A long-running Telegram influence and fraud campaign where a solo threat actor leveraged stolen Google Gemini API keys and jailbroken AI to automate content generation, credential theft, and infrastructure operations at scale. Tracked as “bandcampro,” the Russian-speaking operator maintained a…
Microsoft reaches for olive branch after public dustup with 0-day researcher
Following days of criticism from the security community, Redmond dials back rhetoric, insists vulnerability hunters not in its legal crosshairs This article has been indexed from www.theregister.com – Articles Read the original article: Microsoft reaches for olive branch after public…
IT Security News Hourly Summary 2026-06-02 15h : 11 posts
11 posts were published in the last hour 13:5 : Codex knowledge work expands into research, reports, and spreadsheets 13:4 : Operation FlutterBridge macOS Malvertising Campaign 13:4 : PSNI warns of phone number spoofing scam 13:4 : UK Firms Prioritize…
Codex knowledge work expands into research, reports, and spreadsheets
Office workers in the United States lose hours each week to email triage and to searching for files spread across disconnected systems. Roughly 40 percent of US labor, about 72 million people, works primarily with information such as analysis, documents,…
Operation FlutterBridge macOS Malvertising Campaign
Cybersecurity researchers at Unit 42 have identified a malvertising campaign targeting macOS users with a previously unknown backdoor. This article has been indexed from CyberMaterial Read the original article: Operation FlutterBridge macOS Malvertising Campaign
PSNI warns of phone number spoofing scam
The Police Service of Northern Ireland has issued a public warning after scammers successfully spoofed its official switchboard number to conduct fraud attempts. This article has been indexed from CyberMaterial Read the original article: PSNI warns of phone number spoofing…
UK Firms Prioritize AI Threat Preparedness
UK cybersecurity professionals are prioritizing AI-powered threats as their top concern, with 43% identifying such attacks as their single biggest risk over the next 12 months, according to new research from ManageEngine. This article has been indexed from CyberMaterial Read…
California sues 23andMe over 2023 genetic data breach
California Attorney General Rob Bonta filed suit on May 27, 2026, against Chrome Holding Co., the corporate entity managing 23andMe’s remaining assets after bankruptcy, alleging security failures and deceptive practices related to a 2023 data breach. This article has been…
Microsoft Threatens Security Researcher
Microsoft has threatened legal action against an anonymous security researcher who published multiple Windows exploits, including a critical vulnerability affecting BitLocker encryption. This article has been indexed from CyberMaterial Read the original article: Microsoft Threatens Security Researcher
New WordPress Malware Uses Steam Profile Comments to Hide C2 Instructions
GoDaddy researchers found WordPress malware using Steam Community profile comments to hide encoded command and control data, with nearly 1,980 sites affected. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original…
Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches
A stack-based buffer overflow bug can be exploited for remote code execution on a vulnerable device. The post Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
The Zero-Knowledge Threat Actor and the End of Responsible Disclosure
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code. The post The Zero-Knowledge Threat Actor and the End of Responsible Disclosure appeared first on SecurityWeek. This article has…
Google fixes actively exploited Android vulnerability (CVE-2025-48595)
Google has announced the June 2026 Android security updates, which fix a bucketload of vulnerabilities, including a high-severity vulnerability (CVE-2025-48595) in the Android Framework that “may be under limited, targeted exploitation.” About CVE-2025-48595 CVE-2025-48595 is an integer overflow vulnerability in…
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
AI-driven exploitation timelines are rapidly shrinking, and they are not going to stop shrinking. Vulnerabilities are being discovered, reproduced, and weaponized faster than ever in the history of enterprise security. As a result, the window between a vulnerability being disclosed…
Halo Security Honored with 2026 MSP Today Product of the Year Award
Miami Beach, FL, USA, 2nd June 2026, CyberNewswire This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: Halo Security Honored with 2026 MSP Today Product of the Year Award
Claude Code GitHub Actions Flaw Exposes Repositories to Full Compromise
A critical supply chain vulnerability in Anthropic’s Claude Code GitHub Actions workflow has been disclosed, exposing thousands of repositories to potential full compromise through a single malicious GitHub issue. Security researcher Ryota K from GMO Flat Security identified multiple flaws…
Mustang Panda Uses LNK, PowerShell Chain to Deploy PlugX RAT
Mustang Panda is using a fake “Browser Updater” and a multi‑stage LNK–PowerShell loader to sideload PlugX through a legitimate G DATA antivirus binary, ultimately beaconing over HTTPS to a hard‑coded C2 while hiding configuration and strings behind layered encryption and…
Foreign Spyware Found on Phones of Top Russian Officials
Russian authorities have disclosed a suspected large-scale cyber espionage operation targeting the mobile devices of senior government officials, raising fresh concerns over advanced spyware campaigns and mobile surveillance threats. The Federal Security Service (FSB) announced on Tuesday that it had…
Critical KMW CCTV Flaw Allows Unauthorised Access to Surveillance Feeds
A critical security vulnerability in KMW CCTV security cameras could allow attackers to gain full, unauthorised access to live surveillance feeds and device settings, raising serious concerns for organisations that rely on these systems in sensitive environments. The issue, tracked…
Wardriving assessment across Mexico: Preparing for the 2026 World Cup
In the lead-up to the 2026 FIFA World Cup, Kaspersky GReAT experts conducted a wardriving assessment in Mexico City, Monterrey, and Guadalajara to evaluate Wi-Fi hotspot security configurations and potential exposure risks. This article has been indexed from Securelist Read…
Hackers Deploy AZUREVEIL Adaptix C2 Agent via Spearphishing Campaign
A newly identified spearphishing campaign has been quietly targeting government officials, researchers, and technology workers in the Czech Republic and Taiwan. Threat researchers traced the operation to a China-linked threat actor, with the earliest known sample surfacing from Taiwan in…
Claude Code’s GitHub Actions Vulnerability Lets Attackers Compromise Any Repository
A critical supply chain vulnerability in Claude Code’s GitHub Actions that could allow attackers to compromise any repository using Anthropic’s official CI/CD workflow, including Anthropic’s own infrastructure. The vulnerability, discovered by security researcher RyotaK of GMO Flatt Security and patched…
TP-Link Router Vulnerability Allows Attackers to Execute Arbitrary System Commands
A newly disclosed high-severity vulnerability in TP-Link routers could allow attackers to execute arbitrary system commands and fully compromise affected devices. Tracked as CVE-2026-5509, the flaw affects Archer BE450 v1 and Archer BE7200 v1 models. It has been assigned a…
Claude celebrates Anthropic’s stock market float with blockbuster … outage
Chatbot has no respect for timing of its maker’s financial announcement This article has been indexed from www.theregister.com – Articles Read the original article: Claude celebrates Anthropic’s stock market float with blockbuster … outage