EC-Council News, Trends & Updates

Register - https://shorturl.at/IIERJ

💡Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root Heads up, Linux users! Public exploit code is now available for four kernel flaws allowing local users to gain root access. While these vulnerabilities are patched in recent updates, systems with older kernels are at risk. Immediate action is needed - ensure your Linux kernel is fully updated to block these critical local root exploits and protect your machine. Source: [ thehackernews.com ] https://thehackernews.com/2026/09/public-exploits-released-for-four-linux.html

Upcoming Webinar Alert! As AI evolves from responding to instructions to planning, reasoning, accessing data, and taking autonomous actions, new security blind spots are emerging. Register now: https://shorturl.at/gybK8 Are organizations ready for the security challenges of the agentic enterprise? Join us on October 8, 2026, for: Are We Ready for the Agentic Enterprise? Closing AI Security Blind Spots Explore the emerging risks across AI agents, applications, APIs, enterprise data, identities, and external tools—and learn how organizations can strengthen governance, monitoring, access controls, and human oversight. #ECCU #CyberSecurity #Webinar #AgenticAI #AISecurity #AIGovernance

💡Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts Good news for Windows users! Microsoft has resolved a known issue that caused incorrect "Defender Antivirus is turned off" alerts. This bug, triggered after installing recent updates, no longer falsely warns users about their security status. Your Defender Antivirus is working as intended, and the erroneous notifications have been fixed. Stay secure with accurate system alerts! Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/microsoft-fixes-bug-behind-defender-antivirus-is-turned-off-alerts/

Register - https://shorturl.at/DrNnW

💡Windows 11 24H2 Home and Pro reach end of support in October Heads up, Windows 11 users! Microsoft confirmed this week that Windows 11 24H2 Home and Pro editions will reach end-of-support next month, October. Devices running these versions will then stop receiving all updates, including crucial security patches. This cessation of updates can leave your system vulnerable to new threats. To maintain a secure and supported environment, users must upgrade or take action promptly before the deadline. Stay safe! Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/microsoft/windows-11-24h2-home-and-pro-reach-end-of-support-in-october/

Artificial Intelligence is rapidly becoming an essential part of modern cybersecurity, helping organizations improve threat detection, automate response, and strengthen cyber resilience. At the same time, AI introduces new security, governance, and compliance challenges that organizations cannot afford to ignore. Join our webinar "The Intelligent Defense: How AI is Transforming Modern Cybersecurity," on September 22, 2026, featuring cybersecurity expert Ashish Mehta. Register now: https://shorturl.at/rAkFv Discover how AI is transforming SOC operations, threat intelligence, vulnerability management, incident response, and enterprise security while learning practical approaches to AI governance and responsible implementation. #ECCU #Webinar #CyberSecurity #ArtificialIntelligence #AISecurity #SOC #CyberDefense

💡Anthropic wants Claude to analyze your bank account and financial data Anthropic is testing "Claude Money," a new personal finance feature for its AI assistant Claude. This allows users to directly connect their bank accounts, aiming for Claude to "understand your money" by analyzing financial data. This direct integration of AI with sensitive financial information sparks important discussions around data privacy and security for users considering the service. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/artificial-intelligence/anthropic-wants-claude-to-analyze-your-bank-account-and-financial-data/

Building AI is no longer enough. Building AI that is trustworthy, accountable, and audit-ready is the real challenge. Register now: https://shorturl.at/2FLp1 As AI becomes deeply embedded in business operations, organizations face growing pressure around bias, privacy, model misuse, and evolving global regulations. On September 28, Pedro Nunes Oliveira Machado, Data Protection Officer at Ageas Portugal Group and Group Information Security Officer at Ageas Brussels, delivers a practical session on building AI governance frameworks that balance innovation with accountability. #CRAGE #ECCouncil #AIGovernance #TrustworthyAI #AICompliance #ResponsibleAI #DataGovernance #CyberSecurity #Webinar #TechWebinar

💡Acronis warns of actively exploited flaw in its cPanel backup plugin Acronis issued an urgent warning regarding a high-severity Linux local privilege escalation vulnerability found in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk. This critical flaw is actively being exploited in the wild, allowing attackers to gain elevated system privileges. Users must be aware of this serious threat and take immediate action to secure their servers. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/acronis-warns-of-actively-exploited-flaw-in-its-cpanel-backup-plugin/

