Sami Laiho
LightNews LightNews
banner
samilaiho.com
Sami Laiho
@samilaiho.com
1.7K followers 180 following 4.5K posts
Keynote-speaker, Chief Research Officer, Microsoft MVP since 2011

More info: https://samilaiho.com/
Posts Replies Media Videos
samilaiho.com
Cyberattack hits University of Munich, potentially exposing student financial
data
therecord.media/cyberattack-...
Cyberattack hits University of Munich, potentially exposing student financial data
The university, commonly known as LMU Munich, said Saturday that an attacker accessed enrollment data stored on one of its IT systems.
therecord.media
September 22, 2026 at 4:49 PM
samilaiho.com
Russia reports thousands of cyberattacks on election infrastructure during
vote
therecord.media/russia-repor...
Russia reports thousands of cyberattacks on election infrastructure during vote
Claims by officials of cyberattacks against election infrastructure could not be independently verified. Russian officials provided little technical evidence about the attacks or who it claimed who wa...
therecord.media
September 22, 2026 at 4:48 PM
samilaiho.com
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
www.microsoft.com/en-us/securi...
TerminalFix campaign deploys a reverse tunnel through multistage intrusion | Microsoft Security Blog
Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.
www.microsoft.com
September 22, 2026 at 4:48 PM
samilaiho.com
Microsoft reminds admins to migrate Entra ID users to passkeys
www.bleepingcomputer.com/news/microso...
Microsoft reminds admins to migrate Entra ID users to passkeys
Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions after it retires SMS first-factor sign-in starting in February 2027.
www.bleepingcomputer.com
September 22, 2026 at 4:47 PM
samilaiho.com
Microsoft: September updates break File History backup feature
www.bleepingcomputer.com/news/microso...
Microsoft: September updates break File History backup feature
Microsoft warned that the built-in File History backup feature in Windows may stop working on some systems after installing the September 2026 security updates.
www.bleepingcomputer.com
September 22, 2026 at 4:47 PM
samilaiho.com
BIG-IP APM vulnerability CVE-2026-94127

#critical #9.8

my.f5.com/manage/s/art...
myF5
my.f5.com
September 22, 2026 at 4:14 PM
samilaiho.com
www.bleepingcomputer.com/news/microso...
Microsoft shares workaround for Windows domain login issues
Microsoft shared a temporary fix on Wednesday for a known issue that prevents Windows 11 users from logging in with valid domain credentials after installing the September 2026 security updates.
www.bleepingcomputer.com
September 22, 2026 at 7:08 AM
samilaiho.com
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
arstechnica.com/security/202...
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google’s threat intelligence group said it had a mole inside TeamPCP's inner circle.
arstechnica.com
September 21, 2026 at 11:14 AM
samilaiho.com
New RatHat Android malware uses AI to automate device control
www.bleepingcomputer.com/news/securit...
New RatHat Android malware uses AI to automate device control
A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices.
www.bleepingcomputer.com
September 21, 2026 at 11:14 AM
samilaiho.com
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
www.bleepingcomputer.com/news/securit...
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service.
www.bleepingcomputer.com
September 21, 2026 at 11:13 AM
samilaiho.com
Most conferences make you pick a lane. Live! 360 Tech Con doesn't.

