Criminal group releases personal data on millions of passengers on open internet, after hack of three UK airports last week
Ransomware Hackers Can Go From Network Access to Encryption in Less Than 24 Hours
The Gentlemen ransomware-as-a-service operation can move from confirmed access inside a victim network to encryption in under 24 hours. Demonstrating how…
Your AI agent’s system prompt is not a security control
An AI agent told in its system prompt to show a user only what that user is cleared to see will hand over more the moment someone talks it into doing so.…
Uber To Cut 10 Percent Of Staff Worldwide
Ride-hailing app to cut about 3,300 workers as it ramps up investments in robotaxi partnerships in US and internationally
CISA Warns SonicWall SMA1000 Flaws Are Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities affecting SonicWall SMA1000 appliances to its Known…
UK Peers Propose ‘Kill Switch’ For Powerful AI Models
Group of peers in House of Lords argue government should have ability to disable powerful models to protect national security
IT Security News Hourly Summary 2026-09-03 10h : 8 posts
8 posts published in the last hour 07:31Spring Ring Campaign Uses Teams Vishing, PowerShell RAT and NTLM Relay Attacks 07:31Seemplicity Response Options accelerates vulnerability mitigation 07:31153M licenses for sale, Anthropic reverses course, Astra enters the red zone 07:02CISA Adds Seven…
Spring Ring Campaign Uses Teams Vishing, PowerShell RAT and NTLM Relay Attacks
A coordinated social-engineering operation tracked as Spring Ring abused Microsoft Teams external accounts to impersonate corporate IT help desks,…
Seemplicity Response Options accelerates vulnerability mitigation
Seemplicity announced Response Options for vulnerability management and exposure management workflows. This new capability gives security teams multiple,…
153M licenses for sale, Anthropic reverses course, Astra enters the red zone
Dark web shop stocks 153 million driver’s licenses Nexus, a new dark web service, claims it’s selling scans of more than 153 million US and Canadian…
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV)…
To keep the AI hacking genie bottled up, try one-way networks
Sandboxes, permissions, and VMs aren’t enough to keep frontier models at bay. “Data diodes” might do the job
Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new zero-day dubbed…
Terminated employee cost company hundreds of thousands of dollars because nobody revoked access
They had more access than the average Joe, and IT didn’t track what needed to be cut off
IT Security News Hourly Summary 2026-09-03 09h : 5 posts
5 posts published in the last hour 06:31Earth Berberoka-Linked Hackers Target Brazil With Linux Malware and SEO Poisoning 06:02GitSpawn Flaw Enables Arbitrary Code Execution in Claude Code, Codex, Cursor and Grok 06:01Your threat feed is someone else’s database: What ingesting…
Earth Berberoka-Linked Hackers Target Brazil With Linux Malware and SEO Poisoning
A Chinese-speaking cybercrime cluster linked to the Earth Berberoka threat actor has compromised Brazilian government and educational web servers to…
GitSpawn Flaw Enables Arbitrary Code Execution in Claude Code, Codex, Cursor and Grok
A newly disclosed vulnerability class, named GitSpawn, reveals a serious weakness in AI coding agents that automatically execute Git commands to…
Your threat feed is someone else’s database: What ingesting malware intel at scale takes
The advice is to consume shared threat intelligence. Join the ISAC. Wire the community feeds into your pipeline. This looks like a fine advice and I agree…
Researcher Claims CrowdStrike Falcon 0-Day Privilege Escalation Vulnerability
A security researcher known as Nightmare-Eclipse, who also goes by the names Chaotic Eclipse and MSNightmare, has released a project that claims to take…
IT Security News Hourly Summary 2026-09-03 08h : 6 posts
6 posts published in the last hour 05:31Claude AI Can Now Control macOS and Windows Computers to Click, Type and Open Apps 05:31When AI quietly breaks things, who pays? 05:31Google Unveils Gemini 3.8 Flash Cyber for Autonomous Vulnerability Discovery and…
Claude AI Can Now Control macOS and Windows Computers to Click, Type and Open Apps
Anthropic has enhanced Claude’s desktop automation capabilities, enabling the AI assistant to operate directly on macOS and Windows computers through…
When AI quietly breaks things, who pays?
David Halbreich, an insurance recovery partner at Reed Smith, breaks down how AI companies should handle coverage gaps that come up as the industry grows.…
Google Unveils Gemini 3.8 Flash Cyber for Autonomous Vulnerability Discovery and Automated Patching
Google has introduced Gemini 3.8 Flash Cyber, a specialized AI model focused on cybersecurity. This model is designed to autonomously identify software…
Claude AI Now Controls Your macOS and Windows Computer in the Background
Anthropic has quietly pushed one of its most consequential agentic upgrades yet, letting Claude take control of a user’s desktop and complete tasks while…