IT Security News Daily Summary 2026-07-09

162 posts were published in the last hour

• 21:7 : Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs
• 21:7 : China Warns of Claude Code ‘Backdoor’ Security Risk
• 21:7 : Common MFA mistakes — and how to fix them
• 21:7 : RedHook Android RAT Abuses ADB Wireless Debugging to Gain Shell-Level Access
• 21:6 : ACSC Warns of Large-Scale CMS Exploitation Campaign Deploys Webshells on Vulnerable Websites
• 21:6 : GodDamn Ransomware Rebrands From Beast and Uses PoisonX Driver to Disable Defenses
• 20:31 : Why Embedded Device Security Requires a Lifecycle Approach
• 19:9 : WolfSSL, GeoVision, VTK vulnerabilities
• 19:9 : GodDamn Ransomware Uses PoisonX to Blind Security Software
• 19:9 : New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
• 19:8 : Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
• 19:5 : IT Security News Hourly Summary 2026-07-09 21h : 5 posts
• 18:35 : HP Linux Printing Software Vulnerability Allows Remote Attackers to Execute Arbitrary Code
• 18:34 : Hackers Abuse Microsoft Entra Passkey Enrollment to Hijack Enterprise Accounts
• 18:34 : RoundCube 0-Click Vulnerability Enables Stored XSS Attack via MIME Type Attachment
• 18:34 : A Hacker Used AI to Compromise an AWS Cloud Environment in Just 72 Hours
• 18:34 : Microsoft Adopts AI-Powered Scanning to Find Vulnerabilities Before Attackers
• 18:4 : Winning 54% of the time
• 18:4 : AssuranceAmerica Data Breach Exposes Nearly 7 Million Drivers
• 17:34 : AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining
• 17:34 : ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
• 17:34 : npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
• 17:9 : Mount Royal University says hackers stole and deleted files following June cyberattack
• 16:35 : DuckDuckGo Now Blocks Most Video Ads on Windows, Mac, iPhone
• 16:35 : UK Cyber Resilience Pledge Sets 90-Day Test for Security Leaders
• 16:35 : Discord Bug Wrongly Banned 8,000 Users Over Harmless Images
• 16:34 : AssuranceAmerica Data Breach: 6.9M Driver’s License Numbers Exposed
• 16:34 : Google’s $3 ChromeOS Flex USB Kit: What to Know Before Installing
• 16:34 : Fake Paysafe and Skrill SDKs on npm and PyPI Steal Developer Credentials
• 16:34 : AI Agent Executes End-to-End Ransomware Attack Without Human Intervention, Researchers Say
• 16:7 : Wordfence Intelligence Weekly WordPress Vulnerability Report (June 29, 2026 to July 5, 2026)
• 16:6 : A Majority of European Lawmakers Voted Against Letting Big Tech Read Our Messages. They’re Going to Anyway
• 16:6 : 6.9 million driver’s license numbers stolen from AssuranceAmerica
• 16:5 : How World Cup crypto prediction sites take your money
• 16:5 : EU ‘Chat Control’ snoopfest returns after vote to kill it falls short
• 16:5 : IT Security News Hourly Summary 2026-07-09 18h : 5 posts
• 16:5 : GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
• 16:4 : Data breach hits car insurance provider
• 15:34 : QIZ Security Raises $17 Million for Cryptographic Governance Platform
• 15:33 : Ransomware ecosystem grows, but ‘four-headed monster’ dominates
• 15:9 : Windows Update Silently Installs LG Monitor App That Pushes McAfee Ads
• 14:34 : Driving Real-World Impact: Inside Akamai’s 2025 Sustainability Report
• 14:34 : UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge
• 14:33 : Rogue Agent Bug Could Have Let Attackers Hack AI Conversations
• 14:32 : Extortion crew hijacks Microsoft 365 accounts via fake passkey setup
• 14:31 : Cyber Briefing: 2026.07.09
• 14:7 : A Majority of European Lawmakers Voted Against Letting Big Tech Read Our Messages. They’re Going to Anyway.
