT, Gemini, and Google AI Overview answers by seeding the Web with malicious links and data and then optimizing the content.

Deception by Design: CISA's Guide to Tricking Cybercriminals

by Arielle Waldman / 15h

The Cybersecurity and Infrastructure Security Agency (CISA) is going old school to help organizations with limited resources set traps for hackers.

How the CISO-CMO Alliance Builds Trust Before Crisis Strikes

by George V. Hulme, Contributing Writer / 16h

Cybersecurity and brand reputation are inextricably linked. Security and marketing leaders who establish regular touchpoints, develop joint crisis communications plans, and translate security risks into their brand impact position their organizations to significantly outperform those treating security as an operational IT concern.

UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks

by Robert Lemos / 17h

The United Arab Emirates and Kingdom of Saudi Arabia together absorbed 50% of all cyberattacks recorded across the Gulf region in the first half of 2026.

Yesterday

Relays Are Masking Chinese Access to Frontier AI Models in the US

by Jai Vijayan / 1d

More than 80,000 AI relay servers are helping users in China mask their identities while they access cutting-edge large language models (LLMs), probably to clone them.

Microsoft Disrupts EvilTokens Device Code Phishing Service

Microsoft disrupts EvilTokens phishing

•

by Alexander Culafi / 1d

Microsoft seized 50 websites and disabled more than 150 domains as part of a coordinated disruption effort against a phishing-as-a-service platform targeting Microsoft 365 accounts.

Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data

2 TTPs

•

by Elizabeth Montalbano / 1d

•

CrowdSec TanStack supplychain leak

Threat actors stole the contents of 170 private repositories using an OAuth token stolen from a former employee's computer through the TanStack npm supply chain attack.

Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real

by Robert Lemos / 1d

As more reports of misalignment incidents underscore AI risks, large AI labs, regular businesses, and even nations are searching for better ways to keep control and be secure.

More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds

1d

Industrial companies are increasing cybersecurity investment as connected operations, AI adoption, and IT/OT convergence expand operational risk.

Sep 21, 2026

How AI Agents Can Trigger Runaway Costs for Enterprises

by Jai Vijayan / 2d

Unbounded consumption is an issue that OWASP currently ranks sixth in its Top 10 for LLM Applications, and it could be an extremely costly one.

ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims?

2 TTPs

•

by Alexander Culafi / 2d

ShinyHunters defaced Cl0p's Dark Web site and claims to have stolen victim data, potentially exposing organizations that paid ransoms to renewed extortion attempts.

Cybercriminals Are Hiding New Malware in Torrents for Popular Films

Torrents spread MovieReaper malware

•

2d

Victims have been identified in Africa, including in Kenya and Uganda.

Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents

OpenAI reveals six misaligned agents

•

by Elizabeth Montalbano / 2d