IT Security News: today roundup Europol assisted in dismantling a European horse trafficking network. Bruce Schneier discussed squid egg sacs in his weekly forum. CISA and NIST published final cloud identity token security guidance. Attackers hijacked an AI coding assistant…
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
An attacker copied about 170 of CrowdSec’s private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on…
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited…
PowerShell Malware Abuses Registry and DNS TXT Records to Deploy XMRig Crypto Miner
A sophisticated cryptomining campaign is employing multiple layers of obfuscation to conceal malicious PowerShell payloads and ultimately deploy an…
Click2Shell WordPress Flaw Lets Attackers Gain RCE With a Single Malicious Link
WordPress administrators are being urged to update after researchers disclosed Click2Shell, an exploit chain that can turn one malicious link into remote…
Thousands of horses caught up in Europe-wide trafficking scheme
Europol has supported a major operation against a criminal network suspected of trafficking horses across Europe using falsified documents and manipulated…
‘Nudify’ apps: What to do if someone makes a fake nude of you
Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images
BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers
A new attack technique dubbed “BragJack” allows a malicious browser extension to seize trusted communication channels used by AI assistants in Chrome,…
Flock Offers Employees Buyouts as Customers Flee
As dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program, WIRED has learned.
CrowdStrike Accelerates Real-Time Data Classification with On-Device AI
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Accelerates Real-Time Data Classification with On-Device AI
Anthropic insider claims 10% extinction risk, Five Eyes push basics, Microsoft patches backfire
AI Doomerism vs. Cybersecurity Reality: Five Eyes ‘Back to Basics,’ Incident PR, and Microsoft’s Patch/Unpatch Cycle On the month-end weekend episode of…
The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI
Read the full stories at CISOSeries.com . This week’s Department of Know is hosted by Sarah Lane, with guests Jason Thomas , senior director of technology…
Brevo Supply-Chain Attack Infected Over 100,000 Websites
A Brevo supply-chain attack used compromised Cloudflare access to inject malware into websites, potentially affecting over 100,000 sites. Brevo, formerly…
IT Security News Hourly Summary 2026-09-19 00h : 6 posts
6 posts published in the last hour 21:56IT Security News Roundup: 2026-09-18 21:55IT Security News Daily Summary 2026-09-18 21:31Cyber Briefing: 2026.09.16 21:31Friday Squid Blogging: On Squid Egg Sacs 21:01CISA and NIST Issue Guidance to Protect Cloud Identity Tokens 21:00IT Security…
IT Security News Daily Summary 2026-09-18
200 posts published today 21:31Cyber Briefing: 2026.09.16 21:31Friday Squid Blogging: On Squid Egg Sacs 21:01CISA and NIST Issue Guidance to Protect Cloud Identity Tokens 21:00IT Security News Hourly Summary 2026-09-18 23h : 4 posts 20:31Attacker Hijacks AI Coding Assistant Session,…
Cyber Briefing: 2026.09.16
Social engineering, compromised software updates, insider misuse, and AI-assisted fraud continue to create opportunities for unauthorized access, data…
Friday Squid Blogging: On Squid Egg Sacs
Short essay about squid egg sacs. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog…
CISA and NIST Issue Guidance to Protect Cloud Identity Tokens
CISA and NIST issued final guidance to help protect cloud identity tokens and assertions
IT Security News Hourly Summary 2026-09-18 23h : 4 posts
4 posts published in the last hour 20:31Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories 20:31Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root 20:02HBO Max Reddit Account Hacked: 108 Malicious Ads Push…
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across…
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a…
HBO Max Reddit Account Hacked: 108 Malicious Ads Push ClickFix Malware
Attackers reportedly hijacked HBO Max’s verified Reddit account to run 108 malicious ads delivering ClickFix malware to Windows and Mac users.
IT Security News Hourly Summary 2026-09-18 22h : 4 posts
4 posts published in the last hour 19:31Apple Adds New Parental Controls to iPhone, iPad and Mac: Here’s What Changes 19:02Scammers Are Watching Airline Complaints and Posing as Customer Support 19:02Microsoft Issues Out-of-Band Windows Update After September Patch Breaks Remote…
Apple Adds New Parental Controls to iPhone, iPad and Mac: Here’s What Changes
Apple is rolling out new parental controls for iPhone, iPad and Mac, including website approvals, Screen Time changes and expanded safety tools.
Scammers Are Watching Airline Complaints and Posing as Customer Support
Check Point uncovers thousands of fake support accounts, with hundreds more appearing every day A delayed flight. Missing luggage. A refund that never…