Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control (C2), retrieving obfuscated…
U.S. Offers $10 Million Reward for Iranian IRGC Cyber Chief Amir Yaryab
The U.S. Department of State’s Rewards for Justice (RFJ) program has announced a reward of up to $10 million for information leading to the identification…
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware…
BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials
CloudSEK has uncovered BigBear 2.0, a new phishing-as-a-service operation targeting Microsoft 365
AI Customer Service Agents Can Be Hacked to Bypass MFA, Steal OTPs and Expose User Data
Security researchers have demonstrated how vulnerabilities in AI-powered customer service agents can be exploited to bypass identity checks, expose…
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active…
IT Security News Hourly Summary 2026-09-08 12h : 12 posts
12 posts published in the last hour 09:31Essential AI agent security questions 09:31Trezor Supply Chain Breach Now Impacts 81,000 Customers 09:31Hackers Create Domain Admin Account and Disable Security Tools Inside Windows Network 09:31Drug trafficking investigation leads to some of the…
Essential AI agent security questions
AI agents are outpacing legacy IAM. Discover the 3 questions every CISO must ask to secure them.
Trezor Supply Chain Breach Now Impacts 81,000 Customers
Crypto wallet-maker Trezor says a data breach at supplier ShipMonk is far worse than originally thought
Hackers Create Domain Admin Account and Disable Security Tools Inside Windows Network
A newly documented ransomware intrusion attributed to The Gentlemen shows how attackers can convert a foothold in a Windows environment into domain-wide…
Drug trafficking investigation leads to some of the world’s biggest underground bankers
The investigation, led by the Spanish National Police (Policía Nacional) and supported by Europol, has resulted in the arrest of 21 suspects for offences…
North Korea-linked Hackers Hide a Backdoor Inside HAProxy
North Korea-linked hackers hid a backdoor inside HAProxy, masking C2 traffic and stealing data while keeping the load balancer working normally. North…
Syrian migrant smugglers arrested in coordinated strike in Germany and Serbia
This follows several years of intensive and extensive investigations led by the German Federal Police under the direction of three Bavarian Public…
Britain reboots its space strategy with £7.8B already on the launchpad
Cross-government plan combines civil ambitions with an increasingly military view of orbit
US Regulator Probes Tesla Over Cybercab Launch
US vehicle safety regulator opens audit process after Tesla puts Cybercab onto Austin streets with no human controls
Mathspace breach exposes data on over a million students and parents
Mathspace has confirmed that attackers broke into its internal reporting system through an unpatched Metabase vulnerability and stole data belonging to…
OpenAI Agents Take Over German Wiki Site
OpenAI acknowledges its agents repurposed German wiki as message board in May incident that was not previously disclosed
Jellyfin 12.0 security fixes arrive alongside the removal of legacy client logins
Jellyfin shipped version 12.0 of its media server. Several of the security fixes in it block requests built to reach files outside the folders the server…
IT Security News Hourly Summary 2026-09-08 11h : 7 posts
7 posts published in the last hour 08:31Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing 08:31IT Help Desk Impersonation Lets Hackers Bypass MFA 08:31ShinyHunters Gained Access to 6 Million Customers’ Records Using a Single…
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users’ personal…
IT Help Desk Impersonation Lets Hackers Bypass MFA
Attackers bypass endpoint security by posing as IT staff, stealing Microsoft 365 sessions, draining SaaS data and demanding extortion. Forget installing…
ShinyHunters Gained Access to 6 Million Customers’ Records Using a Single Call
A single phone call was all it took to trigger one of the largest data breaches in Dutch history. In early February 2026, Dutch telecom giant Odido and…
European Operators Mull Deal For EU Satellite Spectrum Bid
Major mobile operators reportedly consider banding together to jointly bid on reserved EU spectrum for direct-to-device satellite services
Hackers Hijack Coder Registry to Push Malicious Terraform Modules and Steal Cloud Credentials
A critical security incident at Coder exposed users of its Terraform module registry to malicious packages designed to steal credentials from cloud…