A state-linked hacker group known as Ghostwriter has launched a wave of targeted phishing attacks aimed at Gmail users, disguising malicious emails as official security alerts from Google. The campaign is designed to trick recipients into handing over their login…
ClickFix Campaign Uses EtherHiding and GULoader to Infect Windows Users via Fake CAPTCHA
A new cyberattack campaign is targeting Windows users through fake CAPTCHA pages, combining three techniques to slip past standard security defenses without raising alarms. The campaign, first observed in April 2026, begins on a compromised European small-business website and ends…
New OnionDrop Loader Campaign Uses gainmsg C2 to Deliver LegionLoader Payloads
A newly identified loader campaign is raising serious concerns across the cybersecurity community. Threat researchers have uncovered an active operation using a sophisticated multi-stage loader called OnionDrop, which is being used to deliver harmful payloads, including the well-known LegionLoader, to…
Infinite Campus: Salesforce Breach Exposed 137,000 Staff Records
Infinite Campus says a Salesforce breach exposed data tied to 137,000 school staff accounts, raising phishing and SaaS security concerns. The post Infinite Campus: Salesforce Breach Exposed 137,000 Staff Records appeared first on TechRepublic. This article has been indexed from…
Apple plans to change its Hide My Email privacy feature that could make it less effective
In the coming weeks, Apple will move anonymously generated emails addresses to a different domain. This article has been indexed from Security News | TechCrunch Read the original article: Apple plans to change its Hide My Email privacy feature that…
IT Security News Hourly Summary 2026-06-17 00h : 1 posts
1 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-06-16
IT Security News Daily Summary 2026-06-16
157 posts were published in the last hour 20:34 : Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society 20:34 : Python dev saved from disaster by intuition…and AI 20:9 : AI is Not Solving Cybersecurity Burnout Yet, New ISSA…
Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society
More than 200 of the world’s elites registered for a retreat whose agenda runs from panels on cult-building and sex to prepping for World War III. An associated app offers matchmaking. This article has been indexed from Security Latest Read…
Python dev saved from disaster by intuition…and AI
I’m sorry, Dave. I can’t install that repo that will totally hose your system. This article has been indexed from www.theregister.com – Articles Read the original article: Python dev saved from disaster by intuition…and AI
AI is Not Solving Cybersecurity Burnout Yet, New ISSA and Omdia Research Warns
Why Cybersecurity Professionals Are Considering the Exit Door in the Age of AI While 83% of organizations are using or planning to adopt AI for cybersecurity, 68% of cybersecurity professionals… The post AI is Not Solving Cybersecurity Burnout Yet, New…
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim’s project hijack the victim’s machine learning model upload and run code inside Google’s serving infrastructure. Palo Alto Networks Unit 42,…
iRhythm Hit by Cyberattack, Patient Data Stolen and Ransom Demanded
iRhythm disclosed a cyberattack via third-party apps where patient and proprietary data was stolen, followed by a ransom demand. iRhythm Technologies is a U.S.-based digital healthcare company specializing in remote cardiac monitoring and arrhythmia detection. Its best-known product is the…
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively. Attacks involving BabaDeda Loader, observed in April 2026, have targeted education…
IT Security News Hourly Summary 2026-06-16 21h : 9 posts
9 posts were published in the last hour 18:38 : Bug in FIFA World Cup internal system gave anyone ability to modify TV stream 18:38 : Critical Fortinet FortiSandbox Vulnerabilities Actively Exploited in Attacks 18:38 : The Half-Life of Threat…
Bug in FIFA World Cup internal system gave anyone ability to modify TV stream
A security researcher said a flaw in FIFA’s online platforms allowed her to access several internal systems, including one that could have allowed her to take control of the TV stream of every World Cup match. This article has been…
Critical Fortinet FortiSandbox Vulnerabilities Actively Exploited in Attacks
Threat actors are actively exploiting multiple critical vulnerabilities in Fortinet’s FortiSandbox platform, with live attack telemetry confirming exploitation attempts over the past 24 hours. Defused has flagged three CVEs under active targeting — including one, CVE-2026-39813, with no previously recorded…
The Half-Life of Threat Intelligence: When Does an IOC Stop Being Useful?
The concept of the IOC — the Indicator of Compromise — sits at the operational heart of modern threat detection. Block the IP. Flag the domain. Quarantine the hash. The logic is clean and satisfying. But embedded in every IOC…
Three critical Fortinet sandbox bugs splattered by unknown attackers
All have patches, so make sure you upgrade to a fixed version This article has been indexed from www.theregister.com – Articles Read the original article: Three critical Fortinet sandbox bugs splattered by unknown attackers
Best Prime Day Tech Deals: Apple, Bose, Garmin, and More
Shop early Amazon Prime Day tech deals on earbuds, mice, routers, doorbells, headphones, smartwatches, Android phones, and fitness watches. The post Best Prime Day Tech Deals: Apple, Bose, Garmin, and More appeared first on TechRepublic. This article has been indexed…
Cloud security metrics and KPIs: A CISO’s guide
<p>Cloud security is no longer just about deploying controls. Instead, it’s about measuring effectiveness, demonstrating risk reduction and <a href=”https://www.techtarget.com/searchsecurity/feature/6-ways-to-spur-cybersecurity-board-engagement”>communicating outcomes</a> clearly to leadership and to the board.</p> <p>To that end, cloud security metrics and KPIs are essential. These tools…
Infinite Campus Incident Exposes Data From 137,000 School Staff Accounts
A breach at Infinite Campus exposed data from 137,000 school staff accounts, highlighting SaaS security risks in education. The post Infinite Campus Incident Exposes Data From 137,000 School Staff Accounts appeared first on eSecurity Planet. This article has been indexed…
‘Dangerous’ AI Models Are Coming No Matter What
The US government crackdown on Anthropic’s Claude Fable 5 and Mythos 5 hides a glaring truth: AI models with advanced hacking capabilities will soon be the norm. This article has been indexed from Security Latest Read the original article: ‘Dangerous’…
Threat tactic spotlight: Subdomain takeover
In this blog post you’ll learn how to detect and prevent subdomain takeover – a tactic where threat actors exploit dangling DNS records to redirect traffic to attacker-controlled resources. We’ll explain the issue, how the situation arises, and how you…
The Trust Problem in Modern SaaS: Why Your Authentication Succeeded, and You Still Got Breached
Most SaaS breaches do not happen through failure. They happen through valid authentication being trusted too far, for too long, across systems that were never designed to question each other. That distinction is worth sitting with. Because if authentication failed,…