This week’s roundup covers active exploitation of Apache Tomcat and SonicWall SMA, a nearly two-decade-old Linux kernel flaw, critical bugs in N-able…
Metabase 0-Day Vulnerability Exploited in the Wild to Gain Admin Access
Metabase, the widely used open-source business intelligence and data visualization platform, has confirmed that a critical zero-day vulnerability tracked…
IT Security News Hourly Summary 2026-08-09 20h : 2 posts
2 posts were published in the last hour 17:31 : U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data 17:0 : IT Security News Hourly Summary 2026-08-09 19h : 2 posts
U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data
IEH was breached by a phishing attack that exposed its Microsoft 365 inbox, including emails and potentially export-controlled military data. IEH…
IT Security News Hourly Summary 2026-08-09 19h : 2 posts
2 posts were published in the last hour 16:1 : ShinyHunters Data Leaks Fuel $2,000 Sextortion Email Scam 16:0 : IT Security News Hourly Summary 2026-08-09 18h : 2 posts
ShinyHunters Data Leaks Fuel $2,000 Sextortion Email Scam
Cybercriminals are exploiting email addresses exposed in previous ShinyHunters data leaks to conduct a new sextortion campaign demanding $2,000 in…
IT Security News Hourly Summary 2026-08-09 18h : 2 posts
2 posts were published in the last hour 15:1 : GrapheneOS Duress Feature Puts Digital Privacy and Evidence Laws to the Test 15:0 : IT Security News Hourly Summary 2026-08-09 17h : 10 posts
GrapheneOS Duress Feature Puts Digital Privacy and Evidence Laws to the Test
A federal case concerning a local Atlanta activist is fueling controversy over privacy issues relating to cell phone searches and whether simply wiping…
IT Security News Hourly Summary 2026-08-09 17h : 10 posts
10 posts were published in the last hour 14:31 : The AI safety test is becoming a safety risk 14:31 : CSS Bomb Attacks Turn Malicious Emails Into Password-Stealing Keyloggers 14:31 : 4 Steps for Making Sure Domain Impersonation Takedown…
The AI safety test is becoming a safety risk
AI agents are escaping cybersecurity testing environments and reaching real-world systems, raising questions about whether safety infrastructure, industry…
CSS Bomb Attacks Turn Malicious Emails Into Password-Stealing Keyloggers
A new class of email-based attacks that exploit ordinary CSS styling code to hijack webmail interfaces, spy on user activity, and even steal passwords in…
4 Steps for Making Sure Domain Impersonation Takedown Requests Don’t Get Rejected
Brand impersonation is one of the fastest growing threats facing organizations today. Bad actors create fake websites using an organization’s name, logos,…
CMMC Phase II Is Paused, But Contractors’ Data-Security Obligations Are Not
By John Grancarich, EVP, Head of Defense & Intelligence, Fortra The recent pause affecting the implementation of Cybersecurity Maturity Model…
7 Reasons Organizations Are Simplifying Endpoints To Improve Security
Endpoint security strategy is changing alongside the modern workspace itself. Employees now spend much of their time working through browsers, virtual…
From Reactive Forensics to Predictive Defence: Strengthening Cyber Resilience in Banking
By Tarun Wig, Co-founder & CEO, Innefu Labs A bank in India can be doing everything right on paper. ISO certifications in place. RBI-mandated controls…
Nearly 800 Malicious npm Packages Found Delivering Cross-Platform RAT and Infostealer
An extensive software supply chain attack targeting developers and systems running Windows, Mac OS, and Linux has identified approximately 800 malicious…
This ‘adversarial’ pattern can prevent surveillance cameras from detecting you
A security researcher has designed an algorithm that can create computer-generated patterns capable of hiding people, faces, and vehicles from detection…
SQL Injection Used in Zero-Day Metabase Customer Data Theft Hacks
To exploit customer instances in data theft hacks, a critical Metabase SQL injection flaw was abused in zero day attacks. The vulnerability impacted Tally…
IT Security News Hourly Summary 2026-08-09 16h : 2 posts
2 posts were published in the last hour 13:31 : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 109 13:0 : IT Security News Hourly Summary 2026-08-09 15h : 2 posts
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 109
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter…
IT Security News Hourly Summary 2026-08-09 15h : 2 posts
2 posts were published in the last hour 12:31 : Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITION 12:1 : Alcon – 218,395 breached accounts
Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email…
Alcon – 218,395 breached accounts
In August 2026, the Alcon eye care company was named in a ShinyHunters “pay or leak” extortion campaign . The group subsequently published data allegedly…
Ransomware gangs skip the CEO, head straight for the 40-something IT manager
Gen Xers who feel triggered by this should remember to unplug the network cable and call the cops