• 14:7 : AssuranceAmerica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack
• 14:6 : UNC6692 Hackers Uses Microsoft Teams Helpdesk Impersonation to Deploy SNOW Malware
• 14:6 : Palo Alto Networks Patches 13 Vulnerabilities
• 14:5 : Vectogate debuts platform to secure and govern autonomous AI agents
• 14:5 : Citrix launches MCP Gateway to secure enterprise AI agents
• 14:5 : Vibe-Coded Malware Caught in Active Directory Attack
• 14:4 : ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance
• 13:35 : GodDamn Ransomware Attack Uses PsExec Lateral Movement and NirSoft Toolkit for Credential Theft
• 13:35 : AI Security Agents Turns Hidden Remote Code Execution – Research
• 13:35 : A New Ransomware Leader Emerges as June 2026 Attack Volumes Climb Worldwide
• 13:35 : How to operationalize threat modeling with AI
• 13:34 : 20 Remote Code Execution Vulnerabilities Patched in Foxit PDF Reader and Editor
• 13:34 : AssuranceAmerica Data Breach Exposed 6.9 Million People’s License Numbers and Personal Data
• 13:34 : Operationalizing Threat Intelligence: Bridging the Gap Between Feed Data and SOC Action
• 13:34 : Everest Ransomware Claims 1 TB Data Theft But Encryptor Shows No Exfiltration Code
• 13:34 : Microsoft closes book on Nightmare Eclipse’s RoguePlanet zero-day
• 13:13 : One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement
• 13:12 : AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up
• 13:12 : Vidar Stealer and XMRig Miner Campaign
• 13:12 : OnlyFans DMCA complaints take down hacked government sites
• 13:11 : Microsoft Cloud Rebuild enables PC recovery without local Wi
• 13:11 : EU Chat Control Rules Extended to 2028
• 13:11 : 20 Open-Source Cybersecurity Tools Roundup
• 13:5 : IT Security News Hourly Summary 2026-07-09 15h : 11 posts
• 12:35 : 12 Million Impacted by Data Breach at Japanese Telco KDDI
• 12:35 : Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)
• 12:13 : GhostApproval Flaws Let Top AI Coding Tools Write Outside Workspaces
• 12:12 : HP Linux Imaging and Printing Software Flaw Enables Privilege Escalation Attacks
• 12:11 : Attackers Exploit WordPress Plugin Vulnerabilities for Remote Code Execution and Webshell Access
• 12:10 : Microsoft fixes RoguePlanet zero-day in Defender
• 12:10 : 15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google
• 12:9 : GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
• 12:8 : Summer of Clearinghouses
• 12:8 : Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests
• 12:7 : 75% CISOs Fear Executives Don’t Understand Cybersecurity Risks Employees Face
• 11:41 : AssuranceAmerica Confirms Massive Data Breach Exposing Driver’s License and Insurance Data
• 11:38 : GitHub Copilot Refuses Harmful Chat Prompts But Writes Them Inside Code Workflows
• 11:36 : QR Codes Are the New Security Blindspots That Steal Your Card Details and Deliver Malware
• 11:36 : Meta’s Muse AI Tool Lets Users Create Images Using Public Instagram Photos
• 11:35 : New HalluSquatting Attack Allows Hackers to Poison AI Coding Assistants Into Installing Botnet Malware
• 11:35 : GitLab Patches Eight Security Vulnerabilities Across Community and Enterprise Editions
• 11:34 : 5,811 arrests, $293 million seized over social engineering scams
• 11:15 : RedHook Abuses Accessibility Service to Enable Developer Options and Wireless Debugging
• 11:13 : Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656)
• 11:11 : The Language of AI Could Change How Humans Speak
• 11:11 : June 2026 Cyber Attacks Statistics Infographic
• 11:10 : June 2026 Cyber Attacks Statistics
• 11:9 : Your coding agent says no in chat and yes in the code
• 11:8 : GhostApproval Flaw Hits Six Major AI Coding Assistants
• 10:41 : Microsoft Entra Passkey Enrollment Abused in Operator-Controlled Vishing Campaign
• 10:40 : Foxit Patches Multiple Use-After-Free Flaws Leading to Remote Code Execution
• 10:39 : GhostApproval Attack Impacts Amazon Q, Claude Code, Cursor, Google Antigravity, and Windsurf
• 10:38 : Madison Square Garden Kept a List of Gay Celebrities
• 10:38 : Mount Royal University Confirms Data Stolen in Ransomware Attack
• 10:37 : Microsoft Patches Defender ‘RoguePlanet’ Vulnerability
• 10:35 : Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges
• 10:6 : Google Chrome Update Patches 27 Security Vulnerabilities Including Critical Use-After-Free Flaws
• 10:5 : GitLab Patches 8 Vulnerabilities Affecting CE and EE Installations
