Someone broke into the systems of Manchester Airports Group (MAG) and walked away with a “quantity” of customer data from three UK airports, the company…
Hackers Can Buy Corporate Executives’ Social Security Numbers for Just 25 Cents
Corporate executives’ Social Security numbers (SSNs) are being sold on dark web identity marketplaces for as little as $0.25 per record. This creates a…
IT Security News Hourly Summary 2026-08-28 10h : 9 posts
9 posts published in the last hour 07:31Threats Making WAVs – Incident Response to a Cryptomining Attack 07:31CISA Warns of Linux Kernel Privilege Escalation Vulnerability Exploited in Attacks 07:31Brazil Plans Supercomputers Built With US, Chinese Tech 07:31Go Loader Uses Anti-Sandbox…
Threats Making WAVs – Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report…
CISA Warns of Linux Kernel Privilege Escalation Vulnerability Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added a Linux kernel vulnerability, tracked as CVE-2026-53362, to its Known Exploited…
Brazil Plans Supercomputers Built With US, Chinese Tech
South America’s largest economy announces two AI supercomputers using tech from Huawei and Nvidia, in move to boost tech sovereignty
Go Loader Uses Anti-Sandbox Checks and SNOWLIGHT to Execute Fileless VShell RAT in Memory
A Windows malware campaign disguised as a graduate-school resume has been observed delivering the SNOWLIGHT stager and a fileless VShell remote-access…
Some Malicious PE Stats, (Thu, Aug 27th)
During my last FOR610 session, a student asked me if I had some statistics in mind about the compilers used to generate malicious PE files? A couple of…
Manchester Airports breach, ATF agency breach, clothier Carhartt breach
Manchester Airports Group suffers cyber incident ATF suffers data breach Clothing retailer Carhartt suffers data breach Get the show notes here:…
Claude Code Opus 5 Auto Mode Hijacked via Prompt Injection to Execute Malicious Code
Claude Code Opus 5 in Auto Mode can be tricked into running malicious code via a simple website summary request. In a limited lab test, the attack…
AI IR Overlay – Incident Response Specification for AI Agents
AI IR Overlay specifies containment for agents using valid credentials, with a working kill-switch contract and an admitted gap when no SOC is staffed.
IT Security News Hourly Summary 2026-08-28 09h : 5 posts
5 posts published in the last hour 06:31Leaked University Files Reveal How Russia Trains Hackers for Military Cyber Operations 06:02The Nansh0u Campaign – Hackers Arsenal Grows Stronger 06:01What 90 days and a small budget can buy in AI agent security…
Leaked University Files Reveal How Russia Trains Hackers for Military Cyber Operations
A cache of leaked internal records has exposed what appears to be a structured Russian military cyber-operator pipeline embedded inside Bauman Moscow…
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses…
What 90 days and a small budget can buy in AI agent security
In this interview with Help Net Security, Prasad Tharippala, Field CISO at Versa, explains what organizations miss when they run open-weight models in…
Hackers Steal Data of 8.7 Million Customers in Cyberattack on Three UK Airports
Cybercriminals have stolen the personal data of about 8.7 million customers following a cyberattack on systems used by Manchester Airports Group (MAG),…
IT Security News Hourly Summary 2026-08-28 08h : 10 posts
10 posts published in the last hour 05:31OpenAI Warns AI-Enabled Cyberattacks Will Surge, Calls for Global Cyber Defense 05:31PaperCut Warns of Actively Exploited Vulnerability Affecting NG and MF Servers 05:31Print management outfit PaperCut is under 0-day attack, and it’s drawing…
OpenAI Warns AI-Enabled Cyberattacks Will Surge, Calls for Global Cyber Defense
OpenAI has issued a warning that AI-enabled cyberattacks could become significantly more widespread and sophisticated within months. The organization…
PaperCut Warns of Actively Exploited Vulnerability Affecting NG and MF Servers
PaperCut has issued an urgent security advisory after confirming the active exploitation of a vulnerability affecting all versions of its PaperCut NG and…
Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood
The fix is either an unvalidated and unofficial emergency patch or taking the server offline
Hackers Use Ethereum Smart Contracts to Keep New GoCaracal Malware Connected
Dark Caracal-linked operators are using Ethereum smart contracts as a resilient fallback mechanism for a newly identified Go-based malware framework…
Critical cPanel Vulnerability Allows Attackers to Take Full Server Control
A newly disclosed vulnerability in cPanel and WHM, the widely used web hosting control panel software, could let a low-privileged, authenticated user…
Critical cPanel Vulnerability Allows Attackers to Gain Full Root Control of Servers
A critical vulnerability in cPanel/WHM could allow authenticated attackers to gain root-level code execution and take full control of vulnerable hosting…
Hackers Abuse Active Directory SPN Misconfigurations for Stealthy Kerberoasting Attacks
Threat actors are increasingly abusing overlooked Active Directory service principal name (SPN) misconfigurations to launch stealthier Kerberoasting…