Cybersecurity firm Huntress has joined forces with global fintech and insurance giant Acrisure to launch a new cyber insurance programme targeting small and mid-sized businesses, with no deductible for eligible applicants. The programme, announced today, gives qualifying Huntress customers and…
Deal Reached With Hackers to Delete Data Stolen From the Canvas Educational Platform
The company that operates online learning system Canvas said it struck a deal with hackers to delete the data they pilfered in a cyberattack that created chaos for students, many of them in the middle of finals. The post Deal…
Download: The IT and security field guide to AI adoption
Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of reducing workload,…
IT Security News Hourly Summary 2026-05-12 15h : 13 posts
13 posts were published in the last hour 13:2 : Cushman and Wakefield Confirms Data Breach Impacting Over 310,000 Accounts 13:2 : Apple Patches Dozens of Vulnerabilities in macOS, iOS 13:2 : West Pharmaceutical Services Hit by Disruptive Ransomware Attack…
Cushman and Wakefield Confirms Data Breach Impacting Over 310,000 Accounts
Global real estate powerhouse Cushman & Wakefield is the latest casualty in an escalating war of corporate extortion. Following a tense “pay or leak” standoff, the notorious ShinyHunters threat syndicate has carried out its threat, dumping hundreds of thousands of…
Apple Patches Dozens of Vulnerabilities in macOS, iOS
The tech giant has also ported the patch for a recent deleted chats recovery issue to older versions of iOS. The post Apple Patches Dozens of Vulnerabilities in macOS, iOS appeared first on SecurityWeek. This article has been indexed from…
West Pharmaceutical Services Hit by Disruptive Ransomware Attack
The company took systems offline globally after hackers exfiltrated data and deployed file-encrypting ransomware. The post West Pharmaceutical Services Hit by Disruptive Ransomware Attack appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: West…
End‑to‑End Encrypted RCS Messaging Arrives Across iPhone and Android
Apple begins rolling out end-to-end encrypted RCS messaging between iPhone and Android in iOS 26.5 This article has been indexed from www.infosecurity-magazine.com Read the original article: End‑to‑End Encrypted RCS Messaging Arrives Across iPhone and Android
Vidar Stealer Campaign Evades EDR to Steal Credentials
A new Vidar Stealer campaign is abusing trusted tools, multi‑stage loaders, and heavy obfuscation to bypass EDR visibility and steal credentials from infected systems silently. This operation shows a clear shift toward “living‑off‑the‑land” techniques and stealthy backdoor architectures that make…
Attackers exploit cPanel CVE-2026-41940 to deploy Filemanager Backdoor
Attackers are exploiting cPanel flaw CVE-2026-41940 to install the Filemanager backdoor and gain unauthorized admin access. Cybercriminals are actively exploiting the critical cPanel vulnerability CVE-2026-41940 (CVSS score of 9.3) to deploy a backdoor called Filemanager on compromised servers. cPanel is a…
Malicious Chrome MV3 Extension Impersonates TronLink to Steal Crypto Wallet Credentials
A fake Chrome browser extension pretending to be the popular TronLink crypto wallet has been caught stealing sensitive wallet credentials from unsuspecting users. The malicious extension operates silently in the background, harvesting mnemonic phrases, private keys, and passwords before forwarding…
Critical “Cline” AI Agent Vulnerability Enables RCE Attacks
A critical security flaw has been identified in the Cline Kanban server that allows threat actors to exfiltrate workspace data and execute arbitrary code silently and remotely. Security researcher TheRealSpencer recently published details of this cross-origin WebSocket hijacking vulnerability affecting…
SAP Patches Critical S/4HANA, Commerce Vulnerabilities
The flaws could allow attackers to inject malicious code, leading to information disclosure and code execution. The post SAP Patches Critical S/4HANA, Commerce Vulnerabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: SAP…
JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413)
JetBrains has patched a high-severity vulnerability (CVE-2026-44413) in TeamCity, its popular continuous integration and continuous delivery platform, and is urging organizations with on-premises and self-managed deployments to upgrade to the fixed version or implement a security patch. About CVE-2026-44413 CVE-2026-44413…
Webinar: What the Riskiest SOC Alerts Go Unanswered – and How Radiant Security Can Help
Why do the Riskiest SOC Alerts Go Unanswered? Security operations teams are drowning in alerts. But the real problem isn’t always alert volume; it’s the blind spots. The most dangerous alerts are the ones no one is investigating. A recent…
CISOs Step Into AI Spotlight
Chief Information Security Officers are experiencing a fundamental shift in their roles as artificial intelligence becomes central to enterprise operations. This article has been indexed from CyberMaterial Read the original article: CISOs Step Into AI Spotlight
AI and an absent government: Takeaways from RSAC 2026
Cybersecurity professionals spent the recent conference discussing the balance between autonomy and oversight. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: AI and an absent government: Takeaways from RSAC 2026
Operation HumanitarianBait Uses Fake Aid Documents to Deploy Python Spyware
Operation HumanitarianBait uses fake aid documents, GitHub-hosted payloads, and Python spyware to target Russian-speaking victims. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: Operation HumanitarianBait Uses Fake Aid Documents…
Cache-poisoning caper turns TanStack npm packages toxic
Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code This article has been indexed from www.theregister.com – Articles Read the original article: Cache-poisoning caper turns TanStack npm packages toxic
Attackers Combine ClickFix With PySoxy Proxying to Maintain Persistence
Exploitation of open-source tools allows attackers to maintain persistent access after initial social engineering, warn ReliaQuest researchers This article has been indexed from www.infosecurity-magazine.com Read the original article: Attackers Combine ClickFix With PySoxy Proxying to Maintain Persistence
Mini Shai-Hulud Supply Chain Attack
A new supply chain attack dubbed Mini Shai-Hulud has compromised more than 400 malicious versions across 170 software packages, with high-profile targets including TanStack, Mistral AI, and UiPath. This article has been indexed from CyberMaterial Read the original article: Mini…
SAP fixes critical vulnerabilities in Commerce Cloud, S/4HAN
SAP has issued its May 2026 security update bundle, addressing 15 vulnerabilities across its product portfolio with particular focus on two critical-severity flaws affecting Commerce Cloud and S/4HANA. This article has been indexed from CyberMaterial Read the original article: SAP…
Critical Infrastructure Coalition Launches
A coalition of America’s largest critical infrastructure operators has launched a new nonprofit organization to coordinate cybersecurity defenses across sectors, filling a void left by federal government retreat from longstanding public-private partnerships. This article has been indexed from CyberMaterial Read…
Apple, Google enable E2EE RCS messaging
Apple and Google have begun rolling out end-to-end encrypted Rich Communication Services (RCS) messaging in beta, marking a significant shift in cross-platform mobile security. This article has been indexed from CyberMaterial Read the original article: Apple, Google enable E2EE RCS…