210 posts were published in the last hour
- 22:55 : IT Security News Daily Summary 2025-10-12
- 18:3 : New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login
- 17:5 : IT Security News Hourly Summary 2025-10-12 18h : 3 posts
- 16:32 : NDSS 2025 – Keynote 2: Towards Resilient Systems In An Increasingly Hostile World
- 16:32 : Microsoft to end support for Windows 10, 400 million PCs will be impacted
- 16:2 : Threat Actors Exploit Discord Webhooks for C2 via npm, PyPI, and Ruby Packages
- 15:32 : Clop Ransomware group claims the hack of Harvard University
- 15:32 : Is CMMC 3.0 on the Horizon? How Defense Contractors Can Prepare Now
- 15:2 : Zimbra Zero-Day Exploit Used in ICS File Attacks to Steal Sensitive Data
- 14:5 : IT Security News Hourly Summary 2025-10-12 15h : 1 posts
- 14:2 : Cybersecurity Newsletter Weekly – Discord, Red Hat Data Breach, 7-Zip Vulnerabilities and Sonicwall Firewall Hack
- 13:32 : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 66
- 13:32 : Security Affairs newsletter Round 545 by Pierluigi Paganini – INTERNATIONAL EDITION
- 13:32 : Ransomware Gang Claims Boeing, Samsung Supplier Breach in 11GB Data Theft
- 13:32 : Thousands of Government IDs at Risk Following Breach Involving Discord’s Verification Partner
- 13:3 : In Defense of Good Bots: Good Bots Exist, But Only When We Build Them That Way
- 11:32 : Revisiting CISA Priorities for FY2026 and Beyond
- 11:5 : IT Security News Hourly Summary 2025-10-12 12h : 2 posts
- 10:2 : Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884)
- 9:32 : Quantum simulations that once needed supercomputers now run on laptops
- 8:32 : Week in review: Hackers extorting Salesforce, CentreStack 0-day exploited
- 8:5 : IT Security News Hourly Summary 2025-10-12 09h : 1 posts
- 8:2 : Wireshark 4.4.10 and 4.6.0 Released, (Sun, Oct 12th)
- 6:32 : Is Your Spend on Cloud Security Justified?
- 5:2 : VirusTotal Simplifies User Options With Platform Access and New Contributor Model
- 23:5 : IT Security News Hourly Summary 2025-10-12 00h : 2 posts
- 22:55 : IT Security News Daily Summary 2025-10-11
- 21:32 : CVE-2025-11371: Unpatched zero-day in Gladinet CentreStack, Triofox under attack
- 20:5 : IT Security News Hourly Summary 2025-10-11 21h : 3 posts
- 19:32 : Cybercrime ring GXC Team dismantled in Spain, 25-year-old leader detained
- 19:3 : Identity Risk Intelligence – The Missing Piece in Continuous Threat Exposure Management (CTEM)
- 18:32 : Hackers Can Inject Malicious Code into Antivirus Processes to Create a Backdoor
- 18:32 : Zero-click Exploit AI Flaws to Hack Systems
- 17:32 : Microsoft Defender Vulnerabilities Allow Attackers to Bypass Authentication and Upload Malicious Files
- 17:32 : Rise of Evil LLMs: How AI-Driven Cybercrime Is Lowering Barriers for Global Hackers
- 17:32 : Payroll Hackers Target U.S. Universities, Microsoft Warns
- 17:32 : How Reporting Spam Calls and Texts Helps Stop Scammers for Everyone
- 17:32 : Google Launches Gemini AI Across Home and Nest Devices
- 17:5 : IT Security News Hourly Summary 2025-10-11 18h : 2 posts
- 16:32 : Attackers exploit valid logins in SonicWall SSL VPN compromise
- 16:2 : NDSS 2025 – Keynote 1: Quantum Security Unleashed: A New Era for Secure Communications and Systems
- 16:2 : Unauthorized Use of AI Tools by Employees Exposes Sensitive Corporate Data
- 15:2 : Is a CIAM Certification Beneficial?
