A critical server-side vulnerability in Instagram’s infrastructure allowed unauthenticated attackers to access private photos and captions without a login or follower relationship, according to a disclosure released this week by security researcher Jatin Banga. The vulnerability, which was reportedly patched…
Author: IT Security News Bot
New Phishing Attack Leverages Vercel Hosting Platform to Deliver a Remote Access Tool
A sophisticated phishing campaign active between November 2025 and January 2026 has been exploiting Vercel’s legitimate hosting platform to distribute remote access tools to unsuspecting victims. The attack chain combines social engineering with trusted domain exploitation, making it particularly effective…
Microsoft Releases Out-of-Band Update KB5078127 to Fix Windows 11 File System and Outlook Freezes
An out-of-band (OOB) cumulative update, KB5078127, to address critical file system compatibility issues affecting Windows 11 users. The update resolves widespread problems introduced by the January 13, 2026, security update (KB5074109) that caused application freezes and cloud storage failures across…
Apache Hadoop Vulnerability Exposes Systems Potential Crashes or Data Corruption
A moderate-severity vulnerability in the Hadoop Distributed File System (HDFS) native client could allow attackers to trigger system crashes or corrupt critical data through maliciously crafted URI inputs. The vulnerability, tracked as CVE-2025-27821, affects Apache Hadoop versions 3.2.0 through 3.4.1.…
UK digital ID goes in-house, government swears it isn’t an ID card
Minister dodges cost questions while promising smartphone-free access and ‘robust’ verification The UK government has revealed some thinking about digital identity in response to written questions from MPs, while continuing to say next to nothing about the scheme’s cost.… This…
F5 Strengthens, Scales & Sustains AI Security With Integrated Runtime Protection
F5 AI Guardrails and F5 AI Red Team extend platform capabilities with continuous testing, adaptive governance and real-time protection. The post F5 Strengthens, Scales & Sustains AI Security With Integrated Runtime Protection appeared first on Security Boulevard. This article has…
Google ties AI Search to Gmail and Photos, raising new privacy questions
Google is expanding Personal Intelligence into AI Mode in Google Search to deliver more personalized search results. AI Mode can securely connect to your Gmail and Google Photos to provide tailored recommendations without requiring you to repeatedly explain your preferences…
Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers
The North Korean threat actor known as Konni has been observed using PowerShell malware generated using artificial intelligence (AI) tools to target developers and engineering teams in the blockchain sector. The phishing campaign has targeted Japan, Australia, and India, highlighting…
Apple Adds Design To Hardware Chief’s Remit
Apple reportedly adds overall design responsibilities to role of hardware chief John Ternus in latest sign of internal CEO succession planning This article has been indexed from Silicon UK Read the original article: Apple Adds Design To Hardware Chief’s Remit
Russian Sandworm Hackers Blamed for Cyberattack on Polish Power Grid
10 years after disrupting the Ukrainian power grid, the APT targeted Poland with data-wiping malware. The post Russian Sandworm Hackers Blamed for Cyberattack on Polish Power Grid appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
AirDrop Security in iOS 26.2: Time Limits, Codes & Privacy Best Practices
In this episode, we explore the latest changes to AirDrop in iOS 26.2 and how they enhance privacy and security. Learn about the new 10-minute limitation on the ‘Everyone’ setting and the introduction of AirDrop codes for safer file sharing…
Microsoft Entra ID will auto-enable passkey profiles, synced passkeys
Starting March 2026, Microsoft Entra ID will automatically enable passkey profiles and introduce support for synced passkeys. Passkey profiles move into general availability The update brings passkey profiles and synced passkeys into general availability. Administrators gain access to a new…
Blue Origin Plans High-Speed Satellite Data Network
Aerospace company Blue Origin plans to launch 5,408 satellites for high-speed, enterprise-focused data network TeraWave This article has been indexed from Silicon UK Read the original article: Blue Origin Plans High-Speed Satellite Data Network
Chinese Customers Look To Black Market For Nvidia H200
Some Chinese AI customers, facing import blockade of H200, reportedly turn to black market to buy chips at much higher prices This article has been indexed from Silicon UK Read the original article: Chinese Customers Look To Black Market For…
Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid
Russia-linked APT Sandworm launched what was described as the largest cyber attack on Poland’s power grid in Dec 2025. ESET linked a late-2025 cyberattack on Poland’s energy system to the Russia-linked Sandworm APT. “Based on our analysis of the malware and…
A week in security (January 19 – January 25)
A list of topics we covered in the week of January 19 to January 25 of 2026 This article has been indexed from Malwarebytes Read the original article: A week in security (January 19 – January 25)
1Password Adds Pop-Up Alerts For Suspected Phishing Sites
1Password has introduced a new security feature designed to reduce the risk of phishing attacks by warning users before they enter credentials on suspicious websites. The update adds visible pop-up alerts when […] Thank you for being a Ghacks reader.…
Microsoft Patch problems, Sandworm hits Poland, Dresden Museum cyberattack
Microsoft Outlook and boot problems Sandworm likely behind cyberattack on Poland’s power grid Dresden museum network suffers cyberattack Huge thanks to our episode sponsor, Conveyor Ever wish your customers could magically get answers to their own security questionnaires before they…
Attackers Targeting Construction Firms Exploiting Mjobtime App Vulnerability Using MSSQL and IIS POST Request
Attackers are increasingly turning their attention to construction firms by abusing weaknesses in business software that runs on their job sites. One of the newest targets is the Mjobtime construction time-tracking application, which is often deployed on Microsoft IIS with…
48M Gmail, 6.5M Instagram Exposed Online From Unprotected Database
A massive database containing 149 million stolen login credentials was discovered exposed online without password protection or encryption. Posing serious security risks to users of Gmail, Instagram, Facebook, Netflix, and thousands of other platforms worldwide. The publicly accessible database contained…