20 posts were published in the last hour 19:5 : IT Security News Hourly Summary 2026-05-31 21h : 1 posts 18:36 : CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers 16:34 : YARA-X 1.17.0 Release, (Sun, May…
IT Security News Hourly Summary 2026-05-31 21h : 1 posts
1 posts were published in the last hour 18:36 : CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers
CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers
CVE-2026-0257 lets attackers forge Palo Alto GlobalProtect auth cookies and bypass VPN login. Exploitation confirmed since May 17. Palo Alto Networks addressed the vulnerability CVE-2026-0257 on May 13. Two weeks later, cybersecurity firm Rapid7 confirmed active exploitation across multiple customer…
YARA-X 1.17.0 Release, (Sun, May 31st)
YARA-X's 1.17.0 release brings 5 improvements (several performance improvements) and 1 bugfix. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: YARA-X 1.17.0 Release, (Sun, May 31st)
IT Security News Hourly Summary 2026-05-31 18h : 5 posts
5 posts were published in the last hour 15:34 : Security Affairs newsletter Round 579 by Pierluigi Paganini – INTERNATIONAL EDITION 15:34 : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 99 15:34 : Ukrainian Cyber Police Uncover Alleged Infostealer Operation Linked to…
Security Affairs newsletter Round 579 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. ShinyHunters…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 99
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages…
Ukrainian Cyber Police Uncover Alleged Infostealer Operation Linked to 18-Year-Old Suspect
Ukrainian cyber police, in collaboration with U.S. law enforcement agencies, have identified an 18-year-old resident of Odesa who is suspected of operating an infostealer malware campaign that targeted customers of a California-based online retailer. Authorities allege that between 2024…
GitHub Repo Breach Traced to TanStack NPM Supply-Chain Attack
GitHub has confirmed that a breach of its internal repositories is directly linked to the TanStack npm supply-chain attack, demonstrating how a single compromised developer tool can cascade into a major security incident. The company stated that the intrusion…
UK Post Office Awards £410 Million Contracts to Replace Horizon System After Long-Running Scandal
Now beginning its largest tech overhaul yet, the UK Post Office handed out £410 million in contracts to Accenture and OneView Commerce. This shift follows years of public scrutiny tied to the flawed Horizon system. Known for fueling a…
27,000-Download Codex UI Tool Secretly Stole OpenAI Refresh Tokens
A malicious Codex UI npm package with 27,000 weekly downloads was caught exfiltrating OpenAI refresh tokens, exposing developers to account takeover risks. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original…
IT Security News Hourly Summary 2026-05-31 15h : 1 posts
1 posts were published in the last hour 13:4 : Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
Dutch authorities have announced the takedown of a botnet that enslaved millions of infected devices, including computers, tablets, smartphones, and IoT devices, to carry out malicious attacks. The bot network, per the Dutch Politie and the National Cyber Security Center…
Baselining Windows To Blend In
A look at Windows baseline behaviour through the lens of observability, telemetry, and detection engineering. This article has been indexed from ZephrSec – Adventures In Information Security Read the original article: Baselining Windows To Blend In
Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flaw
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Coinflow CISO on crypto payments security under AI pressure Crypto payment firms sit near the top of the target list for advanced persistent threat groups,…
WordPress Plugin Security Failure Opens Door to Payment Data Theft
Cybercriminals have been actively exploiting a critical flaw in the widely deployed Funnel Builder plugin in order to harvest customer payment information during online transactions in a newly uncovered attack campaign, once again highlighting the security risks that face…
IT Security News Hourly Summary 2026-05-31 06h : 1 posts
1 posts were published in the last hour 3:31 : Microsoft Releases KB5089573 for Windows 11 to Fix Patch Tuesday Install Issues
Microsoft Releases KB5089573 for Windows 11 to Fix Patch Tuesday Install Issues
Microsoft has rolled out a new cumulative update, KB5089573, for Windows 11 versions 25H2 and 24H2, targeting a critical installation failure that affected users following the May 2026 Patch Tuesday release. The update brings OS builds to 26200.8524 and 26100.8524,…
Atlas Menu – 63,926 breached accounts
In May 2026, the GTA V and CS2 cheat service Atlas Menu suffered a data breach. An attacker claimed to have gained access to all Atlas systems and published the service’s database to a public GitHub repository. The incident exposed…
IT Security News Hourly Summary 2026-05-31 00h : 1 posts
1 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-05-30
IT Security News Daily Summary 2026-05-30
40 posts were published in the last hour 18:2 : GitLab Patches Multiple Duo AI, DoS, and Authorization Flaws in Community and Enterprise Edition 17:32 : Fake Anthropic Sites Deliver Fileless Infostealer to Claude Code Users 17:32 : ShinyHunters Leaks…
GitLab Patches Multiple Duo AI, DoS, and Authorization Flaws in Community and Enterprise Edition
GitLab has released emergency security updates for both Community Edition (CE) and Enterprise Edition (EE), addressing multiple Duo AI, denial‑of‑service, and authorization flaws in recent versions of the platform. On May 27, 2026, GitLab shipped versions 19.0.1, 18.11.4, and 18.10.7…
Fake Anthropic Sites Deliver Fileless Infostealer to Claude Code Users
Fake Anthropic websites are being used to target Claude Code users with a fileless infostealer campaign that steals browser credentials and evades detection. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the…
ShinyHunters Leaks Charter Communications Data, Potentially Impacting 5 Million Customers
Cybercrime group ShinyHunters leaked data allegedly stolen from Charter Communications, exposing millions of customer records after a failed extortion attempt. The ShinyHunters extortion group has published data allegedly stolen from Charter Communications after the company apparently refused to pay a…