A public proof-of-concept (PoC) repository has revealed a local privilege escalation zero-day vulnerability in GenDigital’s Avast Antivirus. This…
Shai-Hulud’s Reach Just Grew to 469 Credential Locations. Here’s What That Means
In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across 469 locations…
Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability
The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.
153 Million Driver License Images Offered on Dark Web
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Russian man indicted for spreading malware to 80,000 freelancers
A Russian national accused of using fake accounts on a freelance employment platform to spread malware to approximately 80,000 users has been indicted by…
Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities
Publicly disclosed S/MIME flaws could expose encrypted email content, while critical IOS XR and Nexus bugs could enable remote code execution and…
IT Security News Hourly Summary 2026-09-03 13h : 10 posts
10 posts published in the last hour 10:31Uber, Wayve Offer First Paid London Robotaxi Rides 10:31Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank 10:31Google, Anthropic, and OpenAI Unveil Advanced Cyber AI Models, Defense Programs, and Safety Controls 10:31This Is Flock’s AI Search…
Uber, Wayve Offer First Paid London Robotaxi Rides
Paid autonomous taxi rides go live on Uber’s app in London, as UK AI start-up makes worldwide commercial debut
Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
Chaotic Eclipse released FalconFlank, a PoC exploit for a Crowdstrike Falcon ZeroDay Elevation of Privileges Vulnerability Security researcher Chaotic…
Google, Anthropic, and OpenAI Unveil Advanced Cyber AI Models, Defense Programs, and Safety Controls
AI is quickly changing the way we approach cybersecurity. Google, Anthropic, and OpenAI are now developing new Cyber…
This Is Flock’s AI Search Tool for Cops
WIRED rebuilt Flock’s latest search tool from code the company sends to a police officer’s browser. Its AI can keep watch across multiple cameras for…
Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America
Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow defenders to disrupt operations.
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member’s iPhone
The iPhone belonging to a member of Serbia’s student protest movement was infected with NSO Group’s Pegasus spyware, according to new findings from the…
FBI Probes Possible Breach of 153 Million Driver’s Licenses
The FBI is investigating how scans of over 153 million driver’s licenses are being sold on the dark web
CISA Warns of SonicWall SMA1000 Vulnerabilities Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added two SonicWall SMA1000 appliance vulnerabilities to its Known Exploited Vulnerabilities…
Google Spared Adtech Sell-Off In Monopoly Ruling
US federal judge approves limited behavioural remedies, rejecting break-up of Google’s illegal adtech monopoly
IT Security News Hourly Summary 2026-09-03 12h : 18 posts
18 posts published in the last hour 09:322,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber Operators 09:32UK’s Online Safety Act has made ‘absolutely no difference,’ kids say 09:32WordPress Plugin Flaw Lets Attackers Turn SQL Injection Into…
2,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber Operators
2,000 leaked files expose Bauman University’s hidden Department No. 4, which trained GRU-linked hackers and propagandists linked to APT28 and Sandworm.…
UK’s Online Safety Act has made ‘absolutely no difference,’ kids say
Children’s Commissioner also furious with Ofcom over a string of failures
WordPress Plugin Flaw Lets Attackers Turn SQL Injection Into Complete Site Takeover
A high-severity vulnerability affecting over 5 million active WordPress installations could allow unauthenticated attackers to exploit stored SQL…
TikTok Drops Out Of US House Meeting Amid Child-Safety Pressure
TikTok cancels planned roundtable with US lawmakers on national security issues, following Meta child-safety settlement
Cisco Nexus 9000 Series Switches Flaw Allows Remote Attackers to Execute Malicious Code
Cisco has disclosed a critical vulnerability in Cisco Nexus 9000 Series Switches that could allow an unauthenticated remote attacker to execute arbitrary…
Your phone or computer may soon ask how old you are
California and Colorado will require operating systems to collect users’ ages, but open-source software like Linux may be exempt.
The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours
The Gentlemen ransomware operation is moving from access to full network encryption at striking speed. In some intrusions, attackers disabled defenses and…