163 posts published today 21:31Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects 21:02SafePal Warns of Phishing Risk After Data Exposure Hits Nearly 40,000 Customers 21:01‘MessiahGPT’ AI Service Promises Ransomware, Phishing Kits, and Malware 21:01Philips and GE Investigate…
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that,…
SafePal Warns of Phishing Risk After Data Exposure Hits Nearly 40,000 Customers
SafePal says a security flaw exposed personal and order information for nearly 40,000 customers, increasing the risk of targeted phishing attacks.
‘MessiahGPT’ AI Service Promises Ransomware, Phishing Kits, and Malware
Trellix says MessiahGPT is marketed to cybercriminals as an uncensored AI service for ransomware, phishing kits, malware, and breach exploitation.
Philips and GE Investigate Clop Ransomware Data Theft Claims
Philips and GE are investigating Clop data theft claims potentially linked to a PTC vulnerability.
IT Security News Hourly Summary 2026-08-17 23h : 3 posts
3 posts published in the last hour 20:31‘Unprecedented’ number of Apple users received recent spyware alert, say investigators 20:31Apple Patches iOS and macOS, (Mon, Aug 17th) 20:00IT Security News Hourly Summary 2026-08-17 22h : 7 posts
‘Unprecedented’ number of Apple users received recent spyware alert, say investigators
Cybersecurity experts who investigate spyware attacks say the number of people who received a recent threat notification from Apple is unusually high.
Apple Patches iOS and macOS, (Mon, Aug 17th)
Apple today released updates for iOS/iPadOS (26 and 18) and macOS 26. This update fixes 108 vulnerabilities and comes about two weeks after the much…
IT Security News Hourly Summary 2026-08-17 22h : 7 posts
7 posts published in the last hour 19:31Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection 19:31Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic 19:31Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP…
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake’s public…
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state…
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited…
Teaching AI to Reason Through Detection Triage
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Teaching AI to Reason Through Detection Triage
French Tax Authority Data Breach Exposes Information of 678,000 People
A breach of France’s tax authority exposed sensitive tax, business, and property data belonging to 678,000 people.
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
IT Security News Hourly Summary 2026-08-17 21h : 7 posts
7 posts published in the last hour 18:31Future-Proofing JWT Security: Crypto-Agility, Post-Quantum Signatures, and IAM Migration 18:31SafePal Says 39,798 Customers Hit by Data Breach 18:02Apple Mac Malware Lets Attackers Control Browser Sessions After Infection 18:02France’s Top Court Blocks Under-15 Social…
Future-Proofing JWT Security: Crypto-Agility, Post-Quantum Signatures, and IAM Migration
Today, applications are built around identity systems. All API gateways, microservices, mobile backends, and single sign-on flows require some form of…
SafePal Says 39,798 Customers Hit by Data Breach
SafePal says a breach exposed personal data of 39,798 customers, but not wallet credentials, private keys, seed phrases, or payment information. SafePal…
Apple Mac Malware Lets Attackers Control Browser Sessions After Infection
AmnesiaStealer malware targets macOS with data theft and remote browser-session control, potentially exposing accounts already open on compromised Macs.
France’s Top Court Blocks Under-15 Social Media Ban
France’s Constitutional Council blocked an under-15 social media ban, raising questions over free expression, age verification and online privacy.
Nearly 700,000 French Taxpayer Records Reportedly Stolen in Government Cyberattack
France’s tax authority confirmed a cyberattack exposed taxpayer data as officials investigate the breach’s scope and an unverified 678,000-record claim.
US Courts To Begin Publishing Spyware Records From 2029
U.S. courts will begin separately tracking spyware-based interceptions, giving the public new data on government hacking while leaving key gaps.
IT Security News Hourly Summary 2026-08-17 20h : 7 posts
7 posts published in the last hour 17:31Updates to your AWS Sign-In experience 17:31600,000 WordPress Sites Affected by Arbitrary File Upload Vulnerability in Forminator Forms WordPress Plugin 17:31LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected 17:01OpenMatter Network…
Updates to your AWS Sign-In experience
Amazon Web Services (AWS) is gradually introducing updates to the AWS Sign-In and sign-up experience to a limited number of customers. We’re sharing these…