Fifteen years in, and the conversation I have most often with security leads still starts the same way: how’s your perimeter, how’s your endpoint…
Passkey-themed social engineering leads to identity and cloud compromise
Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA…
Fake GTA6 ‘Leaked Download’ Caught Spreading RATs, Infostealer and Wiper Ransomware
Cybersecurity firm Huntress has uncovered a malware campaign that preys on excitement for Grand Theft Auto VI (GTA6), packaging remote access trojans, an…
Scans for Proxmox Servers, (Wed, Sep 9th)
About a week ago, Proxmox published an advisory revealing a vulnerability in older versions of Proxmox VE, its flagship Virtual Environment product. The…
WRAITH – Browser Hooking and Blind XSS Page Mirroring
WRAITH combines BeEF-style browser hooks with blind-XSS capture and a credentialed Page Mirror. Tested locally, with its limits examined.
Nscale In $3.5bn Compute Deal For Figure Humanoid Robots
Data centre provider Nscale to supply at least $3.5bn of compute to Figure AI, becomes shareholder in humanoid robot maker
IT Security News Hourly Summary 2026-09-09 20h : 14 posts
14 posts published in the last hour 17:31MikroTik routers hijacked, Russian data center threats, UK cybercrime losses surge 17:31Serial Microsoft 0-day hunter drops yet another Defender exploit 17:31HelmGuard Raises $7.3 Million for Agentic GRC and Security 17:31A week in security…
MikroTik routers hijacked, Russian data center threats, UK cybercrime losses surge
MikroTik routers hijacked through internet-exposed SSH Russian data centers face new security requirements UK account-hack losses surge thanks to new…
Serial Microsoft 0-day hunter drops yet another Defender exploit
A bypass of a bypass of a bypass
HelmGuard Raises $7.3 Million for Agentic GRC and Security
The company will increase its US market presence and will expand its engineering and go-to-market teams.
A week in security (August 31 – September 6)
Last week on Malwarebytes Labs: Stay safe!
CVE-2026-75650 Adobe Commerce Zero-Day: Patch Isn’t Enough
Adobe patched the actively exploited CVE-2026-75650 Magento zero-day, but compromised stores still need malware hunting and broad credential rotation.
What’s the difference between WAN and LAN?
TLDR. A LAN is a local area network that connects devices in a limited place, like a home, office, or school, while a WAN is…
Google Finds Chinese Hackers Running AI on Compromised Networks
Google says China-linked hackers are running AI inside compromised cloud environments, using victims’ computing power while reducing outside monitoring.
You Can Now Destroy Flock Cameras for Cash in GTA V
A new GTA mod lets you smash and shoot Flock’s automatic license plate readers around the fictional Los Santos.
Critical Telerik UI For ASP.Net Ajax Vulnerability Chain: CVE-2026-13181 to CVE-2026-13184
HOC Shorts A high-severity vulnerability chain in Telerik UI for ASP.NET AJAX (RadAsyncUpload) allows unauthenticated attackers to decrypt…
Android’s September 2026 Updates Patch 180 Vulnerabilities
The security updates resolve critical flaws across Android’s Framework, System, and Kernel components.
Europol celebrates the International Day of Police Cooperation
On 7 September, Europol is marking the International Day of Police Cooperation together with its partners to recognise the central role our network plays…
G7 Urges Organizations to Start Post-Quantum Migration Now
The G7 says organizations should start post-quantum migration now by inventorying cryptographic dependencies and prioritizing high-risk systems.
AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
Criminal and state-sponsored adversaries are increasingly using AI to automate and scale their attacks, according to GTIG.
IT Security News Hourly Summary 2026-09-09 19h : 15 posts
15 posts published in the last hour 16:32Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories 16:31Driver’s License Data for Sale 16:31Microsoft September 2026 Patch Tuesday: Record 974 Flaws and 2 Zero-Days 16:31Active exploitation of Cisco Secure Firewall Management Center…
Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories
Major chipmakers announced patches for vulnerabilities recently discovered in their products.
Driver’s License Data for Sale
A database of 153 million drivers licenses is for sale on the dark web. Brian Krebs has more detail .
Microsoft September 2026 Patch Tuesday: Record 974 Flaws and 2 Zero-Days
HOC Shorts Microsoft has released its September 2026 Patch Tuesday security update, fixing a record-breaking 974 vulnerabilities and…