North Korea-linked hackers hid a backdoor inside HAProxy, masking C2 traffic and stealing data while keeping the load balancer working normally. North…
Syrian migrant smugglers arrested in coordinated strike in Germany and Serbia
This follows several years of intensive and extensive investigations led by the German Federal Police under the direction of three Bavarian Public…
Britain reboots its space strategy with £7.8B already on the launchpad
Cross-government plan combines civil ambitions with an increasingly military view of orbit
US Regulator Probes Tesla Over Cybercab Launch
US vehicle safety regulator opens audit process after Tesla puts Cybercab onto Austin streets with no human controls
Mathspace breach exposes data on over a million students and parents
Mathspace has confirmed that attackers broke into its internal reporting system through an unpatched Metabase vulnerability and stole data belonging to…
OpenAI Agents Take Over German Wiki Site
OpenAI acknowledges its agents repurposed German wiki as message board in May incident that was not previously disclosed
Jellyfin 12.0 security fixes arrive alongside the removal of legacy client logins
Jellyfin shipped version 12.0 of its media server. Several of the security fixes in it block requests built to reach files outside the folders the server…
IT Security News Hourly Summary 2026-09-08 11h : 7 posts
7 posts published in the last hour 08:31Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing 08:31IT Help Desk Impersonation Lets Hackers Bypass MFA 08:31ShinyHunters Gained Access to 6 Million Customers’ Records Using a Single…
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users’ personal…
IT Help Desk Impersonation Lets Hackers Bypass MFA
Attackers bypass endpoint security by posing as IT staff, stealing Microsoft 365 sessions, draining SaaS data and demanding extortion. Forget installing…
ShinyHunters Gained Access to 6 Million Customers’ Records Using a Single Call
A single phone call was all it took to trigger one of the largest data breaches in Dutch history. In early February 2026, Dutch telecom giant Odido and…
European Operators Mull Deal For EU Satellite Spectrum Bid
Major mobile operators reportedly consider banding together to jointly bid on reserved EU spectrum for direct-to-device satellite services
Hackers Hijack Coder Registry to Push Malicious Terraform Modules and Steal Cloud Credentials
A critical security incident at Coder exposed users of its Terraform module registry to malicious packages designed to steal credentials from cloud…
Belgian Police Arrest China-Born Man On Tech Espionage Charges
Authorities arrest former senior semiconductor researcher on charges that he simultaneously ran competing Chinese chip producer
IT Security News Hourly Summary 2026-09-08 10h : 8 posts
8 posts published in the last hour 07:31Shai-Hulud npm Worm Resurfaces After 111 Days and Slips Past Malware Scanning 07:31JLR To Lay Off 4,000 Staff Amid China Competition 07:31Hackers Hijack Coder Module Registry to Distribute Credential-Stealing Malicious Packages 07:31PEEP browser…
Shai-Hulud npm Worm Resurfaces After 111 Days and Slips Past Malware Scanning
A familiar npm worm has returned after more than three months of silence, carrying the same malicious file linked to an earlier supply-chain incident. The…
JLR To Lay Off 4,000 Staff Amid China Competition
UK’s biggest carmaker seeks to cut costs over next two years, amid slow transition to electric, financial hit from cyber-attack
Hackers Hijack Coder Module Registry to Distribute Credential-Stealing Malicious Packages
Coder has reported a significant software supply chain incident in which an unidentified threat actor redirected part of its official module registry…
PEEP browser backdoors, $320M Liquid exploit, BigBear beats MFA
PEEP turns browsers into backdoors Liquid loses $320M, hackers play hero BigBear claws past MFA Get the full show notes here:…
Panzer Ransomware Emerges With Windows, Linux, ESXi and FreeBSD Attack Support
A newly identified ransomware-as-a-service operation, Panzer, has surfaced with advertised payload support for Windows, Linux, VMware ESXi and FreeBSD,…
Xiaomi Launches Foldable To Compete With Upcoming iPhone
Beijing-based Xiaomi launches 18 Fold wide-format foldable smartphone, as companies flock to popular category
How to Disable Root Login via SSH: Step-by-Step Guide (2026)
By HOC Team | Last updated: September 08, 2026 | Read time: ~12 min How to Disable Root…
IT Security News Hourly Summary 2026-09-08 09h : 4 posts
4 posts published in the last hour 06:31Hackers Steal Microsoft 365 Sessions to Hijack Accounts Even After MFA 06:31Australia To Let Users Switch Off Social Media Algorithms 06:01Ransomware negotiation tactics have turned into a business process 06:00IT Security News Hourly…
Hackers Steal Microsoft 365 Sessions to Hijack Accounts Even After MFA
Cybercriminals are using a rebranded Evilginx2 phishing-as-a-service platform dubbed BigBear 2.0 to intercept authenticated Microsoft 365 sessions,…