Attackers helped themselves to historical personal info on 27K people The University of Sydney is ringing around thousands of current and former staff and students after admitting attackers helped themselves to historical personal data stashed inside one of its online…
IT Security News Hourly Summary 2025-12-19 18h : 11 posts
11 posts were published in the last hour 17:2 : Why AppSec Can’t Keep Up With AI-Generated Code 17:2 : Google Shutting Down Dark Web Report Met with Mixed Reactions 17:2 : State-linked and criminal hackers use device code phishing…
Why AppSec Can’t Keep Up With AI-Generated Code
StackHawk co-founder and CSO Scott Gerlach has spent most of his career running security teams, and his take on application security is shaped by a simple reality: developers are still too often the last to know when their code ships…
Google Shutting Down Dark Web Report Met with Mixed Reactions
Google is shutting down its dark web report tool, which was released in 2023 to alert users when their information was found available on the darknet. However, while the report sent alerts, Google said users found it didn’t give them…
State-linked and criminal hackers use device code phishing against M365 users
Russia-linked groups have attacked multiple sectors in recent months. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: State-linked and criminal hackers use device code phishing against M365 users
Keyboard Lag Leads Amazon to North Korean Impostor in Remote Role
Amazon Security Chief explains how a subtle keyboard delay exposed a North Korean impostor. Read about the laptop farm scheme and how 110 milliseconds of lag ended a major corporate infiltration. This article has been indexed from Hackread – Cybersecurity…
OWASP Drops First AI Agent Risk List
These aren’t simple chatbots anymore—these AI agents access data and tools and carry out tasks, making them infinitely more capable and dangerous. The post OWASP Drops First AI Agent Risk List appeared first on TechRepublic. This article has been indexed…
Amazon Detects North Korean IT Infiltrator via Latency Clues
Amazon uncovered a North Korean IT infiltrator through keystroke latency, highlighting risks in remote hiring and the need for stronger identity controls. The post Amazon Detects North Korean IT Infiltrator via Latency Clues appeared first on eSecurity Planet. This article…
In Other News: Docker AI Attack, Google Sues Chinese Cybercriminals, Coupang Hacked by Employee
Other noteworthy stories that might have slipped under the radar: Trump could use private firms for cyber offensive, China threat to US power grid, RaccoonO365 suspect arrested in Nigeria. The post In Other News: Docker AI Attack, Google Sues Chinese…
For $18 an Hour Stanford’s AI Agent Bested Most Human Pen Testers in Study
A Stanford study finds the ARTEMIS AI agent beat most human pen testers in vulnerability discovery—at a fraction of the cost. The post For $18 an Hour Stanford’s AI Agent Bested Most Human Pen Testers in Study appeared first on Security Boulevard.…
Wi-Fi Jammers Pose a Growing Threat to Home Security Systems: What Homeowners Can Do
Wi-Fi technology powers most modern home security systems, from surveillance cameras to smart alarms. While this connectivity offers convenience, it also opens the door to new risks. One such threat is the growing use of Wi-Fi jammers—compact devices that…
Adobe Brings Photo, Design, and PDF Editing Tools Directly Into ChatGPT
Adobe has expanded how users can edit images, create designs, and manage documents by integrating select features of its creative software directly into ChatGPT. This update allows users to make visual and document changes simply by describing what they…
Rockrose Development suffers security breach affecting 47,000 people
The New York City-based firm recently found that unauthorized individuals hacked its systems and claimed to have acquired confidential information. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Rockrose Development suffers security breach…
CISA and Partners Release Update to Malware Analysis Report BRICKSTORM Backdoor
Today, the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency, and Canadian Centre for Cyber Security released an update to the Malware Analysis Report BRICKSTORM Backdoor with indicators of compromise (IOCs) and detection signatures for additional BRICKSTORM samples. This…
Iranian Nation-State APT Targeting Networks and Critical Infrastructure Organizations
Iranian state-sponsored threat actors, commonly tracked as “Prince of Persia,” have resurfaced with a sophisticated cyberespionage campaign targeting global critical infrastructure and private networks. Active since the early 2000s, this group recently deployed updated malware variants to infiltrate organizational systems…
Cloud Atlas Hacker Group Exploiting Office Vulnerabilities to Execute Malicious Code
The Cloud Atlas advanced persistent threat group has continued its sophisticated campaign targeting organizations across Eastern Europe and Central Asia during the first half of 2025, leveraging outdated Microsoft Office vulnerabilities to deliver multiple backdoor implants. This campaign reveals a…
AI Security Firm Ciphero Emerges From Stealth With $2.5 Million in Funding
The startup’s solution captures, verifies, and governs all AI interactions within an enterprise’s environment. The post AI Security Firm Ciphero Emerges From Stealth With $2.5 Million in Funding appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
Palo Alto Networks, Google Cloud Strike Multibillion-Dollar AI and Cloud Security Deal
The agreement strengthens technical and commercial ties as Palo Alto migrates workloads and adopts Google’s Vertex AI and Gemini models. The post Palo Alto Networks, Google Cloud Strike Multibillion-Dollar AI and Cloud Security Deal appeared first on SecurityWeek. This article…
Amazon and Microsoft AI Investments Put India at a Crossroads
Major technology companies Amazon and Microsoft have announced combined investments exceeding $50 billion in India, placing artificial intelligence firmly at the center of global attention on the country’s technology ambitions. Microsoft chief executive Satya Nadella revealed the company’s largest-ever…
Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware
Cybersecurity researchers have disclosed details of a new campaign that has used cracked software distribution sites as a distribution vector for a new version of a modular and stealthy loader known as CountLoader. The campaign “uses CountLoader as the initial…
Top lawmaker asks White House to address open-source software risks
The Senate Intelligence Committee’s chairman voiced concern about foreign adversaries tampering with code. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Top lawmaker asks White House to address open-source software risks
AI Actor Tilly Norwood and the Impact of Cloud Infrastructure
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from Blog Read the original article: AI Actor Tilly Norwood and the Impact of Cloud Infrastructure
UK Foreign Office Cyber Breach Exposed Diplomatic Secrets
The government stopped short of directly attributing the attack to Chinese operatives or the Chinese state. The post UK Foreign Office Cyber Breach Exposed Diplomatic Secrets appeared first on TechRepublic. This article has been indexed from Security Archives – TechRepublic…
Dismantling Defenses: Trump 2.0 Cyber Year in Review
The Trump administration has pursued a staggering range of policy pivots this past year that threaten to weaken the nation’s ability and willingness to address a broad spectrum of technology challenges, from cybersecurity and privacy to countering disinformation, fraud and…