Let me describe a workflow that exists in thousands of engineering organizations right now. Somebody sets up a cron job. It runs terraform plan against…
Five arrests for smuggling migrants across the Bulgarian-Serbian green border
The action day led to:5 arrests (1 High Value Target, 2 police officers and 2 associates)5 locations searched;Seizures include: 3 vehicles used for…
CRPx0 hacking service for dummies claims victim count more than quintupled
It’s ‘built to be operated by a human with no technical background’
Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback
Dark Caracal targets Venezuela with GoCaracal, an upgraded Bandook toolkit and an Ethereum fallback for resilient C2 communications. Dark Caracal is back…
IT Security News Hourly Summary 2026-08-27 23h : 4 posts
4 posts published in the last hour 20:31OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face 20:01PaperCut NG/MF Vulnerability Actively Exploited in Attack – All Versions Impacted 20:01Wordfence Argus: Moving Beyond Human Research Capability 20:01Cybercriminals…
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding…
PaperCut NG/MF Vulnerability Actively Exploited in Attack – All Versions Impacted
PaperCut has confirmed that hackers are actively exploiting an unpatched vulnerability in its widely used PaperCut NG and PaperCut MF print management…
Wordfence Argus: Moving Beyond Human Research Capability
When you create an AI agent that makes a breakthrough that is so difficult to understand that you need to ask it to write a blog post to explain it to…
Cybercriminals Are Selling Corporate Executives’ Social Security Numbers for Just 25 Cents
Corporate executives’ most sensitive identity data is being sold on dark web marketplaces for as little as a quarter, according to new threat intelligence…
AI girlfriend review site’s secrets were exposed to the world for three weeks
Even testing and staging sites need protection from prying eyes
IT Security News Hourly Summary 2026-08-27 21h : 12 posts
12 posts published in the last hour 18:3150+ insider threat statistics for 2026 18:31A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend 18:31Europol supports operation against amphetamine producers 18:31Microsoft Teams’ New Policy Lets Admins…
50+ insider threat statistics for 2026
In 2026, insider threats are probably a bigger risk than you think. In fact, they could cost your organization $19.5 million a year. But it’s not really a…
A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend
After an affair with a fellow police officer ended, a Georgia cop used Flock to track her movements—and those of a man whose vehicle often showed up near…
Europol supports operation against amphetamine producers
As part of an extensive investigation led by the German Krefeld Public Prosecutor’s Office and Mönchengladbach Police, officers from the North…
Microsoft Teams’ New Policy Lets Admins Automatically Block Meeting Bots
Microsoft Teams is adding a policy that lets IT admins automatically block detected external meeting bots instead of relying on organizer approval.
ATF declares ‘major incident’ as ransomware gang claims hack
The ATF is the latest federal government agency in recent years to notify Congress of a “major incident” involving its cybersecurity.
“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend
In his first Threat Source newsletter, David Bianco explores the critical need for operational sovereignty in customizing AI guardrails to maintain the…
Head Mare Hackers Exploit TrueConf Servers to Spread Backdoors Through Malicious Updates
The Head Mare hacktivist group has been targeting unpatched True Conf video conferencing enterprise servers to replace legitimate client installers with…
Pro-Russian Hackers Claim Norway’s Biggest-Ever Government Cyberattack
Norway’s Digdir faced its largest recorded DDoS attack as a pro-Russian group claimed responsibility and linked the campaign to support for Ukraine.
Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin
On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an…
FBI Disrupts QTFY Hacking Network Targeting U.S. Organizations
The U.S. Department of Justice (DoJ) and Federal Bureau of Investigation (FBI) have disrupted two hacking platforms operated by a China-linked threat…
Two Arrested in Australia Over TeamPCP Supply Chain Attacks
Two Australian men were arrested over alleged TeamPCP supply chain attacks that stole more than 500,000 credentials.
IT Security News Hourly Summary 2026-08-27 20h : 12 posts
12 posts published in the last hour 17:31Check Point Supports OpenAI’s Call for Collective Action on Cyber Defense 17:31Omarchy distro gains serious backing 17:31Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability Discovery 17:02CISA Warns of Microsoft SQL Server RCE Vulnerability Exploited…
Check Point Supports OpenAI’s Call for Collective Action on Cyber Defense
AI is reshaping cybersecurity at extraordinary speed. Check Point Research is already uncovering AI-powered attacks in the wild, revealing how threat…