- 15:2 : Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts
- 13:31 : Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks
- 12:2 : Microsoft Fixes Long-standing Windows 11 ‘Update and Shut down’ Bug
- 11:5 : IT Security News Hourly Summary 2025-10-11 12h : 1 posts
- 11:2 : ‘Happy Gilmore’ Producer Buys Spyware Maker NSO Group
- 10:32 : New Stealit Malware Exploits Node.js Extensions to Target Windows Systems
- 10:32 : Hackers Attacking Remote Desktop Protocol Services from 100,000+ IP Addresses
- 10:32 : 5 Immediate Steps to be Followed After Clicking on a Malicious Link
- 10:2 : Vietnam Airlines – 7,316,915 breached accounts
- 8:32 : Bridewell encourages elevating “untapped talent” this Cybersecurity Awareness Month
- 8:32 : New Kali Tool llm-tools-nmap Uses Nmap For Network Scanning Capabilities
- 5:34 : The Role and Evolution of Virtual CISOs with Craig Taylor
- 5:5 : IT Security News Hourly Summary 2025-10-11 06h : 2 posts
- 4:2 : Oura Users Express Concern Over Pentagon Partnership Amid Privacy Debates
- 4:2 : Agentic AI Demands Stronger Digital Trust Systems
- 2:5 : IT Security News Hourly Summary 2025-10-11 03h : 1 posts
- 0:32 : Apple doubles maximum bug bounty to $2M for zero-click RCEs
- 23:31 : Week in Review: Crowdsourced ransomware campaign, Windows 10 woes, California opts out
- 23:5 : IT Security News Hourly Summary 2025-10-11 00h : 4 posts
- 23:2 : News alert: SquareX exposes how AI browsers fall prey to OAuth hijacks and malware traps
- 22:55 : IT Security News Daily Summary 2025-10-10
- 22:32 : Independent Verification of NHI Security: Necessary?
- 22:31 : How Safe Are Your Non-Human Identities Really?
- 22:2 : FBI Seizes BreachForums Portal Used in Salesforce Extortion Campaign
- 21:32 : The Golden Scale: Bling Libra and the Evolving Extortion Economy
- 21:32 : Critical WordPress Plugin Vulnerability Allows Admin Account Takeover
- 21:2 : CamoLeak: GitHub Copilot Flaw Allowed Silent Data Theft
- 21:2 : 175 npm Packages Abused in Beamglea Phishing Operation
- 20:2 : News brief: AI’s cybersecurity risks weigh on business leaders
- 20:2 : USENIX 2025: PEPR ’25 – Using GenAI to Accelerate Privacy Implementations
- 20:2 : Randall Munroe’s XKCD ‘’Piercing”
- 20:2 : USENIX 2025: From Existential To Existing Risks Of Generative AI: A Taxonomy Of Who Is At Risk, What Risks Are Prevalent, And How They Arise
- 17:32 : AI Pulse: OpenAI’s Wild Bot Behavior After GPT-5
- 17:5 : IT Security News Hourly Summary 2025-10-10 18h : 7 posts
- 17:2 : Red Hat Hit by Data Breach, Hackers Exploit GitLab Instance
- 16:32 : Auth Bypass Flaw in Service Finder WordPress Plugin Under Active Exploit
- 16:32 : DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
- 16:32 : Homeland Security reassigns ‘hundreds’ of CISA cyber staffers to support Trump’s deportation crackdown
- 16:32 : Threat Actors Exploiting SonicWall SSL VPN Devices in Wild to Deploy Akira Ransomware
- 16:32 : New Chaosbot Leveraging CiscoVPN and Active Directory Passwords to Execute Network Commands
- 16:2 : Spyware maker NSO Group confirms acquisition by US investors
- 15:32 : Your passwords don’t need so many fiddly characters, NIST says
- 15:32 : Apple voices concerns over age-check law that could put user privacy at risk
- 15:32 : What is CAA? Understanding Certificate Authority Authorization
- 15:32 : The Psychology of Security: Why Users Resist Better Authentication
- 15:32 : Telstra Denies Scattered Spider Data Breach Claims Amid Ransom Threats
- 15:32 : SonicWall investigation shows hackers gained wide access to customer backup files
- 15:2 : Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries
- 15:2 : Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers
- 15:2 : Oracle E-Business Suite exploitation traced back as early as July
- 14:32 : Stealit Malware Using Node.js to Hide in Fake Game and VPN Installers
- 14:32 : Your browser is an AI-enabled OS, so secure it like one
- 14:32 : Ukraine sees surge in AI-Powered cyberattacks by Russia-linked Threat Actors
- 14:32 : Juniper patched nine critical flaws in Junos Space
- 14:32 : Pro-Russia hacktivist group dies of cringe after falling into researchers’ trap
- 14:32 : In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware
- 14:5 : IT Security News Hourly Summary 2025-10-10 15h : 12 posts
- 14:3 : Microsoft Defender Incorrectly Flags SQL Server Software as End-of-life
- 14:3 : RondoDox Botnet Exploits 50+ Vulnerabilities to Attack Routers, CCTV Systems and Web Servers
- 14:3 : Illumio Report Warns: Lateral Movement, Not Breach Entry, Causes the Real Cybersecurity Damage
- 14:3 : Accenture helps organizations advance agentic AI with Gemini Enterprise
- 14:3 : OpenVPN redefines secure connectivity with Access Server 3.0
- 13:32 : Nanoprecise partners with AccuKnox to strengthen its Zero Trust Cloud Security and Compliance Posture
- 13:32 : How Important are Accessible Website Designs in 2025?
