Cybersecurity researchers have disclosed details of multiple critical-severity security flaws affecting Coolify, an open-source, self-hosting platform, that could result in authentication bypass and remote code execution. The list of vulnerabilities is as follows – CVE-2025-66209 (CVSS score: 10.0) – A…
Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages
Cybersecurity researchers have discovered three malicious npm packages that are designed to deliver a previously undocumented malware called NodeCordRAT. The names of the packages, all of which were taken down as of November 2025, are listed below. They were uploaded…
Cisco Patches ISE Security Vulnerability After Public PoC Exploit Release
Cisco has released updates to address a medium-severity security flaw in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) with a public proof-of-concept (PoC) exploit. The vulnerability, tracked as CVE-2026-20029 (CVSS score: 4.9), resides in the licensing feature…
US To Leave Global Forum on Cyber Expertise
The Trump administration decided to leave 66 international organizations, including the GFCE and the European Centre of Excellence for Countering Hybrid Threats This article has been indexed from www.infosecurity-magazine.com Read the original article: US To Leave Global Forum on Cyber…
UAT-7290 targets high value telecommunications infrastructure in South Asia
Talos assesses with high confidence that UAT-7290 is a sophisticated threat actor falling under the China-nexus of Advanced Persistent Threat actors (APTs). UAT-7290 primarily targets telecommunications providers in South Asia. This article has been indexed from Cisco Talos Blog Read…
Securing Vibe Coding Tools: Scaling Productivity Without Scaling Risk
AI-generated code looks flawless until it isn’t. Unit 42 breaks down how to expose these invisible flaws before they turn into your next breach. The post Securing Vibe Coding Tools: Scaling Productivity Without Scaling Risk appeared first on Unit 42.…
Are criminals vibe coding malware? All signs point to yes
They also hallucinate when writing ransomware code Interview With everyone from would-be developers to six-year-old kids jumping on the vibe coding bandwagon, it shouldn’t be surprising that criminals like automated coding tools too.… This article has been indexed from The…
OpenAI putting bandaids on bandaids as prompt injection problems keep festering
Happy Groundhog Day! Security researchers at Radware say they’ve identified several vulnerabilities in OpenAI’s ChatGPT service that allow the exfiltration of personal information.… This article has been indexed from The Register – Security Read the original article: OpenAI putting bandaids…
U.S. CISA adds HPE OneView and Microsoft Office PowerPoint flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds HPE OneView and Microsoft Office PowerPoint flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added HPE OneView and Microsoft Office PowerPoint flaws to its Known Exploited Vulnerabilities (KEV)…
Fake WinRAR downloads hide malware behind a real installer
We unpack a trojanized WinRAR download that was hiding the Winzipper malware behind a real installer. This article has been indexed from Malwarebytes Read the original article: Fake WinRAR downloads hide malware behind a real installer
IT Security News Hourly Summary 2026-01-08 12h : 8 posts
8 posts were published in the last hour 10:36 : Google, Character.AI Settle Lawsuit Over Florida Youth’s Suicide 10:11 : ASML Says Breach Claim Was Faked 10:11 : 6 steps to take ASAP if you’re targeted by sextortion scams 10:11…
Google, Character.AI Settle Lawsuit Over Florida Youth’s Suicide
Google and Character.AI, whose technology it licenses, settle 2024 lawsuit over chatbot’s alleged role in 14-year-old’s suicide This article has been indexed from Silicon UK Read the original article: Google, Character.AI Settle Lawsuit Over Florida Youth’s Suicide
ASML Says Breach Claim Was Faked
Dutch chip manufacturing equipment maker says claim that data was stolen by hacker is false, following post on hacker forum This article has been indexed from Silicon UK Read the original article: ASML Says Breach Claim Was Faked
6 steps to take ASAP if you’re targeted by sextortion scams
If someone is blackmailing you with private photos or threats, do not pay. We know it’s scary, but you don’t need to comply. Learn how to handle sextortion threats, and discover how Avast can help secure your privacy. This article…
China Hacked Email Systems Used by US Congressional Staff, New Report
A sophisticated Chinese hacking group has breached email systems accessed by staffers on critical U.S. House committees, exposing sensitive communications amid escalating cyber tensions between Washington and Beijing. The Financial Times revealed on Wednesday that the intruders, tracked as Salt…
Linux Battery Utility Flaw Lets Hackers Bypass Authentication and Tamper System Settings
A critical security vulnerability has been discovered in TLP, a widely used Linux laptop battery optimization utility, allowing local attackers to bypass authentication controls and manipulate system power settings without authorization. Security researchers from openSUSE identified a severe authentication bypass…
GitLab Patches Multiple Vulnerabilities that Enables Arbitrary Code Execution
GitLab has released emergency security patches for multiple versions of its platform, addressing eight vulnerabilities that could enable arbitrary code execution and unauthorized access in self-managed installations. The updated versions 18.7.1, 18.6.3, and 18.5.5 were deployed to GitLab.com on January…
Logitech macOS mouse mayhem traced to expired dev certificate
Company says it dropped the ball, apologizes for wasting people’s time Logitech says an expired developer certificate is to blame after swaths of customers were left infuriated when their mice malfunctioned.… This article has been indexed from The Register –…
Maximum Severity “Ni8mare” Bug Lets Hackers Hijack n8n Servers
A newly discovered vulnerability in authentication platform n8n could allow threat actors to take control of n8n servers This article has been indexed from www.infosecurity-magazine.com Read the original article: Maximum Severity “Ni8mare” Bug Lets Hackers Hijack n8n Servers
CES: ARM Adds Robotics Division
Chip designer ARM reportedly reorganises company, adds Physical AI unit for robotics tech that includes automotive applications This article has been indexed from Silicon UK Read the original article: CES: ARM Adds Robotics Division
PayPal email scam: How it worked before the fix
A recent PayPal email scam used real PayPal messages to show fake purchase details and a callback number. See how it worked. The post PayPal email scam: How it worked before the fix appeared first on Security Boulevard. This article…
Anthropic Said To Raise $10bn At $350bn Valuation
Anthropic reportedly seeking to close $10bn funding round at $350bn valuation, nearly double that of four months ago This article has been indexed from Silicon UK Read the original article: Anthropic Said To Raise $10bn At $350bn Valuation
China-linked groups intensify attacks on Taiwan’s critical infrastructure, NSB warns
Taiwan says China-linked cyberattacks on its energy sector rose tenfold in 2025, hitting critical infrastructure across nine sectors, with total incidents up 6%. Taiwan reports China-linked cyberattacks on its energy sector surged tenfold in 2025, targeting critical infrastructure across nine…
Top 3 Cyber Attacks In March 2026
March 2026 delivered a surge in cyber threats targeting users and organizations alike from banking apps hijacked to siphon personal data, to trusted domains exploited for phishing redirects. Cybercriminals unleashed increasingly cunning and perilous tactics. Here’s a breakdown of the…