💡CISA: Critical VMware RCE flaw now exploited by ransomware gangs Urgent CISA alert! Ransomware gangs are actively exploiting a critical VMware vCenter RCE flaw, previously patched in July. This vulnerability presents a significant risk as it's now part of ongoing attacks. Organizations must prioritize immediate patching to defend against potential ransomware compromises. Secure your VMware vCenter instances without delay! Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/cisa-critical-vmware-vcenter-rce-flaw-now-exploited-by-ransomware-gangs/

LIVE NOW | Join Us! Join Creating an Enterprise Data Governance Strategy for the AI Era featuring Dr. Jonathan Reichental. Discover how strong data governance can support data security, privacy, compliance, and responsible AI adoption. Join live now: https://shorturl.at/T0fAa #ECCU #Webinar #CyberSecurity #DataGovernance #AI #AIGovernance

Shadow AI does not ask for permission. And by the time most organizations notice it, the damage is already done. Register now:https://shorturl.at/XGzd7 On September 23, Bennie Cleveland, vCISO at VanRein Compliance and an enterprise risk strategist with 20+ years of experience, returns for Session 3 of the four-part CRAGE webinar series with a real-world, use-case-driven session on tackling the AI governance challenges already inside your organization. AI risks surface through unauthorized tool adoption, ungoverned third-party integrations, and data exposure that nobody planned for. This session shows you how to identify, assess, and control them. Missed the earlier sessions? Catch up here: Session 1: https://youtu.be/bMtN4r9lm4s?si=6v8LQtC2KAD6BzjS Session 2: https://youtu.be/pQtG2CAOfMU?si=sNSYDIe4vAEu5rnM #CRAGE #ECCouncil #ShadowAI #AIGovernance #DataLeakage #ModelRisk #AIRisk #ResponsibleAI #CyberSecurity #Webinar

💡Microsoft releases emergency Windows updates to fix RDS failures Microsoft released emergency Windows updates to fix critical Remote Desktop Services (RDS) failures. These issues were caused by this month's security updates. The out-of-band patch also addresses Hyper-V and USB audio problems affecting certain Windows versions, restoring stability and functionality. Users are advised to apply these urgent updates promptly. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-windows-updates-to-fix-rds-failures/

💡Webinar: How malicious OAuth apps can lead to Google Workspace breaches Discover how malicious OAuth apps, combined with social engineering, can breach Google Workspace, letting attackers access your data without solely relying on stolen passwords. This webinar details two attack scenarios, showing their unfolding and essential security controls to prevent them. Learn to protect your Google Workspace from these sophisticated threats. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/webinar-how-malicious-oauth-apps-can-lead-to-google-workspace-breaches/

💡Hackers exploit Tencent app flaw to deploy GrayRabbit malware A China-aligned espionage group is exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows. Threat actors are leveraging this flaw to successfully deploy the GrayRabbit backdoor malware. This targets users of the popular input method, exposing them to compromise via the exploited software. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/

TEDx speaker. Bestselling author. Board advisor. Series finale. Preity Gupta is back on September 21. Register now: https://shorturl.at/IIERJ About the Speaker: ✔ Global Security Board Advisor at EC-Council ✔ Enterprise AI Security Architect at Wipro ✔ Founder of Preity Gupta SecureBiz ✔ 20+ years in multi-cloud security and AI governance ✔ Certifications: CISM, AZ-500, SC-100, AWS SAA-C02 ✔ Author of Cost Savvy Secure Cloud #CAIPM #ECCouncil #AIROI #AISecurity #AIGovernance #CyberSecurity #Webinar

💡Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data Attackers are using passkey phishing to hijack Microsoft Cloud accounts and exfiltrate data. They exploit third-party email infrastructure to blast millions of financial fraud scam emails, often impersonating CEOs. Microsoft disclosed two campaigns, detailing one where over a million scam messages were sent in just three days (Aug 3-5, 2026). These evolving social engineering tactics target cloud environments. Source: [ thehackernews.com ] https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html

Only 2 Days Left! Join Dr. Jonathan Reichental on September 15 for Creating an Enterprise Data Governance Strategy for the AI Era. Explore how organizations can strengthen data quality, security, ownership, privacy, and AI governance. Register now: https://shorturl.at/T0fAa #ECCU #Webinar #CyberSecurity #DataGovernance #AI #AIGovernance

💡CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV CISA has added five actively exploited security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities are being actively exploited in the wild, prompting CISA to urge federal agencies to address them. Users of these platforms should prioritize patching to mitigate immediate risks from ongoing attacks. Source: [ thehackernews.com ] https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html