A critical cross-site scripting vulnerability in the widely used MapLibre GL JS library could expose applications and an estimated 2.7 million users to…
More than 100,000 fake stores are out to steal your card details
DoppelCart’s fake stores copy real retailers and steal shoppers’ card details and one-time bank confirmation codes.
Hackers Use Fake LinkedIn Job Offers to Infect Developers With New Cross-Platform RATs
Software developers are being targeted with fake job offers that turn routine coding tests into a path for remote access malware. The campaign uses…
LG Targets Residential Proxies in New Smart TV Security Move
Several webOS apps using residential proxy technology are being suspended by LG Electronics for routing third-party traffic through smart TVs. The company…
ClearFake Deploys Crypto Stealer That Uses Vulnerable Driver to Kill EDR Security Tools
ClearFake has expanded a fake CAPTCHA scam into a chain that steals cryptocurrency and credentials while disabling endpoint protection. It turns…
One WeChat Call Was Enough to Hijack Accounts Across iPhone and Android
A new wave of WeChat vulnerability can turn an incoming voice call into a zero-click account takeover, enabling a compromised account to target another…
Microsoft Expands Windows Family Safety With Built-In Age Verification and Parental Controls
Microsoft is expanding Windows Family Safety with account-based age verification, privacy-focused age signals, and improved parental controls. The company…
Why hostile state cyber activity is now a day-to-day business risk
Christopher Clark, Cyber Security Incident Response Team Director, Thrive Geopolitical escalation can become a cyber security problem for businesses far…
Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls
The hacking tool, built using a combination of AI models, is effective against Android and iOS devices
Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA
Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create “stolen keys” that grant illicit access to…
Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension
The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic.
UK Law To Ban Nudity On Children’s Devices
Government promises legislation forcing Apple, Google to ban taking and sending of nude images on devices used by children
NCSC Warns Shadow AI Is Creating New Security Blind Spots for UK Businesses
The UK’s National Cyber Security Centre (NCSC) has warned organisations about the security risks posed by “shadow AI”, as employees continue to turn to…
Coding Start-Up Cognition AI Raises $2bn At $48bn Value
AI programming start-up’s latest funding round nearly doubles its value after a $1bn round three months ago
IT Security News Hourly Summary 2026-09-09 17h : 16 posts
16 posts published in the last hour 14:32Google fixes the seventh actively exploited Chrome zero-day of 2026 14:32Forescout Expands Global Investment in Channel Partners 14:32France’s Mistral AI Raises Record €3bn, Amid Strategy Shift 14:32Cyber Briefing: 2026.09.09 14:31Ransomware Affiliate Pretends to…
Google fixes the seventh actively exploited Chrome zero-day of 2026
Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code through a crafted HTML page. Google…
Forescout Expands Global Investment in Channel Partners
Forescout has expanded its investment in its global partner ecosystem to strengthen technical expertise and help partners support customers managing…
France’s Mistral AI Raises Record €3bn, Amid Strategy Shift
Latest funding round values French start-up at €21bn, as it devotes capital to building data centres, offers AI integration services
Cyber Briefing: 2026.09.09
Authenticated sessions exploited, application security flaws, weak account-recovery mechanisms, and exposed credentials to gain unauthorized access, steal…
Ransomware Affiliate Pretends to be Recovery Service for Extortion
An alleged ransomware affiliate is pretending to be a ransomware recovery service named “Ransom Busters,” reaching out to victims before the attacks…
Meta Rolls Out Assistant With Email, Payment Capabilities
New Muse AI assistant can access apps on user’s phone, autonomously sending emails, making payments, booking travel, amid security concerns
Gigabud Uses Android App Cloning to Evade Fraud Detection
Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud
Ireland Probes X Over Age Assurance, Parental Controls
Ireland’s media regulator cites concerns over ineffective measures to protect children from adult material permitted on platform
Huntress Uncovers Phishing Attacks Using Fake Browser Pages and Rogue RMM Tools
Huntress researchers have uncovered two phishing attacks that combined convincing fake browser windows with legitimate remote management software to…