watchTowr announced major capability enhancements, including the launch of Active Defense, a new capability that closes the gap between discovery and protection. Active Defense delivers automated, intelligence-driven protection the moment a validated exposure is identified, providing defenders with near-instant coverage…
New Black Kite module delivers product-level insight into software supply chain vulnerabilities
Black Kite released its new Product Analysis module, which allows security teams to evaluate the risks of third-party software products at a granular level. As the first TPRM platform to offer this capability, Black Kite provides a more detailed view…
Goodbye, dark Telegram: Blocks are pushing the underground out
Kaspersky researchers analyze changes in the lifespan of a shadow Telegram channel, blocks, and migration to other platforms. This article has been indexed from Securelist Read the original article: Goodbye, dark Telegram: Blocks are pushing the underground out
UK NCSC Raises Alarms Over Prompt Injection Attacks
The UK’s National Cyber Security Centre has warned of the dangers of comparing prompt injection to SQL injection This article has been indexed from www.infosecurity-magazine.com Read the original article: UK NCSC Raises Alarms Over Prompt Injection Attacks
IT Security News Hourly Summary 2025-12-09 12h : 11 posts
11 posts were published in the last hour 11:2 : New BYOVD loader behind DeadLock ransomware attack 11:2 : Gartner: Carmakers’ AI Investments Set For Sharp Decline 11:2 : Polish Police arrest 3 Ukrainians for possessing advanced hacking tools 11:2…
New BYOVD loader behind DeadLock ransomware attack
Cisco Talos has uncovered a new DeadLock ransomware campaign using a previously unknown BYOVD loader to exploit a Baidu Antivirus driver vulnerability, letting threat actors disable EDR defenses and escalate attacks. This article has been indexed from Cisco Talos Blog…
Gartner: Carmakers’ AI Investments Set For Sharp Decline
Gartner predicts only 5 percent of auto manufacturers to maintain ambitious AI investments by 2029, down from 95 percent today This article has been indexed from Silicon UK Read the original article: Gartner: Carmakers’ AI Investments Set For Sharp Decline
Polish Police arrest 3 Ukrainians for possessing advanced hacking tools
Poland arrested three Ukrainian nationals accused of using hacking devices to target IT systems and obtain sensitive defense-related data. Polish police arrested three Ukrainian nationals for allegedly trying to damage IT systems and obtaining sensitive defense-related data using advanced hacking…
Equixly Raises $11 Million for AI-Powered API Penetration Testing
The Italian startup will use the investment to build proprietary AI models, accelerate global expansion, and hire new talent. The post Equixly Raises $11 Million for AI-Powered API Penetration Testing appeared first on SecurityWeek. This article has been indexed from…
EU Moves Toward Resolution Of Meta Data-Collection Probe
European Commission says Meta changes that use less personalised data ‘good step forward’ as probe moves toward conclusion This article has been indexed from Silicon UK Read the original article: EU Moves Toward Resolution Of Meta Data-Collection Probe
CISA Warns of D-Link Routers Buffer Overflow Vulnerability Exploited in Attacks
A critical buffer overflow vulnerability affecting D-Link routers has been added to the CISA catalog of Known Exploited Vulnerabilities, indicating active exploitation in the wild. The flaw, tracked as CVE-2022-37055, poses severe risks to organizations and enterprise networks relying on…
New Multi-stage JS#SMUGGLER Malware Attack Delivers ‘NetSupport RAT’ to Gain Full System Control
A new malware campaign using multiple attack stages has been discovered that delivers NetSupport RAT through hidden web-based redirects and obfuscated code. The attack unfolds in three stages, starting with a JavaScript loader injected into compromised websites. This first stage…
Operation FrostBeacon Attacking Finance and Legal Departments with Cobalt Strike Malware
A sophisticated malware campaign has emerged targeting financial and legal sectors in the Russian Federation, delivering the notorious Cobalt Strike remote access tool to organizations handling sensitive business transactions. Security researchers have identified over twenty initial infection files involved in…
Authorities Arrested Hackers With Specialized FLIPPER Hacking Equipment Used to Attack IT Systems
Authorities in Warsaw have arrested three suspected hackers found carrying specialized FLIPPER hacking equipment. Other tools are allegedly intended to attack IT and telecommunications systems. The suspects, all Ukrainian citizens aged 43, 42, and 39, were detained during a routine…
AI-Powered Free Security-Audit Checklist for 2026 – ISO 27001, SOC 2, NIST, NIS 2 and GDPR Compliance
In many companies, audit preparation in 2025 still feels like 2005: Excel lists, scattered evidence, copy & paste from old answers, long coordination loops. At the same time, requirements are increasing – ISO 27001:2022, SOC 2, NIST CSF, NIS 2,…
UK finally vows to look at 35-year-old Computer Misuse Act
As Portugal gives researchers a pass under cybersecurity law Portugal has become the latest country to carve out protections for researchers under its cybersecurity law.… This article has been indexed from The Register – Security Read the original article: UK…
US To Permit Nvidia To Ship H200 To China
US Commerce Department expected to allow Nvidia to ship H200 AI accelerator chips to China in major lobbying win This article has been indexed from Silicon UK Read the original article: US To Permit Nvidia To Ship H200 To China
Whitehall rejects £1.8B digital ID price tag – but won’t say what it will cost
Officials insist OBR relied on ‘early estimate’ and real figure won’t emerge until next year The head of the department delivering the UK government’s digital identity scheme has rejected the £1.8 billion cost forecast by the Office for Budget Responsibility…
Over 300,000 Individuals Impacted by Vitas Hospice Data Breach
Vitas, the largest for-profit hospice chain in the United States, discovered a cybersecurity intrusion in October. The post Over 300,000 Individuals Impacted by Vitas Hospice Data Breach appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware
Canadian organizations have emerged as the focus of a targeted cyber campaign orchestrated by a threat activity cluster known as STAC6565. Cybersecurity company Sophos said it investigated almost 40 intrusions linked to the threat actor between February 2024 and August…
ByteDance Limits Mobile AI Agent After Pushback
ByteDance restricts capabilities of Doubao AI agent built into new smartphone, after major platforms block it This article has been indexed from Silicon UK Read the original article: ByteDance Limits Mobile AI Agent After Pushback
Gartner Calls For Pause on AI Browser Use
Gartner has called for organizations to block today’s AI browsers on security concerns This article has been indexed from www.infosecurity-magazine.com Read the original article: Gartner Calls For Pause on AI Browser Use
Chinese Open-Source AI Shows Huge Rise This Year
Chinese open-source AI models account for nearly 30 percent of worldwide generative AI tokens, a sharp rise since late 2024 This article has been indexed from Silicon UK Read the original article: Chinese Open-Source AI Shows Huge Rise This Year
Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data
Cybersecurity researchers have discovered two new extensions on Microsoft Visual Studio Code (VS Code) Marketplace that are designed to infect developer machines with stealer malware. The VS Code extensions masquerade as a premium dark theme and an artificial intelligence (AI)-powered…