152 posts were published in the last hour
- 21:34 : Your Origin Server Might Be Your Most Expensive Decision
- 21:34 : Meta: NSO Tried Targeting WhatsApp Users Despite Court Order
- 21:34 : Meta Accuses NSO of Violating WhatsApp Court Injunction
- 21:34 : ICYMI: May 2026 @AWS Security
- 21:4 : CISO role changes as cyber-risk appetites in the C-suite grow
- 21:4 : One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public
- 20:34 : CISO’s guide to data minimization
- 20:34 : Microsoft’s open source tools were hacked to steal passwords of AI developers
- 20:34 : New China-Linked Threat Cluster OP-512 Targets IIS Servers With Cryptographically Unique Web Shell Framework
- 20:4 : CISA Adds Two Known Exploited Vulnerabilities to Catalog
- 19:34 : Check Point VPN 0-day Vulnerability Exploited in the Wild to Deploy Ransomware
- 19:5 : IT Security News Hourly Summary 2026-06-08 21h : 6 posts
- 19:2 : Operation FlutterBridge Uses Fake Google Ads to Spread macOS Backdoor
- 18:32 : CISA Highlights Vital Resources to Help Event Attendees Stay Safe
- 18:32 : AI Policy Meets Operational Reality: White House AI Cybersecurity Order Calls for Public-Private Coordination
- 18:32 : Meta claims NSO Group still targets WhatsApp users despite court order
- 18:5 : Meta Deletes Face-Recognition System From Its Smart Glasses App After WIRED Report
- 18:5 : Meta Rolls Out Paid Plans for Facebook, Instagram, and WhatsApp
- 18:4 : Critical 7-Zip Vulnerability Exposes Millions of Systems to Potential Malware Attacks
- 18:4 : Ad Tracking Puts US Troops at Risk on the Battlefield
- 18:4 : Gogs Zero-Day Vulnerability Raises Alarm Over Server Security
- 18:4 : WhatsApp to Roll Out Username Feature, No Mobile Number Required
- 18:4 : Meta Blocks NSO Group’s New WhatsApp Phishing Attack, Files Contempt Order
- 17:35 : TeamPCP Supply Chain Campaign: Activity Through 2026-06-07, (Mon, Jun 8th)
- 17:35 : Governing Claude Enterprise in Environments Where Inline Controls Can’t Go
- 17:34 : Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open
- 17:34 : Critical Zcash Vulnerability Found and Fixed
- 17:34 : Malspam Attack Uses Google DoubleClick Redirects to Deliver Fileless .NET Loader
- 17:34 : New Pink Hacking Group Attacking Enterprise Users to Steal Cloud Storage Passwords
- 17:34 : New Linux Kernel Vulnerability Lets Attackers Escalate Privileges to Root
- 17:34 : Ransomware crims got a month-long head start on Check Point VPN 0-day that now has a fix
- 17:34 : A Security Raises $37 Million for Autonomous Offensive Security Platform
- 17:5 : Hackers Clone Ghidra, dnSpy and Other Tool Sites to Spread Malware
- 17:5 : AI brands as bait: How threat actors are using the AI hype in social engineering
- 16:34 : Minimus Expands Enterprise Security Platform with General Availability of Advanced Supply Chain Controls
- 16:34 : Microsoft changes how Defender for Endpoint EDR updates are delivered on Windows
- 16:34 : Operationalizing AWS security: A maturity roadmap
- 16:5 : ExpressVPN Is on Sale for $40: A Great Deal for Remote Teams
- 16:5 : Anthropic’s Mythos AI Reportedly Enters NSA Offensive Cyber Planning
- 16:5 : OpenAI Expands ChatGPT Lockdown Mode to Millions of Eligible Users
- 16:5 : WhatsApp says it caught new spyware attacks linked to NSO Group in violation of court order
- 16:5 : Chrome Patches 429 Vulnerabilities Including 22 Critical Ones – Update Now!
