Nissan has confirmed that it fell victim to a third-party cyberattack after being targeted as an Oracle PeopleSoft user, making it the latest company to suffer an attack due to a yet-revealed vulnerability. The breach is currently under investigation,…
ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security
This is the part 4 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1). ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security Chapter…
Nebula AI-Powered Penetration Testing Platform Automates Vulnerability Assessments
A new open-source security tool is bringing large language models directly into the penetration tester’s terminal. Nebula, developed by BerylliumSec, integrates state-of-the-art AI models into the command-line interface, allowing ethical hackers and security professionals to automate vulnerability assessments, generate exploit…
Alibaba to Ban Claude Code Over Alleged Embedded Backdoor Risks
Alibaba is reportedly set to ban Anthropic’s Claude Code from its internal workplace environments starting July 10, 2026, over alleged embedded backdoor risks. The company has not officially confirmed the decision and did not respond to media queries at the…
Hackers Abuse SEO Poisoning and Hidden HTML to Trick AI Agents Into Following Malicious Instructions
Artificial intelligence agents are quickly becoming the new front door to the internet, and attackers have noticed. A fresh wave of malicious websites is using search engine tricks and invisible code to feed false instructions directly into AI systems, turning…
Multiple Apache ActiveMQ Vulnerabilities Enable DoS Attacks and Lead to Crashes
Apache ActiveMQ users are advised to urgently update their deployments after three important vulnerabilities were disclosed, exposing messaging infrastructure to denial-of-service (DoS) attacks, broken isolation, and improper authorization risks. The issues, tracked as CVE-2026-53917, CVE-2026-54475, and CVE-2026-49877, affect core components…
Scammers Impersonate Trusted Brands in Gambling Ads to Drive Casino Traffic
Scammers are hijacking trusted brand names to push people toward online casinos unrelated to those companies. Instead of building fake bank sites or phishing emails, they exploit the trust people place in familiar logos. The scam starts simply. A consumer…
AdaptHealth says attackers sweet-talked their way into cloud systems and stole patient data
Third-party contractor compromise exposed health information and insurance billing passwords This article has been indexed from www.theregister.com – Articles Read the original article: AdaptHealth says attackers sweet-talked their way into cloud systems and stole patient data
New PamStealer Malware Targets macOS Users via Fake Maccy Clipboard App
The newly spotted PamStealer is spreading through a fake Maccy clipboard app and steal Mac passwords, browser data and clipboard content. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article:…
Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts
Two new campaigns show how cybercriminals are increasingly relying on social engineering instead of software exploits to compromise devices and accounts. This article has been indexed from Malwarebytes Read the original article: Verified X ad spreads Mac malware, while ConsentFix…
Google Cripples NetNut Proxy Network Spanning 2 Million Devices
Google has delivered a major blow to NetNut, one of the world’s largest residential proxy networks, by crippling its ability to route malicious traffic through millions of compromised home devices. The operation, conducted in coordination with the FBI, Lumen,…
BioSchocking Attacks Tricked AI-powered Browsers into Data Theft
A new prompt injection termed “BioShocking” can manipulate AI-based browsers into treating malicious actions as a video game, and give away your login credentials. The technique was discovered by experts at security firm LayerX. The experts tricked six AI-powered browsers…
Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer
A previously undocumented threat actor known as Armored Likho has been attributed to cyber attacks targeting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan. “Armored Likho blends financially motivated campaigns targeting private individuals with targeted cyber…
Cyber Briefing: 2026.07.03
Medtronic’s major data breach, a newly exploited SharePoint RCE, and a global “Interpol” ransomware targeting SMBs, here is your weekly threat briefing. This article has been indexed from CyberMaterial Read the original article: Cyber Briefing: 2026.07.03
AI didn’t break patching. It showed us patching was already broken.
Claude Mythos, an AI model from Anthropic, has found 23,019 software vulnerabilities in the past month. Fewer than 1% of them have been patched. That gap is the story. Finding a vulnerability used to be the hard part, the thing…
Hackers Use Fake Cisco AnyConnect and Google Update Installers to Drop SharkLoader
Cybersecurity researchers have uncovered a new malware loader called SharkLoader that is quietly slipping into networks by hiding inside fake software installers. The tool has been spotted delivering Cobalt Strike Beacon, a well known post exploitation framework, onto compromised machines.…
Hackers Abuse Blogspot and PowerShell Download Cradles to Deploy PureLog Steale
Hackers have found a clever way to sneak data-stealing malware onto victims’ computers by hiding their tracks inside a trusted platform, Google Blogspot. Researchers recently uncovered a campaign abusing this blogging service alongside native Windows tools to quietly install an…
FBI Warns TeamPCP Hackers Compromise Developer Tools in Large-Scale Supply Chain Attacks
A new wave of software supply chain attacks has put developers and security teams on high alert. The threat group behind it, known as TeamPCP, has been quietly slipping malicious code into trusted development and security tools used by companies…
Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation
The ransomware landscape is reconsolidating around major players, with Qilin emerging as the leading RaaS operation, researchers say This article has been indexed from www.infosecurity-magazine.com Read the original article: Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation
IT Security News Hourly Summary 2026-07-03 15h : 5 posts
5 posts were published in the last hour 12:37 : Pegasus Spyware Hacked European Parliament Member Investigating Spyware Abuse 12:36 : JADEPUFFER: First End-to-End AI-Driven Ransomware Operation 12:35 : NetNut cracked as Google and FBI target 2 million-device botnet 12:35…
Pegasus Spyware Hacked European Parliament Member Investigating Spyware Abuse
A newly disclosed forensic investigation has revealed that Pegasus spyware was used to hack a sitting Member of the European Parliament (MEP) who was actively investigating spyware abuses across the European Union. This raises serious concerns about surveillance targeting democratic…
JADEPUFFER: First End-to-End AI-Driven Ransomware Operation
Sysdig reports an AI agent ran a full ransomware attack end-to-end, exploiting flaws, stealing creds, moving laterally, and encrypting data without humans. Sysdig’s Threat Research Team has documented what it assesses to be the first ransomware operation driven end-to-end by…
NetNut cracked as Google and FBI target 2 million-device botnet
Other residential proxy brands may rely on the same network This article has been indexed from www.theregister.com – Articles Read the original article: NetNut cracked as Google and FBI target 2 million-device botnet
NCSC Shares Pen Testing Defense Tips
The UK’s National Cyber Security Centre (NCSC) published guidance on July 1 based on insights from penetration testers who work with the agency. This article has been indexed from CyberMaterial Read the original article: NCSC Shares Pen Testing Defense Tips