21 posts published in the last hour 15:31PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem 15:31Two-week Europol task force identifies 18 sexually abused children worldwide 15:31FortiBleed Attack Campaign Exploiting Fortinet Firewalls and VPNs – FBI…
PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem.
Two-week Europol task force identifies 18 sexually abused children worldwide
The Victim Identification Task Force brings together experts from across the globe to combat child sexual exploitation. During the VIDTF, specialists…
FortiBleed Attack Campaign Exploiting Fortinet Firewalls and VPNs – FBI Warns
The FBI and U.S. Secret Service have issued a joint cybersecurity advisory warning that the ongoing FortiBleed campaign is targeting internet-facing…
Rural Health Transformation Funding Can Strengthen Care and Cyber Resilience
The Rural Health Transformation Program gives states a timely opportunity to modernize rural care, connectivity, and cybersecurity together.
EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data
Ernst & Young (EY) has warned that a data breach exposed personal and financial information belonging to clients of Goldman Sachs’ wealth management…
FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
An initial access broker is working with various ransomware groups in a global campaign.
US Probes Cyberattack on Energy Tankers Over Possible Iran Ties
One of the Journal reported that US authorities are investigating a possible Iranian connection to cyberattacks targeting two energy tankers in August…
Six days to TechCrunch Disrupt: What’s next for AI and software development
First AI gave us code completion, predicting the lines of code, functions, and boilerplate we needed based on what we’d already typed. Then came code…
Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware
Earth Sirrush is hiding espionage malware inside PNG images and malicious Notepad++ plugins to compromise Ukrainian organizations. The Russia-aligned…
Another Historic Cipher Falls to AI
This one is from 1809, written by Napoleon’s nephew.
Ransomware has a new target. Is your backup ready?
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains…
Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People
Hackers breached two major South Korean churches, exposing more than one million congregant records and extensive financial and administrative data. The…
Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
Apple has announced that it’s taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by…
CyberXero Combines Claude Code, PentAGI and Cobalt Strike in AI-Augmented Cyberattacks
CyberXero has emerged as an initial access broker that combines familiar hacking tools with artificial intelligence to run large-scale intrusions. The…
Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports
Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions
PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access
A proof-of-concept exploit has been released for CVE-2026-21589, a critical arbitrary file-read vulnerability affecting multiple self-managed Atlassian…
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices and is locking out…
Hackers Compromise 100+ Websites With Fake Cloudflare Checks to Spread LUNEXSTEALER
Hackers compromised more than 100 websites and used fake Cloudflare verification pages to spread LUNEXSTEALER, a Windows malware capable of stealing…
Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
On October 5th, Atlassian published patches&#;x26;#;xc2;&#;x26;#;xa0;for multiple products to fix an “Arbitrary File Access” vulnerability…
SonicWall Patches 4 SMA1000 Flaws, Including Critical Pre-Auth SSRF Rated CVSS 10
SonicWall has patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 Series appliances, including a critical server-side request forgery…
IT Security News Hourly Summary 2026-10-07 17h : 27 posts
27 posts published in the last hour 14:32Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) 14:32Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts 14:31OT Coalition Urges CISA to Mandate Federal OT Security 14:31AWS’ support for Iceberg materialized views…
Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)
One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products,…
Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
Southern Company is notifying customers that their utility account information was accessed by hackers.