- 13:32 : New Stealit Campaign Abuses Node.js Single Executable Application
- 13:32 : Microsoft warns of ‘payroll pirate’ crew looting US university salaries
- 13:32 : OpenAI’s Sora App Raises Facial Data Privacy Concerns
- 13:32 : Apple offers $2 million for zero-click exploit chains
- 13:32 : comforte AG debuts TAMUNIO, its all-in-one shield for data security
- 13:32 : Proof launches Certify, the cryptographic answer to AI-generated fraud
- 13:2 : How Chief Technology Officers Can Stay Ahead of Complex Threat Actor Tactics
- 13:2 : Chaosbot Using CiscoVPN and Active Directory Passwords for Network Commands
- 13:2 : Cisco, Fortinet, Palo Alto Networks Devices Targeted in Coordinated Campaign
- 12:32 : SonicWall SSL VPN Devices Targeted by Threat Actors to Distribute Akira Ransomware
- 12:32 : Securing HTTPS From the Inside Out: Preventing Client-Side Interception Attacks
- 12:32 : RondoDox Botnet Takes ‘Exploit Shotgun’ Approach
- 12:32 : From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation
- 12:32 : North Korean Hackers Steal Crypto
- 12:32 : Crimson Collective Hits AWS Instances
- 12:32 : GitHub Copilot Chat Flaw Leaks Repo Data
- 12:32 : DragonForce LockBit Qilin Dominate Ransomware
- 12:32 : Google Launches New AI Bug Bounty
- 12:2 : 175 Malicious npm Packages Targeting Tech and Energy Firms, 26,000 Downloads
- 12:2 : Critical GitHub Copilot Vulnerability Let Attackers Exfiltrate Source Code From Private Repos
- 12:2 : Millions of (very) private chats exposed by two AI companion apps
- 11:32 : Autonomous AI Hacking and the Future of Cybersecurity
- 11:32 : Multimodal AI, A Whole New Social Engineering Playground for Hackers
- 11:32 : 175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign
- 11:32 : The AI SOC Stack of 2026: What Sets Top-Tier Platforms Apart?
- 11:32 : Google Launches AI Bug Bounty with $30,000 Top Reward
- 11:5 : IT Security News Hourly Summary 2025-10-10 12h : 14 posts
- 11:2 : AI Tools Make Phishing Attacks Harder to Detect, Survey Warns
- 10:32 : LLM-Powered MalTerminal Malware Uses OpenAI GPT-4 to Create Ransomware Code
- 10:32 : Cops nuke BreachForums (again) amid cybercrime supergroup extortion blitz
- 10:32 : Juniper Networks Patches Critical Junos Space Vulnerabilities
- 10:32 : Red Pilling of Politics – Court Strikes Down California Law on Political Deepfakes
- 10:32 : Attackers are exploiting Gladinet CentreStack, Triofox vulnerability with no patch (CVE-2025-11371)
- 10:32 : Google: Clop Accessed “Significant Amount” of Data in Oracle EBS Exploit
- 10:2 : Ferrari Shows Tech Behind Upcoming Electric Supercar
- 10:2 : GitHub Copilot Flaw Allows Attackers to Steal Source Code from Private Repositories
- 10:2 : UK techies’ union warns members after breach exposes sensitive personal details
- 10:2 : ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities
- 10:2 : From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox Vulnerability
- 9:32 : Rishi Sunak Joins Anthropic, Microsoft As Paid Advisor
- 9:32 : Apple Announces $2 Million Bug Bounty Reward for the Most Dangerous Exploits
- 9:32 : U.S. CISA adds Grafana flaw to its Known Exploited Vulnerabilities catalog
- 9:32 : Gladinet CentreStack And Triofox 0-Day RCE Vulnerability Actively Exploited In Attacks
- 9:32 : Microsoft Warns of Hackers Compromising Employee Accounts to Steal Salary Payments
- 9:32 : SnakeKeylogger via Weaponized E-mails Leverage PowerShell to Exfiltrate Sensitive Data
- 9:32 : LLM-enabled MalTerminal Malware Leverages GPT-4 to Generate Ransomware Code
- 9:32 : New Android Malware ClayRat Mimic as WhatsApp, Google Photos to Attack Users
- 9:32 : Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to Date
- 9:3 : OpenAI Tells EU Regulators Of Antitrust Concerns
- 9:3 : RondoDox Botnet Targets Over 50 Vulnerabilities to Compromise Routers, CCTV Systems, and Web Servers
- 9:2 : North Korean Scammers Are Doing Architectural Design Now
