Discover how securing shadow and zombie APIs helps banks meet the ECB cyber action plan mandates, improve posture, and mitigate AI-enabled threats.
CloudSyncD Backdoor Spread Through Fake Zoom Installer Targeting macOS
Using fake Zoom installers, a macOS malware campaign distributes a backdoor known as CloudSyncD, a backdoor for MacOS. Jamf Threat Labs first identified…
International investigation identifies over 70 potential victims exploited in Indian restaurants
The coordinated action conducted on 18 September 2026 led to two arrests. Allegedly, the traffickers forced their victims to work up to 16 hours per day,…
Nobody Designs an RBAC Mess; Everyone Ends Up With One
You’re about to rename a column. Five minutes of work. Someone asks the obvious question first: who does this break? In a healthy Snowflake account,…
Meta Faces First Ofcom Probe Under Online Safety Act Over Instagram Instants
Ofcom has opened a formal probe into whether Meta properly assessed safety risks before launching Instagram Instants under the UK Online Safety Act.
FBI confirms ‘multiple’ arrests related to ShinyHunters hack
Another few bite the dust
Google October Update Fixes Pixel Bugs as Pixel 6 Nears End of Support
Google’s October 2026 update patches critical Pixel flaws, fixes VoIP and keyboard bugs, and may mark the end of regular support for Pixel 6.
DTU Data Breach Exposes Information of 200,000 People
The Technical University of Denmark (DTU) has disclosed a major data breach that may have exposed personal information belonging to as many as 200,000…
Best Smart Home Security Cameras for 2026: Ring, Nest, Arlo and Eufy
We compare current Ring, Nest, Arlo, and Eufy outdoor security cameras by video quality, AI features, storage, subscriptions, and long-term cost.
Spain, Denmark and the Netherlands win Europol 2026 Excellence Awards in Innovation
At the European Police Chiefs Convention on 29 September 2026, Europol announced the winners of its 2026 Excellence Awards in Innovation. Law enforcement…
Dutch Tax Agency Reverses Microsoft 365 Cloud Migration Over Data Risks
The Dutch Tax and Customs Administration is reversing a planned Microsoft 365 cloud migration as officials seek greater control over sensitive government…
IT Security News Hourly Summary 2026-10-07 22h : 23 posts
23 posts published in the last hour 19:32California Court Dismisses El Faro Journalists’ Pegasus Spyware Lawsuit Against NSO Group for Second Time 19:31Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains 19:31Chinese Hackers Impersonate US Officials…
California Court Dismisses El Faro Journalists’ Pegasus Spyware Lawsuit Against NSO Group for Second Time
A California federal judge has once again dismissed a lawsuit brought by journalists from Salvadoran investigative outlet El Faro against NSO Group, the…
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said…
Chinese Hackers Impersonate US Officials for AI Cyber Espionage
An emerging threat group known as TA419 established seemingly legitimate professional relationships with AI policy experts working for US think tanks,…
Three questions a hospital CISO should ask a healthcare fintech vendor
In this Help Net Security interview, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every…
FBI Warns FortiBleed Attack Compromised 80,000+ Devices and Locked Out Admins
The FBI and U.S. Secret Service have issued a joint cybersecurity advisory warning that the ongoing FortiBleed campaign is targeting internet-facing…
Building Enterprise File-Heavy AI Workflows: From Secure Uploads to Governed Document Intelligence
Enterprise AI is increasingly moving beyond clean, structured datasets and into the much larger world of documents, files, images, forms, emails, reports,…
Microsoft, Adobe, Apple, and Foxit vulnerabilities
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. The vulnerabilities…
China’s Ministry Allegedly Funded Research Involving 100+ Academics
The U.K.’s domestic intelligence agency, MI5, has warned that more than 100 U.K.-linked academics have contributed to research projects allegedly funded…
AI slop submissions force Google to freeze its open-source bug bounty
Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of…
Alert Overload, Tool Sprawl and Evasive Phishing: The 5 Bottlenecks Slowing Down US SOCs
US security operations centers are not short on security products. They are short on time, people and context. Current industry research suggests the…
China-Aligned TA419 Uses Microsoft AitM Phishing Against U.S. AI Policy Experts
A China-linked cyber-espionage group is targeting Microsoft credentials belonging to U.S. policy and regulatory specialists in artificial intelligence,…
How RMM abuse gives attackers a way in that looks like business as usual
Huntress found attackers using legitimate remote monitoring and management (RMM) software in 45% of the endpoint-related incidents it recorded in the…