• 10:5 : Nike Alleged Breach: Threat Actors Claim Leak of Millions of Customer Records
• 10:5 : IT Security News Hourly Summary 2026-07-09 12h : 5 posts
• 10:4 : Turn off this Meta setting before someone generates AI images of you
• 10:4 : New AI Security Charter Backed by Over 70 Cyber Firms
• 9:34 : GitHub Copilot IDE Coding Agents Vulnerable to Workflow-Level Jailbreak Attacks
• 9:34 : HalluSquatting Attack Lets Hackers Turn AI Coding Assistants Into Botnet Installers
• 9:34 : New AI Security Charter Backed by 71 Cyber Firms
• 9:4 : npm and PyPI Malware Campaign Exfiltrates CI/CD Secrets Through Fake Payment SDKs
• 9:4 : Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes
• 9:4 : AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique
• 9:4 : AWS centralizes access, spending, and governance for Claude
• 8:37 : Microsoft Releases Patches for RoguePlanet Defender Zero-Day Vulnerability
• 8:37 : Helix Data Extortion Group Uses Vishing and Device Code Phishing to Steal SharePoint Data
• 8:35 : NetSPI pairs AI pentesting with expert-validated security findings
• 8:35 : Mexico’s big cyber test, Roundcube mailserver snooped on, Cash App found lax
• 8:9 : Meta’s New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images
• 8:8 : Cybercriminals Plant Malicious AI Agents in Open Source Tool Repositories
• 7:33 : SNOW Malware Ecosystem Uses Teams Phishing, WebSocket Tunnels, and Browser Extensions
• 7:33 : Chrome 150 Update Patches 27 Vulnerabilities
• 7:7 : Everest Ransomware Encryptor Uses ConfuserEx-Protected .NET Binary With Wake-on-LAN Capability
• 7:7 : Thief posed as Wi-Fi fixing hero, then stole priceless trophy
• 7:6 : 8Layers Raises $2.9 Million for Identity Security Platform
• 7:5 : IT Security News Hourly Summary 2026-07-09 09h : 7 posts
• 6:35 : Umbrij Malware Lets ToddyCat Hackers Hijack Gmail Accounts Through Google API Abuse
• 6:35 : Palo Alto PAN-OS Vulnerability Allows Arbitrary Code Execution Through Malicious Network Traffic
• 6:34 : New GhostApproval Vulnerability Affects Amazon Q, Claude Code, Cursor, and Other AI Agents
• 6:34 : Malicious AI agent skills can slip past the scanners built to stop them
• 6:6 : Singapore Mansion Seized Amid Nvidia Chip Smuggling Probe
• 6:6 : The fake report message that ends with a stolen Reddit account
• 6:6 : Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
• 5:34 : Product showcase: Protect your iPhone with McAfee Mobile Security
• 5:34 : Open-source collaboration is growing worldwide and putting pressure on maintainers
• 5:6 : New Helix Extortion Group Targets Enterprises With MFA Abuse and SharePoint Exfiltration
• 5:5 : How to Set Up a Home Hacking Lab for Beginners (Free and Legal) (2026)
• 5:5 : ESET Threat Report H1 2026
• 5:5 : Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices
• 5:4 : Messaging fraud trends point to smarter attacks, stronger blocking
• 5:4 : Wireshark 4.6.7 patches a dozen security flaws
• 5:4 : Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes
• 5:4 : GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
• 4:34 : Claude AI Prompt Injection Attack Turns Chatbot Into Stealthy C2 Agent to Achieve Remote Code Execution
• 4:34 : Accenture Confirms Data Breach – Hacker Claims Theft of Internal Source Code
• 4:34 : A single malware file can outweigh an entire AI dataset
• 4:5 : IT Security News Hourly Summary 2026-07-09 06h : 2 posts
• 4:4 : DuckDuckGo Browser Blocks YouTube Ads Using uBlock Origin Filter Lists
• 3:13 : Claude, Cursor, and Codex Trigger Endpoint Security Rules Used to Catch Hackers
• 2:6 : ISC Stormcast For Thursday, July 9th, 2026 https://isc.sans.edu/podcastdetail/10000, (Thu, Jul 9th)
• 1:33 : _HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary], (Tue, Jul 7th)
• 23:9 : Iris Recognition vs Fingerprint: Which Biometric Wins in 2026?
• 23:9 : APT-C-20 Hackers Hide Shellcode in PNG Images to Launch Fileless C# Backdoor
• 23:8 : PromptSpy Android Malware Uses Google Gemini to Adapt During Runtime Execution
• 22:6 : When AI Models Outgrow Storage
• 22:6 : China-Aligned Hackers Exploit Roundcube Servers at Universities
• 22:6 : ClickFix Campaign Uses Fake Google Verification Page to Infect Mexican Bank Customers
• 22:6 : Suspected Chinese snoops caught breaking into universities’ Roundcube mailservers
• 22:5 : IT Security News Hourly Summary 2026-07-09 00h : 2 posts
• 21:55 : IT Security News Daily Summary 2026-07-08