Healthcare company McKesson disclosed a cybersecurity incident in which hackers got into third-party applications and stole data. McKesson is a major U.S.…
Anthropic locks out Claude users after infostealers hijack login sessions
Anthropic has started locking users out of their Claude accounts due to their login sessions having been compromised through infostealer malware. “The…
IT Security News Hourly Summary 2026-08-31 14h : 8 posts
8 posts published in the last hour 11:31Hackers Use Ethereum Blockchain to Steal Credit Card Data From Online Shoppers 11:31Microsoft Confirms False “Defender Antivirus Turned Off” Alerts Spreading Across Windows Devices 11:31Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs 11:31New…
Hackers Use Ethereum Blockchain to Steal Credit Card Data From Online Shoppers
Online shoppers can have their card details stolen without ever leaving a legitimate store. A tracked Magecart campaign plants malicious checkout code on…
Microsoft Confirms False “Defender Antivirus Turned Off” Alerts Spreading Across Windows Devices
Microsoft has confirmed that a wave of alarming Windows Security pop-ups telling users their antivirus protection is disabled is nothing more than a…
Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs
Named KindaRails2Shell, the arbitrary file read flaw allows attackers to extract secrets and execute arbitrary code remotely.
New AI-Built Malware Watches How Security Teams Remove It and Fights Back
A new Windows malware toolkit is showing how artificial intelligence can change the economics of cybercrime. Known as Gryxa, it gives a criminal operator…
Hiding Prompt Injection in Legal Filing
Someone hid AI instructions into a legal filing. Alternate link .
OpenClaw 2.0 Released With Major Security Upgrades for AI Agents, Plugins and Credentials
OpenClaw has released version 2026.8.1, also called OpenClaw 2.0, in what the open-source AI agent platform described as its largest update to date. The…
Boston Scientific Still Recovering From Cyberattack
The company has called in CrowdStrike and others to investigate the attack that caused global network disruption.
IT Security News Hourly Summary 2026-08-31 13h : 12 posts
12 posts published in the last hour 10:31Dashlane vs 1Password: Features & Pricing Compared 10:31Extortion Group Claims Manchester Airports Group Data Breach 10:31ATM Flaws Reveal Key Weaknesses in the Software Supply Chain 10:31Shai-Hulud Trinitite Worm Infects Popular TanStack Query npm…
Dashlane vs 1Password: Features & Pricing Compared
Compare Dashlane and 1Password and explore their features, pricing, and overall value to make the best choice for your needs.
Extortion Group Claims Manchester Airports Group Data Breach
FulcrumSec says it stole over 80 GB of data from Manchester Airports Group and plans to leak it online.
ATM Flaws Reveal Key Weaknesses in the Software Supply Chain
A security researcher discovered nine vulnerabilities impacting ATM encryption and authentication software. But the problems extend far beyond your local…
Shai-Hulud Trinitite Worm Infects Popular TanStack Query npm Package to Steal Developer Secrets
A new Shai-Hulud supply-chain attack dubbed Trinitite has compromised the npm package @7nohe/openapi-react-query-codegen, a TanStack Query code-generation…
Infostealers Are Hijacking Claude Sessions and Draining Subscriptions
Infostealers can steal active Claude sessions, bypass 2FA and drain paid usage. Anthropic is revoking access and refunding unauthorized charges. Anthropic…
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers,…
ValleyRAT masquerading as adware
Threat actors are distributing the ValleyRAT backdoor disguised as adware. We analyze the infection chain, from the malicious installer to the final…
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams
Learn how the Spring Ring campaign abuses Microsoft Teams and voice phishing to deploy malware and target enterprise domain controllers.
AI Shopping Assistant Vulnerabilities Enable Remote Code Execution on Retailer’s Servers
Security researchers have demonstrated how flaws in the AI shopping assistant of a major unnamed U.S. retailer could be exploited to enable remote code…
Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails
Russian state hackers are trying to interfere with AI-assisted malware analysis in Ukraine by deliberately setting off AI safety mechanisms, ESET has…
Microsoft Defender Bug Triggers False “Antivirus Turned Off” Alerts on Windows
Microsoft has confirmed an issue with Microsoft Defender Antivirus that generates false notifications on Windows systems, claiming “Microsoft Defender…
IT Security News Hourly Summary 2026-08-31 12h : 6 posts
6 posts published in the last hour 09:31Android 17 Adds New Network Security Features to Block 2G SMS Blaster Attacks 09:31Judge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’ 09:31Magecart Hackers Abuse Ethereum Smart Contracts to Steal Card Data…
Android 17 Adds New Network Security Features to Block 2G SMS Blaster Attacks
Android 17 introduces a new set of network security controls to reduce cellular downgrade attacks, protect local networks, and limit metadata exposure…