Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between…
Love Electric Breach: 877,000 Driver Records Offered for $600
Love Electric’s alleged data breach exposes sensitive driver data and highlights the identity risks created by third-party salary sacrifice providers. A…
Anthropic MHS Lets AI Agents Control Machines, Raising Security Questions
Anthropic’s Model Hardware Standard lets AI agents control physical equipment, raising questions about permissions, monitoring and operational security.
The Imperfect SOC: How Security Teams Can Defend Without a Dream Team
Lean SOC teams can use explainable and agentic AI to reduce alert fatigue, scale analyst expertise, automate investigations, and improve security…
PaperCut Flaw Under Active Attack Enables Pre-Auth RCE
Attackers are exploiting a PaperCut flaw that enables pre-authentication remote code execution.
Skimming on the Blockchain: A Magecart Campaign That Uses EtherHiding, Found by Malvertising Scanning
One attacker wallet, 144 smart contracts, and 40+ compromised e-commerce checkouts quietly stealing shoppers’ card data.
Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them
Hackers are making some phishing pages harder to track by changing the code delivered to every visitor. An examined operation served a credential-stealing…
Extend your data perimeter to the AWS Management Console with Private Access
Organizations in regulated industries such as financial services, government, defense, and healthcare restrict their sensitive workloads to isolated…
Trump Targets Foreign Technology in New U.S. Power Grid Security Order
Trump targets foreign-made power grid equipment, citing cyber, sabotage and supply-chain risks to U.S. national security. Executive Order 14420, signed on…
Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft
Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for remote code execution, credential theft, and…
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company…
Microsoft Teams Has Become a Haven for Scammers in China
Fraudsters are exploiting enterprise chat apps like Teams and Webex to trick Chinese victims into transferring large sums of money, fueling a wave of…
Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulnerabilities, and safeguard…
Cyberattack on Three UK Airports Exposes Data of 8.7 Million Customers
A cyberattack on Manchester Airports Group exposed information belonging to about 8.7 million customers across three UK airports.
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited…
Inside Astaroth’s New Spambot Component
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Inside Astaroth’s New Spambot Component
IT Security News Hourly Summary 2026-08-28 20h : 6 posts
6 posts published in the last hour 17:31When Malware Does Math: The Arms Race Between Sandboxes and Self-Aware Threats 17:31LACMA Data Breach: A 4-Day Attack, a Year of Fallout 17:3128,000 Exposed Git Repositories Found Leaking Credentials 17:31Exploited RCE Flaws and…
When Malware Does Math: The Arms Race Between Sandboxes and Self-Aware Threats
Modern malware can detect sandboxes and stay dormant, making inactivity a potential sign of evasion.
LACMA Data Breach: A 4-Day Attack, a Year of Fallout
LACMA says a four-day cyberattack may have exposed Social Security, financial, and medical data, prompting public disclosure and a proposed lawsuit.
28,000 Exposed Git Repositories Found Leaking Credentials
Researchers found 28,000 exposed Git repositories containing active AWS, Stripe, OpenAI and GitHub credentials. Learn the risks and defenses.
Exploited RCE Flaws and Infrastructure Attacks Define this Cybersecurity Week in August 2026
Weekly summary of Cybersecurity Insider newsletters for August 2026.
700 AI Agents Helped Carry Out Hugging Face Attack
An overarching number of 700 artificial intelligence agents participated in a coordinated attack against Hugging Face after models running inside OpenAI’s…
IT Security News Hourly Summary 2026-08-28 19h : 10 posts
10 posts published in the last hour 16:31Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets 16:31Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days 16:316 ThreatLocker alternatives that should make your shortlist…
Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets
Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies, and diplomatic organizations in Romania,…