A newly disclosed class of vulnerabilities, dubbed GitSpawn, allows a booby-trapped repository to silently execute code on a developer’s machine the…
Dropbox Says 5,000 Accounts Were Compromised Through Lenovo ID Authentication Flaw
Dropbox has disclosed that approximately 5,000 user accounts were compromised in August after attackers exploited a weakness involving its Lenovo ID…
Firefox on iPhone Can Now Block Ads and Trackers Without Installing an Extension
Mozilla has introduced a built-in Ad Blocker for Firefox on iOS, allowing iPhone users to block many third-party advertisements and ad-related trackers…
How to Write Bug Bounty Report That Gets Paid (2026)
By HOC Team | Last updated: September 02, 2026 | Read time: ~28 min How to Write a…
FBI Investigates Dark Web Service Offering 153 Million Driver’s Licenses
The FBI has opened an investigation into an apparent breach involving identity verification provider IDScan.net after a newly launched dark web service…
Threat Intelligence: Definition, Benefits, and Use Cases
Security teams rarely struggle because they lack data. More often, the challenge is deciding which signals actually deserve attention. Modern security…
Hackers Hijack BGP Routes to Deliver Malicious Virtualizor Update
Hijackers compromised network routes used by Softaculous and redirected traffic to servers where they distributed a rogue Virtualizor update to a limited…
IT Security News Hourly Summary 2026-09-02 19h : 8 posts
8 posts published in the last hour 16:31CrowdStrike Delivers the Next Evolution of the Agentic SOC 16:31Tech support scams look different now. Here’s what to watch for 16:31CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks 16:31SonicWall’s SMA1000 boxes…
CrowdStrike Delivers the Next Evolution of the Agentic SOC
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Delivers the Next Evolution of the Agentic SOC
Tech support scams look different now. Here’s what to watch for
Tech support scams have evolved beyond fake virus warnings. Here’s how scammers reach their targets now, and how to stay safe.
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
SonicWall’s SMA1000 boxes under active attack again
Miscreants use chained zero days to pwn boxen as third-party SOCs say further attacks ‘almost certain’
CrowdStrike Announces Agentic Identity Provider
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Announces Agentic Identity Provider
What If Your Idea Became the Next OffSec Lab?
Learn all about OffSec’s new Creator Platform – create labs, earn rewards and help the security community skill up.
UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure
Late amendments to the Cyber Security and Resilience Bill would give ministers new powers to restrict risky technology providers as supply chain attacks…
IT Security News Hourly Summary 2026-09-02 18h : 16 posts
16 posts published in the last hour 15:31Russian Man Extradited Over Malware Campaign Targeting Freelancers 15:31HiddenLayer nabs $100M as enterprises rush to secure their AI deployments 15:31Attackers Actively Exploiting Critical Vulnerability in Elementor Pro Plugin 15:31NSA Warning Exposes Common Router…
Russian Man Extradited Over Malware Campaign Targeting Freelancers
Russian man extradited to US over malware campaign that targeted 80,000 freelance users
HiddenLayer nabs $100M as enterprises rush to secure their AI deployments
HiddenLayer has raised a $100M Series B from Delta-v Capital, Ten Eleven Ventures, Morgan Stanley, Microsoft’s M12, Booz Allen Hamilton, and others.
Attackers Actively Exploiting Critical Vulnerability in Elementor Pro Plugin
On August 19th, 2026, we publicly disclosed a critical Unauthenticated Arbitrary File Upload vulnerability in Elementor Pro, a WordPress plugin with more…
NSA Warning Exposes Common Router Security Risks
The recent warning from the NSA and partner agencies highlights a simple but important reality: routers are often the weakest link in a home or…
SonicWall Patches Two New Actively Exploited Zero-Days in SMA 1000 VPNs
SonicWall patched two zero-days in SMA 1000 VPNs, including a CVSS 10 pre-auth SSRF flaw, after confirming active exploitation. SonicWall has released…
Europol and European Labour Authority strengthen cooperation against labour exploitation
The Working Arrangement formalises cooperation that has already demonstrated its value through joint involvement in EMPACT activities. It provides a…
Authorities Disrupted 20-Year-Old Sality Botnet Controlling 15,000+ Infected Systems
The Department of Justice has confirmed a coordinated international takedown of the Sality botnet, a peer-to-peer malware network that has plagued victims…
Frontier AI helps exploit flaws in tests using key industrial devices
A report showed that Claude could help hackers develop attack strategies targeting PLCs used by water utilities and other industries.