An analysis of 67,058 published vulnerabilities from 2025 finds 11,053, or 17%, are related to application programming interfaces (APIs). Conducted by Wallarm, the 2026 API ThreatStats Report also notes that 43% of the additions made in 2025 to the Known…
IT Security News Hourly Summary 2026-03-09 18h : 11 posts
11 posts were published in the last hour 16:14 : EV charger biz ELECQ zapped by ransomware crooks, customer contact data stolen 16:14 : Salt Typhoon is hacking the world’s phone and internet giants. Here’s everywhere that’s been hit. 16:14…
EV charger biz ELECQ zapped by ransomware crooks, customer contact data stolen
An attack on the company’s AWS platform may have exposed customers’ names and home addresses Exclusive ELECQ, maker of smart electric vehicle (EV) chargers, is warning customers that their personal details may have been stolen in a ransomware attack that…
Salt Typhoon is hacking the world’s phone and internet giants. Here’s everywhere that’s been hit.
Salt Typhoon is by far one of the most prolific hacking groups in recent years, breaching some of the top American phone companies. Here are all the countries that have been targeted. This article has been indexed from Security News…
Russian government hackers targeting Signal and WhatsApp users, Dutch spies warn
Dutch intelligence is accusing Russia-backed hackers of running a “large-scale global” hacking campaign against Signal and WhatsApp users. This article has been indexed from Security News | TechCrunch Read the original article: Russian government hackers targeting Signal and WhatsApp users,…
Russia-linked hackers target Signal, WhatsApp of officials globally
Russia-linked hackers are targeting Signal and WhatsApp accounts of government and military officials worldwide, warns Dutch intelligence. Dutch intelligence agencies (MIVD and AIVD) warn of a global campaign by Russia-linked threat actors aiming to compromise Signal and WhatsApp accounts. The…
Cybersecurity M&A Roundup: 42 Deals Announced in February 2026
Significant cybersecurity M&A deals announced by Check Point, Booz Allen, Proofpoint, Sophos, Palo Alto Networks, and Zscaler. The post Cybersecurity M&A Roundup: 42 Deals Announced in February 2026 appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
ConFoo 2026: Guardrails for Agentic AI, Prompts, and Supply Chains
Read the takeaways from ConFoo 2026, including putting guardrails where requests happen, auditing tool calls, treat dependency updates like production access. The post ConFoo 2026: Guardrails for Agentic AI, Prompts, and Supply Chains appeared first on Security Boulevard. This article…
UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device
The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to…
Trump Administration Unveils New Cyber Strategy for America
US national cyber strategy focuses on stronger defenses, countering threats, fostering innovation This article has been indexed from www.infosecurity-magazine.com Read the original article: Trump Administration Unveils New Cyber Strategy for America
Threat Actor Exploits Flaws and Uses Elastic Cloud SIEM to Manage Stolen Data
Huntress researchers uncover campaign exploiting vulnerabilities to steal data using Elastic Cloud as a data hub This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actor Exploits Flaws and Uses Elastic Cloud SIEM to Manage Stolen Data
TeST 2
TEST 2 This article has been indexed from CyberMaterial Read the original article: TeST 2
State-linked actors targeted US networks in lead-up to Iran war
Researchers found backdoors installed on U.S. company networks in the weeks prior to the U.S. and Israeli bombing campaign. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: State-linked actors targeted US networks in…
World Economic Forum Global Cybersecurity Outlook 2026: Key Takeaways for CISOs
Analysis of the World Economic Forum’s Global Cybersecurity Outlook 2026 report. Fortinet’s Carl Windsor highlights key findings on AI-driven threats, geopolitics, cyber resilience, and regulatory complexity that CISOs must address. This article has been indexed from CISO Collective Read…
USENIX Security ’25 (Enigma Track) – Trusted Hardware For Al Workloads: Extending Confidential Computing To Enable Al Adoption
Author, Creator & Presenter: Shannon Egan, Deep Science Ventures As companies race to adopt AI in new use cases, hardware vendors and cloud providers are developing the protocols to secure AI workloads with limited input from the broader security community.…
Encrypted Client Hello: Ready for Prime Time?, (Mon, Mar 9th)
Last week, two related RFCs were published: This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: Encrypted Client Hello: Ready for Prime Time?, (Mon, Mar 9th)
Security Risk Advisors Releases “The Purple Perspective 2026” Report
Philadelphia, PA, United States, 9th March 2026, CyberNewswire This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: Security Risk Advisors Releases “The Purple Perspective 2026” Report
M365Pwned – Red Team GUI Toolkit for Microsoft 365 Exploitation via Graph API
A red teamer operating under the handle OtterHacker has publicly released M365Pwned, a pair of WinForms GUI tools designed to enumerate, search, and exfiltrate data from Microsoft 365 environments using application-level OAuth tokens without requiring any user interaction. Built entirely…
Microsoft Launches Copilot Cowork, a New AI Feature in Microsoft 365 to Automate Tasks
Microsoft has introduced Copilot Cowork, a new AI-powered feature embedded within Microsoft 365 that moves beyond conversational assistance to autonomous task execution. Unlike traditional Copilot interactions focused on answering questions or drafting content, Cowork is designed to delegate, plan, and…
ECB Tightens Oversight of Banks’ Growing AI Sector Risks
The European Central Bank is intensifying its oversight of how eurozone lenders finance the fast‑growing artificial intelligence ecosystem, reflecting concern that the boom in data‑centre and AI‑related infrastructure could hide pockets of credit and concentration risk. In recent weeks,…
Researchers Find Critical Zero-Day Vulnerabilities in Foxit and Apryse PDF Platforms
PDF files are often seen as simple digital documents, but recent research shows they have evolved into complex software environments that can expose corporate systems to cyber risks. Modern PDF tools now function more like application platforms than basic…
AI-Powered Cybercrime Hits 600+ FortiGate Firewalls Across 55 Countries, AWS Warns
Cybercriminals using readily available generative AI tools managed to breach more than 600 internet-facing FortiGate firewalls across 55 countries within a little over a month, according to a recent incident analysis released by Amazon Web Services (AWS). The operation,…
Russian hackers crack into officials’ Signal and WhatsApp accounts
Russian state hackers are trying to break into Signal and WhatsApp accounts used by diplomats, military staff, and government officials worldwide, Dutch intelligence agencies warned. They believe journalists and other people who attract attention from Moscow may also be affected.…
⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware
Another week in cybersecurity. Another week of “you’ve got to be kidding me.” Attackers were busy. Defenders were busy. And somewhere in the middle, a whole lot of people had a very bad Monday morning. That’s kind of just how…