- 16:5 : WhatsApp Disrupts NSO-Linked Cyberattack Targeting Users with Pegasus Spyware
- 16:5 : New Lucid Stealer Targets 18 Browsers, Crypto Wallets, and Discord Tokens With Hidden Remote Access
- 16:5 : UNC3753 Attacking US Law Firms Using Vishing and RMM Tools to Exfiltrate Data
- 16:5 : IT Security News Hourly Summary 2026-06-08 18h : 6 posts
- 16:5 : Ransomware sends Illinois high school on an early summer vacation
- 16:4 : Everybody Is Vibe Coding But Nobody Told the Security Team
- 16:4 : Companies aren’t prepared for how AI is accelerating impersonation attacks
- 16:4 : Cyber insurance policyholders facing heavier scrutiny in underwriting, claims
- 15:32 : Executive Q&A: Strong Q1 Momentum Driven by Differentiated Innovation and Customer Demand
- 15:32 : Americans lost nearly $900 million to AI-powered scams, FBI says
- 15:32 : Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
- 15:3 : North Korean Hackers Use Fake Coding Tasks to Steal Crypto
- 14:34 : Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access
- 14:34 : Heimdal® Marks Six Years of Consecutive ISAE 3000 SOC 2 Type II Certification
- 14:34 : Cyber Briefing: 2026.06.08
- 14:4 : Silent Ransom Group Uses Fast Flux Botnet to Hide Law Firm Leak Sites
- 14:4 : GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections
- 14:4 : Vulnerability Summary for the Week of June 1, 2026
- 14:4 : Hackers used Meta’s AI support system to hijack over 20,000 Instagram accounts
- 14:4 : OpenAI Unveils ChatGPT Account Security Controls
- 13:34 : Pink Hacking Group Targets Enterprises to Steal Cloud Passwords
- 13:34 : Massachusetts votes to pass new privacy rights bill that bans sale of precise location data
- 13:34 : WhatsApp Catches Spyware Firm NSO Defying No-Hacking Court Order
- 13:34 : New Relic expands observability into AI-assisted software development
- 13:5 : The Hardest Fork
- 13:5 : AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload
- 13:5 : Cybersecurity M&A Roundup: 26 Deals Announced in May 2026
- 13:5 : AI Security Funding Surge; SentinelOne Layoffs
- 13:5 : IT Security News Hourly Summary 2026-06-08 15h : 10 posts
- 12:35 : Multiple VMware Stored XSS Flaw Enable Attackers to Inject Malicious Scripts
- 12:35 : OWASP Releases AI Security Report to Empower Security Professionals with New Tools
- 12:34 : NSO Group back in Meta’s crosshairs after alleged WhatsApp targeting
- 12:34 : Everest Forms Vulnerability Exploited to Hack WordPress Sites
- 12:34 : Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751)
- 12:34 : Prompt Injection Remains Unsolved Architectural Problem
- 12:34 : VerdantBamboo Deploys BSD BRICKSTORM on Linux
- 12:34 : Meta AI Tool Flaw Exposed 20K+ Instagram Accounts
- 12:34 : Samsung One UI 9 Adds Lockdown Mode to Power Menu
- 12:34 : Open Source Community Unprepared for EU CRA Deadline
- 12:3 : Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse
- 12:3 : Google Fixes 429 Chrome Vulnerabilities, Including 22 Critical Bugs
- 12:2 : RidgeBot 7.0 automates Active Directory attack simulations for security validation
- 11:34 : OWASP Unveils AI Security Report Highlighting New Tools for Security Teams
- 11:34 : UNC3753 Escalates: From Vishing Calls to Physical Office Intrusions at US Legal and Financial Firms
- 11:34 : Anthropic’s Project Glasswing Update
- 11:34 : Pirated PC games are delivering password-stealing malware
- 11:34 : 174,000 Impacted by Lansing Community College Data Breach
- 11:34 : ConnectSecure’s Patch 360 gives MSPs control over patch testing and deployment
- 11:5 : Internet Explorer WebBrowser Control Abuse Lets Attackers Convert Clicks Into RCE
- 11:5 : Security Advisory – Action Required – Active Exploitation of Check Point VPN Authentication Bypass (CVE-2026-50751)
- 11:5 : Internet Explorer WebBrowser Control Attack Chain Turns Clicks Into RCE
- 11:5 : Silent Ransom Group Uses DNS Fast Flux in Attacks
- 11:5 : VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances
- 10:34 : Instagram Glitch Reportedly Exposed Contact Info of Zuckerberg and Other Users
