Cybersecurity researchers have uncovered two local privilege escalation (LPE) flaws that could be exploited to gain root privileges on machines running major Linux distributions. The vulnerabilities, discovered by Qualys, are listed below – CVE-2025-6018 – LPE from unprivileged to allow_active…
Author: wordpress
News alert: Halo Security’s attack surface management platform wins MSP Today’s top award
Miami, June 18, 2025, CyberNewswire — Halo Security today announced that its attack surface management solution has been named a 2025 MSP Today Product of the Year Award winner by TMC, a leading global media company recognized for building communities…
Understanding IAM vs CIAM: A Comprehensive Guide to Identity Management Systems
The distinction between IAM and CIAM reflects the fundamental differences between managing internal organizational resources and serving external customers in the digital age. While both share common identity management principles, their implementation approaches, user experience requirements, and architectural considerations differ…
Strategies for Resisting Tech-Enabled Violence Facing Transgender People
< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> Today’s Supreme Court’s ruling in U.S. v. Skrmetti upholding bans on gender-affirming care for youth makes it clear: trans people are under attack. Threats to trans rights and healthcare are coming…
IT Security News Hourly Summary 2025-06-19 00h : 5 posts
5 posts were published in the last hour 22:55 : IT Security News Daily Summary 2025-06-18 22:2 : Mitigating AI’s unique risks with AI monitoring 22:2 : Apple to Australians: You’re Too Stupid to Choose Your Own Apps 21:32 :…
IT Security News Daily Summary 2025-06-18
210 posts were published in the last hour 21:32 : Healthcare services company Episource data breach impacts 5.4 Million people 21:32 : Minecraft cheaters never win … but they may get malware 21:4 : 100,000 WordPress Sites Affected by Privilege…
Mitigating AI’s unique risks with AI monitoring
Coralogix CEO highlights the difference between AI and software monitoring, as illustrated by his company’s acquisition and product expansion this year. This article has been indexed from Search Security Resources and Information from TechTarget Read the original article: Mitigating AI’s…
Apple to Australians: You’re Too Stupid to Choose Your Own Apps
< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> < div class=”field__item even”> Apple has released a scaremongering, self-serving warning aimed at the Australian government, claiming that Australians will be overrun by a parade of digital horribles if Australia follows…
Healthcare services company Episource data breach impacts 5.4 Million people
Data breach at Healthcare services company Episource exposes personal and health data of over 5.4 million people in major cyberattack. A cyberattack on healthcare firm Episource led to a data breach exposing personal and health data of over 5.4 million…
Minecraft cheaters never win … but they may get malware
Infostealers posing as popular cheat tools are cropping up on GitHub Trojanized Minecraft cheat tools hosted on GitHub have secretly installed stealers that siphon credentials, crypto wallets, and other sensitive data when executed by players.… This article has been indexed…
100,000 WordPress Sites Affected by Privilege Escalation via MCP in AI Engine WordPress Plugin
On May 21st, 2025, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Insufficient Authorization to Privilege Escalation via MCP (Model Context Protocol) vulnerability in the AI Engine plugin, which is actively installed on more…
OpenAI Signs $200M Defense Department Deal, Then Calms Fears About Weaponized AI
OpenAI for Government will consolidate ChatGPT Gov and other exciting resources. The US Department of Defence plans to use it to enhance admin work and cybersecurity. The post OpenAI Signs $200M Defense Department Deal, Then Calms Fears About Weaponized AI…
Cyber Risk Management Strategy: How to Plan
Online threats are everywhere, and no organization is safe from them. Whether it’s stolen data, ransomware, or phishing, attacks are becoming more frequent and severe. That’s why having a clear… The post Cyber Risk Management Strategy: How to Plan appeared…
IT Security News Hourly Summary 2025-06-18 21h : 7 posts
7 posts were published in the last hour 18:32 : Iran’s Internet Blackout Adds New Dangers for Civilians Amid Israeli Bombings 18:32 : Collaborating with the World Economic Forum to Advance Systemic Defense Solutions to Protect Our Digital Ecosystem 18:8…
GodFather Android Malware Runs Real Apps in a Sandbox to Steal Data
Zimperium zLabs reveals GodFather malware’s advanced virtualization that hijacks mobile banking and crypto apps. Learn how it steals data on your phone. This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the…
Asana’s cutting-edge AI feature ran into a little data leakage problem
New MCP server was shut down for nearly two weeks Asana has fixed a bug in its Model Context Protocol (MCP) server that could have allowed users to view other organizations’ data, and the experimental feature is back up and…
How to Master a DevSecOps Pipeline that Devs and AppSec Love
When you became a developer, you didn’t imagine you’d be spending a big chunk of your time parsing vulnerability reports, getting stuck in security review cycles, or rerunning CI jobs because the pipeline flagged a dozen “critical issues,” half of…
Iran Reduces Internet Access After Israeli Airstrikes, Cyberattacks
The Iranian government has sharply restricted internet access in the country following almost a week of Israeli airstrikes and a cyberattacks on an Iranian bank and cryptocurrency exchange by a pro-Israeli hacker group called Predatory Sparrow. The post Iran Reduces…
AI Revolutionizes PLA Military Intelligence with Rapid Deployment Across Operations
The People’s Liberation Army (PLA) of China has adopted generative artificial intelligence (AI) to revolutionize its intelligence capabilities, marking a major step in modernizing military operations. According to recent analyses, the PLA has shown a clear intent to integrate generative…
Chollima Hackers Target Windows and MacOS with New GolangGhost RAT Malware
A North Korean-affiliated threat actor called Famous Chollima (also known as Wagemole) has launched a sophisticated remote access trojan (RAT) campaign against Windows and MacOS devices, a concerning development discovered by Cisco Talos in May 2025. This group, suspected to…