- 9:2 : Shadow AI: Agentic Access and the New Frontier of Data Risk
- 8:32 : How Parents Can Train Their Children to Use AI Responsibly
- 8:32 : Hack On Oracle Suite Steals Data From Dozens Of Companies
- 8:32 : Gladinet CentreStack and Triofox 0-Day Flaw Under Active Attack
- 8:32 : ClayRat Android Malware Masquerades as WhatsApp & Google Photos
- 8:32 : RondoDox Botnet targets 56 flaws across 30+ device types worldwide
- 8:32 : Pro-Russia Hacktivists “Claim” Attack on Water Utility Honeypot
- 8:5 : IT Security News Hourly Summary 2025-10-10 09h : 7 posts
- 8:2 : BYD Opens Brazil EV Factory Amidst Controversy
- 8:2 : Google Warns of CL0P Ransomware Group Actively Exploiting Oracle E-Business Suite Zero-Day
- 8:2 : Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks
- 7:32 : US Regulator Probes Tesla Over ‘Full Self-Driving’ Safety Violations
- 7:32 : Snake Keylogger Uses Weaponized Emails and PowerShell to Steal Sensitive Data
- 7:32 : CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software Flaw
- 7:32 : Microsoft Azure outage, law firm cyberattack, Russian hacktivists pwned
- 7:4 : Hackers Steal 70,000 Official ID Photos From Discord
- 7:4 : Hackers Exploit Microsoft Employee Accounts in Salary Theft Scheme
- 7:4 : Authorities Dismantle BreachForums’ Reemerged Clearnet Marketplace
- 7:4 : 7-Zip Vulnerabilities Let Attackers Execute Arbitrary Code Remotely
- 7:4 : Authorities Seize BreachForums New Clearnet Cybercrime Marketplace Domain
- 7:4 : October 2025 Patch Tuesday forecast: The end of a decade with Microsoft
- 6:32 : From theory to training: Lessons in making NICE usable
- 6:3 : Google Issues Alert on CL0P Ransomware Actively Exploiting Oracle E-Business Suite Zero-Day
- 6:3 : Credit Card Payment Terminal Exploited for Remote Access
- 6:3 : Securing agentic AI with intent-based permissions
- 5:32 : KFC Venezuela Suffers Alleged Data Breach Exposing 1 Million Customer Records
- 5:32 : How to Prepare for a Cloud Security Audit in Multi-Cloud and Hybrid Networks
- 5:32 : Nagios: Open-source monitoring solution
- 5:32 : Teenage Ransomware Arrest In Day Care Ransom
- 5:2 : 7-Zip Vulnerabilities Allowing Remote Code Execution
- 5:2 : Your SOC is tired, AI isn’t
- 4:32 : 7-Zip Vulnerabilities Allows Remote Attackers to Execute Arbitrary Code
- 4:31 : New infosec products of the week: October 10, 2025
- 2:5 : IT Security News Hourly Summary 2025-10-10 03h : 1 posts
- 1:32 : How to Build a Proactive Cybersecurity Monitoring Program for Modern Threats
- 1:2 : ISC Stormcast For Friday, October 10th, 2025 https://isc.sans.edu/podcastdetail/9650, (Fri, Oct 10th)
- 23:5 : IT Security News Hourly Summary 2025-10-10 00h : 5 posts
- 23:3 : Kasada Wins “e-Commerce Security Solution of the Year” in 2025 CyberSecurity Breakthrough Awards
- 22:55 : IT Security News Daily Summary 2025-10-09
- 22:32 : When AI Remembers Too Much – Persistent Behaviors in Agents’ Memory
- 22:2 : How CISOs can get out of security debt and why it matters
- 22:2 : AI Chatbots Exploited as Covert Gateways to Enterprise Systems
- 22:2 : Discord data breach affects at least 70,000 users
- 21:32 : 77% of Employees Share Company Secrets on ChatGPT, Report Warns
- 21:3 : SonicWall Says All Firewall Backups Were Accessed by Hackers
- 21:3 : Threat Actors Mimic as HR Departments to Steal Your Gmail Login Credentials
- 21:2 : Hackers Actively Exploiting WordPress Plugin Vulnerability to Gain Admin Access
- 21:2 : New Quishing Attack With Weaponized QR Code Targeting Microsoft Users
- 21:2 : Data Loss, Monetary Damage, and Reputational Harm: How Unsanctioned AI Hurts Companies and 6 Mitigation Strategies
- 21:2 : Cybersecurity Is Now a Regulatory Minefield: What CISOs Must Know in 2025
- 21:2 : It’s trivially easy to poison LLMs into spitting out gibberish, says Anthropic
- 20:32 : ClayRat campaign uses Telegram and phishing sites to distribute Android spyware