This week’s Department of Know is hosted by Rich Stroffolino , with guests Janet Heins , CISO, ChenMed , and Derek Fisher , Director of the Cyber Defense…
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another…
ShinyHunters Claims Responsibility for EY Data Breach as Investigation Continues
The cyberattack involving Ernst & Young (EY) has entered a new phase after the ShinyHunters extortion group claimed responsibility for the intrusion,…
Toy Ghouls’ new toy: the GenieLocker ransomware
Kaspersky experts dissect GenieLocker: new custom ransomware variants for Windows, Linux, and ESXi systems. We found this family in attacks by Toy Ghouls,…
NCSC Calls on Vendors to Embed ‘Forensic Observability’ in Network Devices
The UK’s National Cyber Security Centre wants network device makers to improve forensic observability
IT Security News Hourly Summary 2026-08-01 00h : 16 posts
16 posts were published in the last hour 22:2 : CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft 22:2 : OpenAI agent reaches Modal, Minnesota water systems hacked, fake Russian companies steal real money 22:2 :…
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related…
OpenAI agent reaches Modal, Minnesota water systems hacked, fake Russian companies steal real money
OpenAI agent’s escape reaches a Modal customer Hackers hit Minnesota water systems Fake Russian companies, real stolen money Get the show notes here:…
Anthropic Says Claude Found New Attacks on HAWK and Reduced-Round AES
Anthropic says Claude Mythos improved attacks on HAWK and reduced-round AES-128, though production encryption systems remain unaffected.
South Korea Warns of State-Backed Watering Hole Attacks
South Korea warned that nation-state actors are using phishing and compromised websites to silently infect citizens and businesses. South Korea agencies…
CISA Upgrades SBOM Standards
A Modern Blueprint for Software Transparency On July 29, 2026, CISA linked up with the NSA, FBI, and 15 international cybersecurity partners to drop new…
FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks
The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move…
Who’s Actually in Charge of Your Cyber Incident Response?
When a cyber incident hits, most organizations discover something uncomfortable: the structure they assumed was in place doesn’t quite hold. Security is…
2026-07-31: SmartApeSG ClickFix campaign pushes unidentified RAT
This post has no text preview — click the link below to read the original article. This article has been indexed from Malware-Traffic-Analysis.net – Blog Entries Read the original article: 2026-07-31: SmartApeSG ClickFix campaign pushes unidentified RAT
Over 30 Minnesota Water Utilities Disrupted in Coordinated Weekend Cyberattack
The Attack and Local Impact Over the weekend of July 26 and July 27, 2026, a coordinated cyberattack struck deep into local infrastructure, hitting…
2026-07-31: Seven days of scans and probes and web traffic hitting my web server
This post has no text preview — click the link below to read the original article. This article has been indexed from Malware-Traffic-Analysis.net – Blog Entries Read the original article: 2026-07-31: Seven days of scans and probes and web traffic…
Can LLMs Exploit the Critical Vulnerabilities They Find?
On April 7, 2026, Anthropic announced Project Glasswing, which would provide select organizations with early access to their new Claude Mythos Preview…
IT Security News Weekly Summary August
210 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-07-31 21:31 : Friday Squid Blogging: Squid Helps Discover New Marine Species 21:31 : Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire…
IT Security News Daily Summary 2026-07-31
210 posts were published in the last hour 21:31 : Friday Squid Blogging: Squid Helps Discover New Marine Species 21:31 : Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet 21:31 : Headteacher had the most guessable…
Friday Squid Blogging: Squid Helps Discover New Marine Species
The Squid is a new scientific machine : One of the technological breakthroughs was the onboard use of a spinning wheel confocal microscope, nicknamed the…
Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet
Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as…
Headteacher had the most guessable username-password combo you could imagine
Schools often don’t prioritize or understand cybersecurity
2026-7-31: SmartApeSG ClickFix campaign pushes unidentified RAT
This post has no text preview — click the link below to read the original article. This article has been indexed from Malware-Traffic-Analysis.net – Blog Entries Read the original article: 2026-7-31: SmartApeSG ClickFix campaign pushes unidentified RAT
Excuses like ‘AI did it’ don’t exist in the eyes of the law
If your AI goes rogue, better have a good lawyer