Frederick the Great warned us centuries ago: “He who defends everything, defends nothing.” Yet in 2026, most enterprise networks are still in the same flat network soup: EMR systems, payroll databases, industrial controllers, and guest WiFi all share the same…
DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth Espionage
Ukrainian entities have emerged as the target of a new campaign likely orchestrated by threat actors linked to Russia, according to a report from S2 Grupo’s LAB52 threat intelligence team. The campaign, observed in February 2026, has been assessed to…
UK: Companies House Web Glitch Exposes Corporate Details to Fraudsters
An issue with the Companies House website has put the personal and corporate information of millions at risk This article has been indexed from www.infosecurity-magazine.com Read the original article: UK: Companies House Web Glitch Exposes Corporate Details to Fraudsters
Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack
Warlock continues to enhance its attack chain with new tactics to improve persistence, lateral movement, and defense evasion using an expanded toolset: TightVNC Yuze, and a persistent BYOVD technique leveraging the NSec driver. This article has been indexed from Trend…
IBM Discovers ‘Slopoly’ AI-Generated Malware Linked to Hive0163 Ransomware
Ransomware group Hive0163 is experimenting with a likely AI-generated malware framework, dubbed “Slopoly,” marking a visible shift toward AI-assisted tooling in attacks. While the malware itself is simple, its use shows how quickly threat actors can now generate and iterate…
KEEQuant advances chip-scale QKD for telecom, data centers, and critical infrastructure
KEEQuant has announced its commercial chip-scale QKD technology, marking an advance in quantum-secure communications. The system replaces bulky optical assemblies with photonic integration, lowering the cost and complexity of quantum key distribution and making quantum-safe key exchange a practical upgrade…
Hackers tried to breach Poland’s nuclear research centre
Poland’s National Centre for Nuclear Research (NCBJ) thwarted a cyberattack targeting its IT infrastructure. The attempted intrusion was detected and blocked before attackers could compromise systems or disrupt operations. “No production, operational, or research processes were disrupted, and the MARIA…
‘100 Video Calls Per Day’: Models Are Applying to Be the Face of AI Scams
Dozens of Telegram channels reviewed by WIRED include job listings for “AI face models.” The (mostly) women who land these gigs are likely being used to dupe victims out of their money. This article has been indexed from Security Latest…
Google Looker Studio Vulnerabilities Allow Attackers to Exfiltrate Data from Google Services
A set of nine novel cross-tenant vulnerabilities in Google Looker Studio, collectively dubbed “LeakyLooker,” that could have allowed attackers to run arbitrary SQL queries, exfiltrate sensitive data, and even modify or delete records across Google Cloud environments, all without victims…
What the Recent PayPal Breach Says About Modern Web Risk
TL;DR A coding flaw in PayPal’s loan app went undetected for nearly six months, exposing sensitive customer data — not because prevention controls failed catastrophically, […] The post What the Recent PayPal Breach Says About Modern Web Risk appeared first…
Google Fixes Two Actively Exploited Chrome Zero-Day Flaws
Google has released an out-of-band Chrome update to fix two high-severity zero-day vulnerabilities being actively exploited in the wild. Thank you for being a Ghacks reader. The post Google Fixes Two Actively Exploited Chrome Zero-Day Flaws appeared first on gHacks.…
Fake FileZilla Downloads Spread RAT via Stealthy Multi-Stage Loader
Fake FileZilla downloads are being used to deliver a stealthy Remote Access Trojan (RAT) through a multi‑stage loader, putting careless downloaders at high risk of compromise. Attackers have set up a fake website that closely copies the look and layout…
Unprivileged users could exploit AppArmor bugs to gain root access
Researchers found nine “CrackArmor” flaws in Linux AppArmor that could let unprivileged users bypass protections, gain root privileges, and weaken container isolation. Qualys researchers disclosed nine vulnerabilities, collectively tracked as CrackArmor, in the Linux kernel’s AppArmor module. The flaws have…
Hacking Attempt Reported at Poland’s Nuclear Research Center
Initial evidence indicates Iran may be behind the attack, but officials admitted it could be a false flag. The post Hacking Attempt Reported at Poland’s Nuclear Research Center appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
45,000 malicious IP addresses taken down, 94 suspects arrested
An international law enforcement operation has taken down more than 45,000 malicious IP addresses and servers linked to phishing, malware, and ransomware activity. The action was carried out as part of Operation Synergia III, an investigation that ran from July…
Grammarly Withdraws Editing Feature That Impersonated Authors
Editing tool Grammarly withdraws feature that offered revision advice supposedly in the style of famous authors, without their consent This article has been indexed from Silicon UK Read the original article: Grammarly Withdraws Editing Feature That Impersonated Authors
JSOC IT’s AUTOPSY platform puts security stacks under live API verification
JSOC IT has announced the launch of AUTOPSY, a security verification platform that investigates an organization’s security stack through live API integrations before a breach occurs, rather than after one forces the conversation. The platform’s flagship product, READY, is a…
Massive 1 GW Data Centre Planned For North Lincolnshire
Elsham Tech Park project gains planning permission for one of UK’s largest AI complexes on farmland adjacent to former RAF base This article has been indexed from Silicon UK Read the original article: Massive 1 GW Data Centre Planned For…
What Are Your DDoS Testing Options in 2026?
No modern business can afford to ignore the threat of DDoS attacks. For many enterprises, reliable online services are critical to operations and reputation—while attackers continue to refine their tools and tactics. As a result, security teams can’t simply assume…
Instagram Will Remove End-to-End Encryption for Messages in May 2026
Instagram has confirmed it will remove end-to-end encryption from direct messages on May 8, 2026. Thank you for being a Ghacks reader. The post Instagram Will Remove End-to-End Encryption for Messages in May 2026 appeared first on gHacks. This article…
Google Patches Two Chrome Zero-Day Vulnerabilities Exploited in Active Attacks
Google has released an out-of-band Chrome update to fix two high-severity zero-day vulnerabilities being actively exploited in the wild. Thank you for being a Ghacks reader. The post Google Patches Two Chrome Zero-Day Vulnerabilities Exploited in Active Attacks appeared first…
IT Security News Hourly Summary 2026-03-16 09h : 6 posts
6 posts were published in the last hour 7:34 : ACRStealer Variant Deploys Syscall Evasion, TLS C2, Secondary Payloads 7:34 : A week in security (March 9 – March 15) 7:34 : Royal Bahrain Hospital breach, Canada’s Loblaw breached, New…
ACRStealer Variant Deploys Syscall Evasion, TLS C2, Secondary Payloads
New research reveals that a new ACRStealer variant is now being actively deployed as a final payload by HijackLoader, using low‑level syscalls, AFD-based networking, TLS C2, and flexible secondary payload delivery to evade detection and maximize data theft. The newly…
A week in security (March 9 – March 15)
A list of topics we covered in the week of March 9 to March 15 of 2026 This article has been indexed from Malwarebytes Read the original article: A week in security (March 9 – March 15)