Foxit has patched 20 remote code execution vulnerabilities in Foxit PDF Reader and Foxit PDF Editor, and users should update immediately. The fixes arrive in the July 8, 2026 security release and cover multiple Windows and macOS versions, with several…
AssuranceAmerica Data Breach Exposed 6.9 Million People’s License Numbers and Personal Data
AssuranceAmerica has disclosed a major data breach that exposed the personal information and driver’s license numbers of nearly 6.9 million individuals, marking one of the largest known leaks of U.S. driver’s license data in 2026. The incident highlights growing risks…
Operationalizing Threat Intelligence: Bridging the Gap Between Feed Data and SOC Action
Threat intelligence feeds have become a staple line item in security budgets. Yet a persistent gap exists between purchasing a feed and actually using it to stop attacks. Many SOC teams receive a steady stream of indicators — IP addresses,…
Everest Ransomware Claims 1 TB Data Theft But Encryptor Shows No Exfiltration Code
A new technical breakdown of the Everest ransomware family reveals a strange contradiction at the heart of one of its recent attack claims. Despite boasting about stealing a full terabyte of data from a victim organization, the actual malware sample…
Microsoft closes book on Nightmare Eclipse’s RoguePlanet zero-day
Weeks after the exploit code dropped, Redmond has finally ships a fix for the Defender zero-day This article has been indexed from www.theregister.com – Articles Read the original article: Microsoft closes book on Nightmare Eclipse’s RoguePlanet zero-day
EN, SentinelLabs - We are hunters, reversers, exploit developers, and tinkerers shedding light on the world of malware, exploits, APTs, and cybercrime across all platforms.
One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement
China and India ran separate espionage operations against the same Pakistani police force, each drawn by different stakes in Pakistan’s internal security. This article has been indexed from SentinelLabs – We are hunters, reversers, exploit developers, and tinkerers shedding light…
AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up
AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers write tailored bait, pick targets, test what lands, and jump to the next host before your team clears…
Vidar Stealer and XMRig Miner Campaign
Cybercriminals are running a dual-monetization scheme that simultaneously steals sensitive data and mines cryptocurrency on victim computers, according to research published July 7 by Unit 42, the threat intelligence division of Palo Alto Networks. This article has been indexed from…
OnlyFans DMCA complaints take down hacked government sites
Thousands of government websites have been compromised by scammers who are exploiting security vulnerabilities to upload fraudulent advertisements for leaked OnlyFans content. This article has been indexed from CyberMaterial Read the original article: OnlyFans DMCA complaints take down hacked government…
Microsoft Cloud Rebuild enables PC recovery without local Wi
Microsoft has introduced Cloud Rebuild, a new recovery feature that enables Windows 11 PCs to be completely reimaged without requiring physical installation media or relying on the existing operating system. This article has been indexed from CyberMaterial Read the original…
EU Chat Control Rules Extended to 2028
The European Union is moving forward with a vote to extend temporary regulations that permit online platforms to scan private messages for child sexual abuse material, potentially keeping the framework in place until 2028. This article has been indexed from…
20 Open-Source Cybersecurity Tools Roundup
A new compilation of 20 open-source cybersecurity tools has been released by Help Net Security, addressing emerging security challenges across multiple domains. This article has been indexed from CyberMaterial Read the original article: 20 Open-Source Cybersecurity Tools Roundup
IT Security News Hourly Summary 2026-07-09 15h : 11 posts
11 posts were published in the last hour 12:35 : 12 Million Impacted by Data Breach at Japanese Telco KDDI 12:35 : Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) 12:13 : GhostApproval Flaws Let Top AI Coding Tools Write…
12 Million Impacted by Data Breach at Japanese Telco KDDI
Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs. The post 12 Million Impacted by Data Breach at Japanese Telco KDDI appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)
Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by the RoguePlanet exploit. The vulnerability and the fix CVE-2026-50656 is due to improper link resolution…
GhostApproval Flaws Let Top AI Coding Tools Write Outside Workspaces
Wiz found GhostApproval symlink flaws in major AI coding assistants that could hide sensitive file targets, bypass approval checks and enable system access too. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read…
HP Linux Imaging and Printing Software Flaw Enables Privilege Escalation Attacks
A critical vulnerability has been discovered in HP Linux Imaging and Printing Software (HPLIP), which exposes Linux systems to potential privilege escalation and remote code execution attacks. This vulnerability, tracked as CVE-2026-14544, has a CVSS v3 score of 9.8, indicating…
Attackers Exploit WordPress Plugin Vulnerabilities for Remote Code Execution and Webshell Access
A large-scale exploitation campaign is actively weaponising known vulnerabilities across multiple content management systems, with WordPress plugins forming the primary attack surface. Cyber actors are scanning the internet for vulnerable sites and chaining unauthenticated file upload, remote code execution (RCE),…
Microsoft fixes RoguePlanet zero-day in Defender
The RoguePlanet zero-day is now fixed in Microsoft Defender. Here’s how to make sure your system is protected. This article has been indexed from Malwarebytes Read the original article: Microsoft fixes RoguePlanet zero-day in Defender
15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google
Affecting every major distribution since 2011, the Linux kernel vulnerability allows attackers to gain root access. The post 15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the Threat Hunter Team from Symantec,…
Summer of Clearinghouses
Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we announced it —…
Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests
Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests This article has been indexed from www.infosecurity-magazine.com Read the original article: Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests
75% CISOs Fear Executives Don’t Understand Cybersecurity Risks Employees Face
Survey of cybersecurity leaders by MetaCompliance finds that many feel boards are uninterested in ever-evolving cyber risks This article has been indexed from www.infosecurity-magazine.com Read the original article: 75% CISOs Fear Executives Don’t Understand Cybersecurity Risks Employees Face