This Week in Tech, AI & Cybersecurity
Curated highlights • September 25, 2026

Summary: The North Korean "WaterPlum" threat group behind the "Contagious Interview" campaign has compromised at least 30,000 devices across over 100 countries. Posing as employers, they target web developers and IT professionals to siphon funds and account credentials from cryptocurrency wallets.

Summary: The European Court of Auditors evaluated several countries, including Ireland, finding that a lack of intelligence and information sharing among member states is creating significant cybersecurity gaps across the bloc.

Summary: Avis Oglesby, a Cybersecurity Certification Mentor and teacher, shares her vast IT and networking experience—honed through military service and various government roles—to guide aspiring professionals into tech careers.

Summary: Proofpoint has launched a unified agentic system designed to empower organizations to safely adopt AI. It bridges data security and AI governance to protect against emerging risks without losing data control.

Summary: Cybersecurity researchers warn that compromised credentials and stolen passwords pose a looming and critical threat to America's water infrastructure, opening physical utility systems to digital sabotage.

Summary: The notorious hacking collective ShinyHunters claims to have stolen sensitive employee and applicant records from the FBI, demanding the bureau retract a previous cyber warning.

Summary: Cisco discusses the shift from passive to active network security, emphasizing three design pillars—unifying infrastructure, flow protection, and operational assurance—to defend against modern AI-driven threats.

Summary: For the first time, threat actors are leveraging HashiCorp's centralized registry to distribute Go-based malware, hiding payloads within malicious Terraform providers and Go modules.

Summary: Data allegedly stolen by ShinyHunters exposes the identities and roles of FBI analysts working on highly sensitive areas, including electronic surveillance and operations involving China and Russia.

Summary: Threat actors rapidly began exploiting a critical security flaw (CVE-2026-87902) in WordPress just hours after it was disclosed, allowing unauthenticated attackers to achieve remote code execution via local PHP files.

Summary: U.S. Air Force Secretary Troy Meink confirmed the deployment of active "space-control" orbital weapons designed to defend against hostile adversary actions, escalating concerns over the militarization of space.

The editorial opinions expressed here are those of the author and represent the view from the cheap seats — which, it turns out, have an excellent view of the dumpster fire.

Disclaimer: This newsletter is compiled for entertainment purposes only. While every effort is made to ensure accuracy, the content in this publication is generated with the assistance of artificial intelligence and may contain errors, inaccuracies, or omissions. Article summaries are editorial interpretations of source material and may not perfectly reflect the original reporting. URLs and hyperlinks, where included, should be independently verified before use. Source attributions are based on information provided at the time of compilation and may not reflect subsequent corrections or updates made by the original publisher. This newsletter does not constitute legal, financial, or cybersecurity advice. Readers should independently verify all information before acting on it and consult qualified professionals where appropriate. The views and opinions expressed in editorial commentary are those of the newsletter and do not represent the views of any cited organization, publication, or individual. Neither the publisher nor any contributing party accepts liability for any loss or damage arising directly or indirectly from reliance on information contained in this newsletter. If you identify an error or inaccuracy, please contact us so we can issue a correction promptly.