TechCapsules

The Crime Investigation Department (CID) of Andhra Pradesh concluded a three‑day training programme on cyber security and cyber hygiene for its investigation officers on Saturday at the headquarters in Vijayawada. Directed by CID Director General of Police Ravi Shankar Ayyanar, the course aimed to boost police capability in probing cyber offences and to instill practices in safety. Cyber‑security expert Sandeep Madulkar, CEO of Sytech Labs, served as the resource person, delivering modules on emerging threats, digital arrest [...]

The U.S. Cybersecurity and Infrastructure Security Agency added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming active exploitation. Red Hat issued advisories on September 19, 2026, urging high‑priority fixes and noting public exploits. Federal agencies are directed to patch by September 21 under BOD 26‑04. The flaws—CVE‑2026‑80844, CVE‑2026‑81000, CVE‑2026‑68121, and CVE‑2026‑74469—were disclosed by researcher Asim Manizada and involve local privilege escalation. The incidents underscore the growing threat of AI‑driven attacks on enterprise systems. [...]

Identity visibility, the ability to see every identity, its access rights, and runtime usage, is recognized as the foundation of identity security. Stolen credentials remain the top initial access vector in breach reports, and cloud complexity creates a surface of “identity dark matter” – local accounts, embedded service credentials, and legacy flows that evade central IAM. Traditional IAM tools report intended permissions but not actual enforcement or usage, leaving gaps that attackers exploit with legitimate‑appearing activity. Effective [...]

Mosyle, the sole Apple Unified Platform, promotes its enterprise‑grade solution for deploying, managing, and protecting Apple devices, citing trust from over 45,000 organizations. A recent viral X post highlighted the security of handwritten passwords, prompting discussion about password management tools. In response, Dashlane announced a new Vault Enforcement feature designed to strengthen credential security in corporate environments. The update aims to address persistent challenges in enterprise password management and enhance overall security posture for organizations using Apple [...]

Orkes Conductor, a workflow automation platform, is under active exploitation due to CVE‑2026‑58138, a critical unauthenticated remote code execution flaw (CVSS 9.8). The vulnerability allows attackers to run arbitrary OS commands by submitting malicious JavaScript or Python expressions to the workflow API before authentication. Fortinet reported 1,290 attack attempts blocked in 24 hours, a 132% rise, with nearly 7,000 attempts since September 2, 2026. Primary sources of activity include Germany, Hong Kong, Indonesia, the U.A.E., and India. [...]

The Taipei District Prosecutors’ Office indicted former deputy director Hsu Hsih‑chung of the National Institute of Cyber Security’s research and acquisition center, along with three subordinates, for hacking the institute’s classified database. Prosecutors allege Hsu built an unauthorized crawler to bypass the budget management system, accessing internal budget documents, employee national ID and health insurance numbers, and other privileged data. The indictment claims Hsu shared the stolen information with the three defendants, who stored it on personal [...]

AI is reshaping the cybersecurity landscape by accelerating attackers’ ability to chain familiar weaknesses—excessive permissions, unpatched systems, exposed authentication flows—into cross‑domain attack paths that span identities, endpoints, applications, networks and AI models. Microsoft introduced Secure Now within its Security Exposure Management suite in May 2026 to give practitioners actionable guidance for hardening these fundamentals as organizations adopt AI. The tool prioritizes controls that limit autonomous agent abuse, such as governing agent identities, isolating execution, restricting outbound traffic and monitoring [...]

Quantum X Labs Inc. (NASDAQ: QXL) introduced a quantum‑native cybersecurity framework under its newly created QuantumQ Security division. The architecture is built on three layers—Detect, Encrypt and Verify—that employ quantum‑state properties rather than conventional cryptographic wrappers. The Detect layer, called LayerQake, monitors quantum‑state anomalies to spot breaches; the Encrypt layer, Qatacomb, secures data using quantum‑native protocols; and the Verify suite provides quantum‑assisted proof of authenticity, integrity and key ownership. The rollout follows the appointment of former Mossad [...]