Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow defenders to disrupt operations.
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member’s iPhone
The iPhone belonging to a member of Serbia’s student protest movement was infected with NSO Group’s Pegasus spyware, according to new findings from the…
FBI Probes Possible Breach of 153 Million Driver’s Licenses
The FBI is investigating how scans of over 153 million driver’s licenses are being sold on the dark web
CISA Warns of SonicWall SMA1000 Vulnerabilities Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added two SonicWall SMA1000 appliance vulnerabilities to its Known Exploited Vulnerabilities…
Google Spared Adtech Sell-Off In Monopoly Ruling
US federal judge approves limited behavioural remedies, rejecting break-up of Google’s illegal adtech monopoly
IT Security News Hourly Summary 2026-09-03 12h : 18 posts
18 posts published in the last hour 09:322,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber Operators 09:32UK’s Online Safety Act has made ‘absolutely no difference,’ kids say 09:32WordPress Plugin Flaw Lets Attackers Turn SQL Injection Into…
2,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber Operators
2,000 leaked files expose Bauman University’s hidden Department No. 4, which trained GRU-linked hackers and propagandists linked to APT28 and Sandworm.…
UK’s Online Safety Act has made ‘absolutely no difference,’ kids say
Children’s Commissioner also furious with Ofcom over a string of failures
WordPress Plugin Flaw Lets Attackers Turn SQL Injection Into Complete Site Takeover
A high-severity vulnerability affecting over 5 million active WordPress installations could allow unauthenticated attackers to exploit stored SQL…
TikTok Drops Out Of US House Meeting Amid Child-Safety Pressure
TikTok cancels planned roundtable with US lawmakers on national security issues, following Meta child-safety settlement
Cisco Nexus 9000 Series Switches Flaw Allows Remote Attackers to Execute Malicious Code
Cisco has disclosed a critical vulnerability in Cisco Nexus 9000 Series Switches that could allow an unauthenticated remote attacker to execute arbitrary…
Your phone or computer may soon ask how old you are
California and Colorado will require operating systems to collect users’ ages, but open-source software like Linux may be exempt.
The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours
The Gentlemen ransomware operation is moving from access to full network encryption at striking speed. In some intrusions, attackers disabled defenses and…
Researchers built a $7 gadget for anyone paranoid about hidden cameras in hotel rooms
Most of us, staying in a hotel room or a vacation rental, have wondered at least once whether we’re safe there, whether someone might be watching or…
VPN Is the Biggest Backdoor Into Your Plant — Here’s What Should Replace It on Your OT Network
Every industrial organisation now lets someone in from the outside — OEM vendors, system integrators, remote engineers. How they get in determines whether…
Sangoma Switchvox RCE Flaw Actively Exploited in Wild via Unauthenticated SQL Injection
Security researchers have reported active exploitation attempts targeting a critical vulnerability in Sangoma Switchvox, allowing unauthenticated…
WordPress Plugin Flaw Exposes 5 Million Sites to SQL Injection Attacks
A high-severity vulnerability in the All-in-One WP Migration and Backup plugin could allow unauthenticated attackers to take over vulnerable WordPress…
StreamRAT Abuses Android Accessibility, MediaProjection and HVNC for Full Device Takeover
StreamRAT, a newly identified Android banking trojan distributed through fake free-TV streaming advertisements on Meta and TikTok. The campaign, tracked…
Malicious Apache Modules Turn Trusted Government Websites Into Stealth Phishing Proxies
Brazilian government websites have been quietly turned into gateways for phishing pages on trusted public domains. Rather than sending victims to obvious…
International Operation Disrupts Sality P2P Botnet
US-led action sinkholes machines caught up in Sality botnet
Phishing in Your Inbox: How to Reliably Identify Fake Emails in Your Google Account
Your Google account is more than just an email inbox. It is the central key to a wide range of services, from Google Drive and Google Photos to logging in…
Tencent User Data Fuels High-Performance Hy4 Preview AI Model
Hy4 preview from Tencent becomes latest open-weight model to challenge US leaders, drawing on company’s wide-ranging user data
Three HP Easy Start Flaws Let Attackers Gain Root Privileges on macOS
Three high-severity vulnerabilities in HP Easy Start for macOS could allow both local and network-positioned attackers to disrupt the printer software…
IT Security News Hourly Summary 2026-09-03 11h : 8 posts
8 posts published in the last hour 08:31Critical Cisco Nexus 9000 Flaw Lets Remote Attackers Execute Code as Root Without Authentication 08:31Gang Releases Personal Data After Hack Of UK Airports 08:31Ransomware Hackers Can Go From Network Access to Encryption in…