Serbian activists were targeted with zero-click Pegasus and NoviSpy spyware, exposing a major surveillance campaign ahead of elections. A member of…
Incident response guide for AWS CloudTrail investigations – Part 1
AWS CloudTrail logs contain the evidence you need when investigating suspicious activity in your AWS environment, but knowing which fields matter and how…
Sangoma Switchvox Flaw Under Attack: 4,000 VoIP Systems Exposed
Hackers are exploiting a critical Sangoma Switchvox flaw that enables unauthenticated remote code execution. Admins should patch and check for compromise.
Analyzing a Go-Based IoT Self-Propagating DDoS Botnet
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Analyzing a Go-Based IoT Self-Propagating DDoS Botnet
Financial Stability Board Sounds the Alarm Over Frontier AI Risks
The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI
Introducing More Granular Controls for AI Bot Traffic
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Introducing More Granular Controls for AI Bot Traffic
IT Security News Hourly Summary 2026-09-03 23h : 5 posts
5 posts published in the last hour 20:31FBI Investigates Dark Web Trove of 153 Million Driver’s Licenses 20:31Cisco Fixed Critical RCE in Nexus 9000 Series Switches 20:31Manchester Airport Breach: What 8.7M Customers Should Do 20:01Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt…
FBI Investigates Dark Web Trove of 153 Million Driver’s Licenses
The FBI is investigating a dark web service claiming to sell 153 million driver’s license records from people across the US and Canada.
Cisco Fixed Critical RCE in Nexus 9000 Series Switches
Cisco patched a critical Nexus 9000 vulnerability, CVE-2026-20212, allowing unauthenticated remote root code execution. Cisco has released patches for a…
Manchester Airport Breach: What 8.7M Customers Should Do
Manchester Airports Group customer data is now public. Here’s what was exposed, why it raises scam risks, and what affected travelers should do next.
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that’s been put to use by a Russia-aligned threat actor known as UAC-0099…
IT Security News Hourly Summary 2026-09-03 22h : 8 posts
8 posts published in the last hour 19:31ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories 19:31Healthcare Giant McKesson Investigates Data Breach Incident 19:31Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity…
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow.” Why break in when…
Healthcare Giant McKesson Investigates Data Breach Incident
ShinyHunters claims to have stolen 284 million records from McKesson
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in…
Attackers Actively Exploiting Critical Vulnerability in Super Forms Plugin
On July 9th, 2026, we publicly disclosed a critical Unauthenticated Arbitrary File Upload vulnerability in Super Forms, a WordPress plugin with an…
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set
Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in…
Claude sessions hijacked, AI jolts global finance, agents get too many keys
Claude sessions get hijacked Anthropic is warning that common infostealer malware is stealing active Claude browser sessions, letting attackers get into…
Abliteration.ai is making a business out of removing AI guardrails
Abliteration.AI is making powerful AI models without guardrails easier to access, arguing that giving defenders the same tools as bad actors could…
IT Security News Hourly Summary 2026-09-03 21h : 11 posts
11 posts published in the last hour 18:31Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026) 18:31Questel – 1,226,209 breached accounts 18:31Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC 18:02Hackers Use QR Codes in Phishing…
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to…
Questel – 1,226,209 breached accounts
In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters “pay or leak” extortion campaign .…
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
A shared security ‘Nightmare’
Hackers Use QR Codes in Phishing Emails to Steal Login Credentials
Hackers are putting QR codes in phishing emails to steal login credentials. Known as quishing, the method hides a dangerous web address inside a square…