Frontier Airlines is facing scrutiny after reportedly suffering its third data security incident in 2024, marking a troubling pattern for the budget…
Huntress Flags Widespread Credential Stuffing Campaign Hitting SonicWall Devices
Managed detection and response provider Huntress has issued a threat advisory warning of an active and rapidly growing credential stuffing campaign…
US, Australia Release OT Isolation Guidance
The United States and Australia have published joint guidance to help critical infrastructure organizations isolate their operational technology systems…
DEF CON 34 Badges Feature Open Source Security Chip
The badges for DEF CON 34 feature an open source security chip designed by renowned hardware hacker Andrew “bunnie” Huang.
Snowflake’s AI Agent Security Framework
Snowflake has introduced a multi-layered security framework designed to protect AI agents from manipulation and prevent unauthorized actions.
FTC sues Hims & Hers over health data sharing
The Federal Trade Commission has filed a lawsuit against telehealth provider Hims & Hers, accusing the company of sharing sensitive customer health data…
Wordfence Finds Critical Backdoor in ARVE WordPress Plugin
A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to…
Anthropic AI models breached three real companies
Anthropic revealed Thursday that three of its Claude AI models escaped test environments and successfully breached real-world companies during security…
Cybercrime goes subscription: AI, malware and infrastructure on demand
Cybercrime has become a commercialized ecosystem where criminals can buy or rent nearly every capability needed to launch sophisticated attacks. These…
Attackers abuse Microsoft auth for phishing
Cybercriminals have shifted tactics in phishing campaigns by exploiting Microsoft’s legitimate authentication infrastructure rather than deploying fake…
IT Security News Hourly Summary 2026-07-31 15h : 8 posts
8 posts were published in the last hour 13:2 : What an LLM Can Find: A Practical, Cheap Path to Code-level Threat Discovery 13:2 : CVE-2026-63077 TeamCity RCE Vulnerability 13:2 : Keycloak Flaw Exposes Users’ Personal Data to Restricted Admins…
What an LLM Can Find: A Practical, Cheap Path to Code-level Threat Discovery
An AI-assisted audit found 29 flaws in GlobaLeaks, showing LLMs make large-scale code reviews faster, cheaper, and accessible. GlobaLeaks, a mature…
CVE-2026-63077 TeamCity RCE Vulnerability
JetBrains has disclosed a critical authentication bypass vulnerability in TeamCity On-Premises that enables remote attackers to execute arbitrary…
Keycloak Flaw Exposes Users’ Personal Data to Restricted Admins
A broken access control vulnerability in Keycloak could allow unauthorized administrator accounts to access users’ personal information. This issue,…
IBM: Average Data Breach Cost Hits $5M
The global average cost of a data breach has climbed to $4.99 million, marking a 12% increase over the previous year and setting a new record, according…
Criminals used AI and children’s coding software to build a multimillion-dollar ad fraud empire
A security investigation into inexpensive Android TV boxes led researchers to an ad fraud operation that had remained unnoticed for several years. Fuyao…
120 fake Walmart stores stealing credit cards
A network of more than 120 fraudulent websites impersonating Walmart is actively stealing credit card information from online shoppers.
XRP Volatility Surges as Cybersecurity Threats and Market Changes Raise New Concerns
XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards.
CISA adds Arista and Fortinet flaws to KEV catalog
The U.S.
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
Palo Alto Networks’ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks…
Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and…
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens – has evolved from a niche red-team technique to an…
Mythos Asks the Right Question. It Doesn’t Answer It.
AI is compressing exploit timelines. The real question isn’t whether your vulnerability management playbook needs to change, it’s which part of it you’ve…
Facial Recognition at Madison Square Garden
Last month, the story broke (alternate link ) that Madison Square Garden uses facial recognition software on everyone entering the facility, and—among…