Pegasus infected a Serbian student activist’s iPhone through an iMessage zero-click exploit
Capsule Security Launches ‘AI Circuit Breaker’ to Stop Rogue Agents
New models, trained using NVIDIA Nemotron 3 Ultra, aim to catch rogue agent behavior before it executes, without the latency of large-model review.
Government, industry partner to shut down long-running Sality botnet
A nonprofit group is now working to contact the botnet’s victims.
Drowning in CVEs and thirsty for answers? Try CTEM
Boards want to know if they’re less exposed than last quarter. Patching metrics aren’t the solution
What is GRC in Cybersecurity? A Complete Beginners Guide (2026)
By HOC Team | Last updated: September 03, 2026 | Read time: ~22 min What is GRC in…
Shift Browser is signed adware that fingerprints your endpoint before it drops payload
Heimdal’s SOC flagged a surge in detections tied to a program called Shift Browser on 2 September 2026. Our team confirmed activity on more than 50 client…
IT Security News Hourly Summary 2026-09-03 17h : 17 posts
17 posts published in the last hour 14:31TerminalFix malware campaign uses steganography 14:31Hackers Use QR Codes With No Images to Bypass Email Security 14:31412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web 14:31Microsoft to Expand Memory Integrity Protection…
TerminalFix malware campaign uses steganography
Microsoft has published research on a sophisticated malware campaign named TerminalFix that employs social engineering tactics similar to ClickFix attacks.
Hackers Use QR Codes With No Images to Bypass Email Security
Hackers are using QR codes without image files to slip past email defenses. The tactic turns email markup into a scannable code, routing recipients to a…
412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web
412,000 The Town 2025 festival buyer records are being sold for $10,000, with Brazil’s data openly marketed for bank fraud, loans and SIM registration. A…
Microsoft to Expand Memory Integrity Protection Across Windows Devices
Microsoft will begin expanding memory integrity protection across eligible Windows devices in October 2026, automatically enabling a stronger kernel-level…
Cyber Briefing: 2026.09.03
Attackers are combining social engineering, hidden malware delivery, credential theft, and persistent access techniques, while a major court-system breach…
3 High-Severity HP Easy Start Flaws Let Attackers Escalate Privileges on macOS
Three high-severity vulnerabilities in HP Easy Start for macOS could allow attackers to interfere with printer-software installation workflows and…
Fake Acquisition Scam Uses Forged NDAs to Demand €626,000 Corporate Payment.
Threat actors impersonated Gen executives and major consulting firms in a targeted business email compromise-style operation that used forged…
Shai-Hulud Infostealer Expands to 469 Credential Locations
A new variant of the Shai-Hulud infostealer worm discovered in early August has significantly expanded its attack surface, now targeting 469 different…
Gossip on Cryptography: Part 3
In this blog, we will continue our discussion from the previous blog, Parts 1 and 2 . If you have not read it, please read it once. So far, we have…
Belkin launches SureFind trackers for Apple Find My, Google
Belkin has entered the item tracking market with its new SureFind line of trackers that work across both Apple’s Find My network and Google’s Find Hub…
Thomson Reuters reveals breach that exposed U.S. and Canadian court records
Thomson Reuters has disclosed a data breach affecting C-Track, a court case management platform operated by its subsidiaries, exposing court records and…
Microsoft makes passkeys default in Entra ID
Microsoft has made passkeys the default authentication method for Entra ID, its cloud-based identity and access management service, effective September 1,…
Outsider Phishing Kit Survives Takedown With 700 New Pages
Outsider phishing kit generated 700 new pages after a Google-led disruption
Meta releases Muse Spark 1.3 AI model
Meta Platforms has released Muse Spark 1.3, the latest version of its AI model focused on coding and agentic task performance.
Google’s Gemini 3.8 Flash takes on bigger AI models at a lower cost
Google has introduced Gemini 3.8 Flash, available to developers today, and a gated sibling, Gemini 3.8 Flash Cyber, reserved for vetted security teams.…
Thomson Reuters C-Track Breach Exposes Court Records
Thomson Reuters has confirmed a significant cybersecurity incident affecting its C-Track court management software, which has exposed sensitive case…
IT Security News Hourly Summary 2026-09-03 16h : 8 posts
8 posts published in the last hour 13:31Rogue ScreenConnect Clients Spread Worm-Like Malware Across Connected Windows Systems 13:31Scientists just overturned a century-old physics assumption 13:02Cybercrooks trawl Fishbrain to net password hashes 13:02Syrian migrant smugglers arrested in coordinated strike in Germany…