Red Hat has disclosed a critical privilege escalation flaw, tracked as CVE-2026-10090, affecting the Application Subscription controller in Red Hat…
Researchers Uncover RovoBlast Vulnerability in Atlassian AI Assistant
Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data
Civil-society initiative will pay cybersecurity vendors to protect rural water systems
The group is seeking philanthropic grants, but its founder said the federal government ultimately needs to step in.
New turnkey kit makes it easy for anyone to become a scammer
We discovered a kit that gave us an insight into how modern online scams are built, promoted, and potentially used to target everyday consumers.
China’s New Challenge: Fake AI Videos During Natural Disasters
As China grapples with intensified storms and flooding over recent months, authorities face an unexpected secondary crisis: a surge of AI-generated fake…
Syrian migrant smugglers arrested in coordinated strike in Germany and Serbia
This follows several years of intensive and extensive investigations led by the German Federal Police under the direction of three Bavarian Public…
Bank of Baroda Data Breach: What We Know About the Alleged 1TB Dark Web Leak
Bank of Baroda has confirmed a cybersecurity incident involving a compromised employee email account after reports emerged that nearly 1TB of data…
IT Security News Hourly Summary 2026-08-10 18h : 12 posts
12 posts were published in the last hour 15:32 : Levi Strauss Breach Began With Social Engineering of 3 Employees 15:32 : DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure 15:32 : Fake The Odyssey Downloads Are…
Levi Strauss Breach Began With Social Engineering of 3 Employees
Levi Strauss says hackers socially engineered three employees and stole corporate data, highlighting the growing threat of identity-based attacks.
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized…
Fake The Odyssey Downloads Are Hiding Password-Stealing Malware
Fake downloads of The Odyssey are spreading Lumma Stealer malware capable of stealing passwords, cookies, payment data, and cryptocurrency information.
A Practical Pipeline for Identifying Sensitive Columns Before Test Data Masking
I work as a data analyst at a legal services company. Part of my work involves protecting sensitive data during the Test Data Management (TDM) process.…
Claude-Powered Agent Exploits Australian Gym API, Removes Waitlisted Member
A Claude-powered AI agent exploited an Australian gym API flaw, removed a member from a waitlist, and exposed new risks from autonomous agents.
77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data
Security researchers found 150 lookalike Open VSX extensions published under trusted names, highlighting how extension marketplaces can expose developer…
OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold.
WordPress Plugins Compromised Without a Single File Change
Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files
Fake GoogleTranslate Chrome Extension Lets Attackers Remotely Control Your Browsers
A malicious Chrome extension masquerading as GoogleTranslate that can steal sensitive browser data, live-stream web sessions, and allow threat actors to…
Cyberattack on Steam hardware shipper leaks names, addresses, and order data
Video game publisher Valve is alerting customers in Europe to a data breach at CEVA Logistics, its Steam hardware shipping partner. Reports from affected…
Google Play Apps Use Stealth Loaders to Deliver Anatsa Banking Malware
Android users are facing a fresh reminder that a familiar app-store listing can hide a financial threat. Researchers have observed malicious loaders on…
IT Security News Hourly Summary 2026-08-10 17h : 13 posts
13 posts were published in the last hour 14:31 : A data breach at shipping giant Ceva Logistics is rippling across banks, retailers, Steam gamers, and beyond 14:31 : Margarita Howard’s HX5 Operationalizes CMMC Compliance Before AI Rules Arrive 14:31…
A data breach at shipping giant Ceva Logistics is rippling across banks, retailers, Steam gamers, and beyond
Companies that rely on Ceva Logistics for shipping their physical goods to customers say their personal data was taken during a recent cyberattack.
Margarita Howard’s HX5 Operationalizes CMMC Compliance Before AI Rules Arrive
Margarita Howard has spent two decades running a company in a government contracting market where the rules rarely hold still. HX5, the defense and…
Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Meccha Chameleon Vulnerability Allowed Malware to Spread Through Steam Workshop Maps
A security vulnerability in the game Meccha Chameleon enabled malicious custom maps stored on Steam Workshop to infect users with malware. The…