- 10:34 : China-Linked OP-512 Targets IIS Servers With Unique Web Shell Framework
- 10:34 : Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts
- 10:34 : CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)
- 10:34 : Infosecurity Europe: Prompt Injection Remains Unsolved, OWASP Researcher Warns
- 10:5 : IT Security News Hourly Summary 2026-06-08 12h : 6 posts
- 10:4 : Lucid Stealer Hits 18 Browsers, Crypto Wallets, and Discord Tokens
- 10:4 : Critical Redis RCE Vulnerability Enable Attackers to Gain Complete Control to Host Server
- 10:4 : UniFi OS Server Critical RCE Chain Allows Root Access Without Credentials
- 10:4 : Multiple VMware Stored XSS Vulnerabilities Allow Attackers to Inject Malicious Scripts
- 9:34 : Samsung just made Galaxy phones more secure in One UI 9 beta
- 9:34 : The new risk equation: Why endpoint security is a financial imperative
- 9:4 : Thailand Sues Meta Over Facebook Scams
- 9:4 : Data Is a Liability Now, Not Just an Asset
- 9:4 : OpenAI Rolling Out ChatGPT Account Security Controls
- 9:4 : Two-Thirds of Open Source Community Unaware of Cyber Resilience Act
- 8:32 : Instagram Patches Account Recovery Flaw Leaking User Contact Information
- 8:32 : Critical Redis Vulnerability Could Let Attackers Execute Code and Hijack Servers
- 8:32 : Cybercriminals Exploit 2026 FIFA World Cup With Phishing, Fake Stores, and Ticket Scams
- 8:32 : OpenAI is locking down parts of ChatGPT to reduce data theft risks
- 8:32 : UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
- 8:32 : Meta AI Bug Exposes Over 20,000 Instagram Accounts
- 8:32 : Infosecurity Europe: How DSIT Protects Thousands of UK Orgs from Cyber Vulnerabilities
- 8:5 : Six social media features UK police want banned for under-16s
- 8:5 : Unitree Humanoid Robots Perform On US Television
- 8:4 : Tencent To Open WeChat To Outside AI Agents
- 8:4 : Massive Utah Data Centre Halved After Outcry
- 8:4 : SolarWinds Serv-U Vulnerability Exploited in the Wild
- 7:35 : IoT Botnet C0XMO Adds Competitor-Killing Capability
- 7:34 : A week in security (June 1 – June 7)
- 7:34 : VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
- 7:34 : CISA Palantir Director, EU tech sovereignty, SolarWinds Serv-U flaw
- 7:5 : IT Security News Hourly Summary 2026-06-08 09h : 4 posts
- 7:4 : Critical UniFi OS RCE Chain Grants Root Access Without Credentials
- 7:4 : Meta Says 20,000 Instagram Accounts Hacked via AI Tool Abuse
- 6:34 : All the Ways Europe Is Ditching American Technology
- 6:34 : Microsoft Warns Claude Code GitHub Action Could Leak CI/CD Workflow Secrets
- 6:3 : Hackers Exploit Claude Code MCP Traffic to Hijack OAuth Authentication Tokens
- 6:3 : Microsoft Warns Claude Code GitHub Action May Expose CI/CD Secrets
- 6:3 : EDRChoker Tool Abuses Windows QoS Policies to Disrupt Endpoint Security Tools
- 6:3 : When attacks spread too far: Lessons from real cyber attack case studies
- 6:3 : DockSec: Open-source AI-powered Docker security scanner
- 5:32 : Hackers Exploit 2026 FIFA World Cup With Phishing and Ticket Scams
- 5:32 : Free Samsung and LG Smart TV Apps Reportedly Exploit Devices for AI Proxy Traffic
- 5:32 : Google Colab CLI opens runtimes to Claude Code and Codex
- 5:4 : New ChatGPT Lockdown Mode Aims to Block Prompt Injection and Data Exfiltration Attacks
- 5:4 : Cybercriminals create 19,000 FIFA-themed domains ahead of 2026 World Cup
- 4:34 : 52% of direct-to-IP threats are missing from intelligence feeds
- 4:34 : GitHub Copilot app launches as desktop home for AI coding agents
- 4:34 : Claude Outage Data Leak, Microsoft GitHub Worm, IBM Hack, M Instagram Takeovers, Canada’s Bill C-8
- 4:5 : IT Security News Hourly Summary 2026-06-08 06h : 1 posts
- 3:34 : Signal and Other Firms Oppose Canada’s Proposed Surveillance Law
- 3:4 : Hackers Can Hijack Claude Code MCP Traffic to Steal OAuth Tokens
- 2:2 : ISC Stormcast For Monday, June 8th, 2026 https://isc.sans.edu/podcastdetail/9962, (Mon, Jun 8th)
- 22:5 : IT Security News Hourly Summary 2026-06-08 00h : 2 posts
- 21:58 : IT Security News Weekly Summary 23
- 21:55 : IT Security News Daily Summary 2026-06-07