Learn more: Live360Events.com/Orlando

Register by September 25th and Save $500 with my code here: na.eventscloud.com/ereg/newreg....
September 21, 2026 at 5:53 AM
samilaiho.com
US military had close call after using AI for false intelligence report,
sources say
edition.cnn.com/2026/09/18/p...
Exclusive: US military had close call after using AI for false intelligence report, sources say | CNN Politics
The episode shows the risks of using this new, relatively poorly understood technology in the middle of the Iran war
edition.cnn.com
September 20, 2026 at 12:15 PM
samilaiho.com
Totolink A3002MU — Multiple Remote Code Execution Vulnerabilities
URL: opencve.flaow.eu/cve/?vendor=...
Classification: Critical, Solution: Unavailable, Exploit Maturity: Functional, CVSSv3.1: 10.0
Totolink CVEs and Security Vulnerabilities - OpenCVE
Explore the latest vulnerabilities and security issues of Totolink in the CVE database
opencve.flaow.eu
September 20, 2026 at 12:05 PM
samilaiho.com
Linux Kernel — Three Actively Exploited Vulnerabilities
URL: www.cisa.gov/known-exploi...
Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.8
Known Exploited Vulnerabilities Catalog | CISA
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative so...
www.cisa.gov
September 20, 2026 at 12:05 PM
samilaiho.com
Customer Data Permanently Lost in Iran Strikes on Amazon Data Centers
www.wired.com/story/custom...
Customer Data Permanently Lost in Iran Strikes on Amazon Data Centers
Amazon Web Services didn’t design its data centers to withstand war, and now the company admits it can’t recover what’s been lost.
www.wired.com
September 19, 2026 at 10:05 PM
samilaiho.com
security.apple.com/blog/apple-r...
Apple Reference Image: A New Approach for Verified Photography - Apple Security Research
Introducing Apple Reference Image, a new solution for verifiable photography on iPhone. This new, opt-in camera mode lets a photographer create a securely timestamped reference image that accurately d...
security.apple.com
September 19, 2026 at 10:03 PM
samilaiho.com
Ransomware incidents in Japan in the first half of 2026: Investigation of The
Gentlemen’s infrastructure and evidence of Qilin's AI use
blog.talosintelligence.com/ransomware-i...
Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
Ransomware incidents in Japan rose 4.7% year over year. The Gentlemen was the most active group, with leak-site listings more than doubling from January to July. Qilin ranked second and appeared to us...
blog.talosintelligence.com
September 19, 2026 at 10:01 PM
samilaiho.com
CISA decides weekly vulnerability bulletin isn't necessary anymore
www.theregister.com/security/202...
CISA decides weekly vulnerability bulletin isn't necessary anymore
Agency's shift from static CVSS scores to risk-based prioritization sends the old format packing September 28
www.theregister.com
September 19, 2026 at 10:00 PM
samilaiho.com
Cisco warns of max severity ISE zero-day exploited in attacks
www.bleepingcomputer.com/news/securit...
Cisco warns of max severity ISE zero-day exploited in attacks
Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in the wild.
www.bleepingcomputer.com
September 19, 2026 at 9:59 PM
samilaiho.com
CISA Releases Eight Industrial Control Systems Advisories
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.0: 9.9
ICS Advisories | CISA
ICS Advisory DefinitionsAll Alerts and Advisories
www.cisa.gov
September 18, 2026 at 8:59 AM
samilaiho.com
International Meteor Organization says cyberattack dealt ‘critical blow’ to
website
therecord.media/internationa...
International Meteor Organization says cyberattack dealt ‘critical blow’ to website
A website used around the world for reporting meteors faces weeks of downtime as the organization moves away from systems that were hacked recently.
therecord.media
September 17, 2026 at 12:03 PM
samilaiho.com
Google fixes actively exploited Android zero-day on Pixel devices
www.bleepingcomputer.com/news/securit...
Google fixes actively exploited Android zero-day on Pixel devices
Google has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks.
www.bleepingcomputer.com
September 17, 2026 at 12:02 PM
samilaiho.com
Hackers Stole Flock’s Camera Software, Revealing How the Company Tracks Cars
and People
www.404media.co/hackers-stol...
Hackers Stole Flock’s Camera Software, Revealing How the Company Tracks Cars and People
While people around the U.S. are tearing down Flock cameras, one group of hackers went a step further: extracting the camera's software too.
www.404media.co
September 17, 2026 at 12:01 PM
samilaiho.com
Spain gets its first taste of AI-aided cyber attack
www.theregister.com/cyber-crime/...
Spain gets its first taste of AI-aided cyber attack
Data protection chiefs call for 'immediate review' of data protection models
www.theregister.com
September 17, 2026 at 12:00 PM
samilaiho.com
AI risk and resilience A Mandiant special report September 2026
cloud.google.com/security/res...
Mandiant AI Risk and Resilience Report 2026
Read Mandiant's 2026 AI Risk and Resilience report to explore adversarial AI tactics, frontline red teaming insights, and modern defense architecture.
cloud.google.com
September 17, 2026 at 12:00 PM