A fourth wave of the GlassWorm malware campaign is targeting macOS developers through malicious extensions distributed on the OpenVSX registry and the Microsoft Visual Studio Marketplace, according to researchers at Koi Security. The campaign involves compromised extensions designed for…
This Week in Cybersecurity: User Data Theft, AI-Driven Fraud, and System Vulnerabilities
This week surfaced several developments that accentuate how cyber threats continue to affect individuals, corporations, and governments across the globe. In the United States, federal records indicate that Customs and Border Protection is expanding its use of small surveillance…
IT Security News Hourly Summary 2026-01-03 18h : 1 posts
1 posts were published in the last hour 17:2 : ShinyHunters Claim Breach of US Cybersecurity Firm Resecurity
ShinyHunters Claim Breach of US Cybersecurity Firm Resecurity
The hacking group ShinyHunters has claimed responsibility for breaching Resecurity, a US-based cybersecurity company headquartered in Los Angeles.… This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI, and More Read the original article: ShinyHunters Claim Breach…
Apple Forces iOS 26 Upgrade Amid Active iPhone Security Threats
Apple has taken an unusually firm stance on software updates by effectively forcing many iPhone users to move to iOS 26, citing active security threats targeting devices in the wild. The decision marks a departure from Apple’s typical approach…
2FA Fail: Hackers Exploit Microsoft 365 to Launch Code Phishing Attacks
Two-factor authentication (2FA) has been one of the most secure ways to protect online accounts. It requires a secondary code besides a password. However, in recent times, 2FA has not been a reliable method anymore, as hackers have started exploiting…
RondoDox Botnet is Using React2Shell to Hijack Thousands of Unpatched Devices
RondoDox hackers exploit the React2Shell flaw in Next.js to target 90,000+ devices, including routers, smart cameras, and small business websites. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI, and More Read the original article: RondoDox…
Finnish Authorities Arrest Two Sailors in Probe Into Undersea Cable Disruption
Finnish authorities have detained a cargo vessel suspected of damaging an undersea telecommunications cable connecting Helsinki to Estonia. The incident has raised fresh concerns about potential hybrid warfare targeting critical infrastructure in the Baltic Sea region. The vessel, named Fitburg,…
India’s RBI Opens Doors to Lateral Hiring in 2026, Signalling a Tech-First Shift in Financial Regulation
In a move highlighting the rapid evolution of India’s financial and digital landscape, the Reserve Bank of India (RBI) has announced a major lateral hiring initiative for 2026, inviting private-sector and specialist professionals into the central bank. This marks…
Taiwan Holds 210 BTC Seized from Criminals, Debates Bitcoin’s Strategic Value
Taiwan’s government said it is holding more than 210.45 bitcoin, worth about $18 million, all of which were seized during criminal investigations related to fraud, money laundering, and other financial crime. This disclosure was in response to a legislator’s demand for…
Thousands of ColdFusion exploit attempts spotted during Christmas holiday
GreyNoise observed thousands of attacks targeting about a dozen Adobe ColdFusion vulnerabilities during the Christmas 2025 holiday. GreyNoise reports a coordinated campaign exploiting about a dozen Adobe ColdFusion vulnerabilities, with thousands of attack attempts observed during the Christmas 2025 holiday.…
IT Security News Hourly Summary 2026-01-03 12h : 5 posts
5 posts were published in the last hour 11:2 : President Trump Orders Divestment in $2.9 Million Chips Deal to Protect US Security Interests 10:32 : How to Protect Your iPhone or Android Device From Spyware 10:32 : VVS Stealer…
President Trump Orders Divestment in $2.9 Million Chips Deal to Protect US Security Interests
The deal involved aerospace and defense specialist Emcore Corp. selling its computer chips and wafer fabrication operation. The post President Trump Orders Divestment in $2.9 Million Chips Deal to Protect US Security Interests appeared first on SecurityWeek. This article has…
How to Protect Your iPhone or Android Device From Spyware
Being targeted by sophisticated spyware is relatively rare, but experts say that everyone needs to stay vigilant as this dangerous malware continues to proliferate worldwide. This article has been indexed from Security Latest Read the original article: How to Protect…
VVS Stealer Uses PyArmor Obfuscation to Evade Static Analysis and Signature Detection
The cybersecurity landscape is witnessing a rise in sophisticated malware that leverages legitimate tools to mask malicious intent. A prime example is VVS Stealer (also styled VVS $tealer). This Python-based malware family has been actively marketed on Telegram since April…
Finland Arrests Two Cargo Ship Crew Members Over Undersea Cable Damage
Finnish authorities have detained all 14 crew members of a cargo vessel suspected of deliberately damaging an undersea telecommunications cable connecting Helsinki to Estonia. The ship, named Fitburg, was sailing from St. Petersburg, Russia, to Haifa, Israel, under a St.…
Infostealers Enable Attackers to Hijack Legitimate Business Infrastructure for Malware Hosting
A dangerous cybercrime feedback loop has emerged where stolen credentials from infostealer malware enable attackers to hijack legitimate business websites and turn them into malware distribution platforms. Recent research by the Hudson Rock Threat Intelligence Team reveals this self-sustaining cycle…
Final Encore Episode – Research, Cybersecurity Awareness and Training
In this episode, host Jim Love discusses the importance of cybersecurity awareness and training, featuring insights from Michael Joyce of the Human-Centric Cybersecurity Partnership at the University of Montreal and David Shipley of Beauceron Security. They explore the impact of…
What is Enterprise Identity — And Why Most Companies Get SSO & RBAC Catastrophically Wrong
Authentication requirements block 75-80% of enterprise deals, costing B2B SaaS companies millions annually. After scaling identity to 1B+ users while supporting hundreds of enterprise customers, here’s why most companies get SSO and RBAC catastrophically wrong—and the framework that actually works.…
IT Security News Hourly Summary 2026-01-03 03h : 4 posts
4 posts were published in the last hour 2:2 : Why are IT leaders optimistic about future AI governance 2:2 : How do Agentic AI systems deliver value in real-time operations 2:2 : How capable are current secrets rotation systems…
Why are IT leaders optimistic about future AI governance
Are Machine Identities the Key to Strengthening AI Governance? How do organizations effectively manage the security of their infrastructure while fostering innovation through artificial intelligence? One answer lies in the management of Non-Human Identities (NHIs)—the machine identities that play a…
How do Agentic AI systems deliver value in real-time operations
The Role of Non-Human Identities in Real-Time Operations What role do Non-Human Identities (NHIs) play in optimizing real-time operations across various industries? Where Agentic AI and similar technologies are reshaping operational, understanding the intricate dance between machine identities and secure…
How capable are current secrets rotation systems in preventing breaches
How Does Effective NHI Management Enhance Breach Prevention Strategies? What are organizations doing to protect against breaches caused by compromised Non-Human Identities (NHIs) and secrets? Where enterprises increasingly transition to cloud environments, the management of NHIs has become a critical…
Are investments in Privileged Access Management justified by results
Are PAM Investments Justified in the Realm of Non-Human Identities? What makes investing in Privileged Access Management (PAM) truly worthwhile when we focus on the management of Non-Human Identities (NHIs)? While we navigate intricate cybersecurity, ensuring robust access controls has…