Once your multi-agent system (Parts 6-8) is functionally solid, the question that comes up in every enterprise security review is the same: how do you know an agent is only doing what it’s authorized to do, over a network path…
Apple says former employee exploited ‘rare’ bug to download confidential files after leaving for OpenAI
Apple would not comment on the “security breach,” which allegedly allowed a former employee to download sensitive files from Apple’s network long after he departed the company for rival OpenAI. This article has been indexed from Security News | TechCrunch…
Lidl Notified Online Shop Customers in Germany, Belgium, and the Netherlands of a Data Breach
Lidl disclosed a third-party data breach affecting online shop customers in Germany, Belgium, and the Netherlands. Payment data was not exposed. Lidl contacted customers of its online shop in Germany, Belgium, and the Netherlands last week to inform them that…
IT Security News Hourly Summary 2026-07-13 21h : 3 posts
3 posts were published in the last hour 19:4 : Meta Removes Muse Image Instagram Feature After Consent Backlash 19:4 : U.S. CISA adds a Cisco IOS flaw to its Known Exploited Vulnerabilities catalog 18:34 : Machine Identity Debt: Why…
Meta Removes Muse Image Instagram Feature After Consent Backlash
Meta scrapped a Muse Image feature days after launch following backlash over consent, privacy, and the use of public Instagram photos. The post Meta Removes Muse Image Instagram Feature After Consent Backlash appeared first on TechRepublic. This article has been…
U.S. CISA adds a Cisco IOS flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Cisco IOS flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco IOS flaw, tracked as CVE-2008-4128, to its Known Exploited Vulnerabilities (KEV) catalog.…
Machine Identity Debt: Why Human Identity Is No Longer Cloud Security’s Primary Boundary
Cloud-native systems now create far more machine identities than human ones. Security strategies built around workforce identity are no longer sufficient. Here’s what engineering leaders should build instead. The Breach That Didn’t Need a Password On August 8, 2025, a…
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history collector built into its official store version. The collector was dormant. An empty allow-list kept…
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that’s capable of harvesting sensitive data from compromised systems. Unlike other information stealers that are built on AppleScript droppers or Objective-C-based wrappers, CrashStealer is implemented in native C++, according…
Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID
Microsoft Entra ID makes passkeys the default sign-in experience and introduces a new model for SMS and voice authentication. Read about how to prepare. The post Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID…
New macOS Stealer Mimics Apple’s Crash Report Framework to Steal Browser Credentials
CrashStealer, a native C++ macOS infostealer that disguises itself as Apple’s built-in crash-reporting utility to harvest browser credentials, cryptocurrency wallets, password manager data, and keychain contents before encrypting and exfiltrating everything to a remote command-and-control server. Jamf first spotted a…
Hackers breach Lidl’s IT service provider, steal customer data
German discount supermarket chain Lidl has notified customers in Germany, Belgium, and the Netherlands that customer data was stolen after attackers breached one of its IT service providers. In notices published on its support websites in Belgium and the Netherlands,…
Compromised Jscrambler npm Releases Target Developer Environments with Cross-Platform Rust Infostealer
Developers and organizations using the Jscrambler npm package are being urged to audit their systems after multiple malicious releases were uploaded to the npm registry through a compromised publishing credential. The incident transformed a trusted development dependency into a…
Hackers find a new trick to collect Microsoft Entra user data without raising red flags
Organizations should check their logs for signs of an increasingly popular obfuscation technique, Proofpoint said. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Hackers find a new trick to collect Microsoft Entra user…
US authorities warn that state-linked hackers are targeting vulnerable networking devices
Hackers linked to Russian intelligence have exploited vulnerabilities in Cisco Smart Install devices. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: US authorities warn that state-linked hackers are targeting vulnerable networking devices
IT Security News Hourly Summary 2026-07-13 18h : 13 posts
13 posts were published in the last hour 16:2 : EU and UK officially blame Russian spies for cyberattack on Poland’s power grid 16:2 : Counterfeit USB Drives Spread China-Linked Virus in Japan’s Military 16:2 : Zimbra Urges Immediate Update…
EU and UK officially blame Russian spies for cyberattack on Poland’s power grid
Sweeping sanctions and condemnation follow op that could have left half a million without power in the depths of winter This article has been indexed from www.theregister.com – Articles Read the original article: EU and UK officially blame Russian spies…
Counterfeit USB Drives Spread China-Linked Virus in Japan’s Military
Counterfeit USB flash drives supplied to Japan’s Ground Self-Defense Force (JGSDF) in March 2024 spread a China-linked computer virus across secure military networks for nearly a year before the breach was finally detected. The incident, first reported by Japan’s…
Zimbra Urges Immediate Update to Fix Critical Classic Web Client XSS Vulnerability
Zimbra has released a security update to address a critical vulnerability in the Zimbra Classic Web Client that could allow malicious actors to compromise user accounts and execute unauthorized code. The company recommends that customers install the latest update…
Lessons Learned from CISA’s Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months…
NSA Urges Organizations to Disable Cisco Smart Install as Russian Hackers Target Routers
The National Security Agency, alongside 17 international partner agencies, released a joint Cybersecurity Advisory on July 9, 2026, warning that Russian state-sponsored actors continue to exploit vulnerable and poorly configured network infrastructure across critical sectors. The advisory, titled “Improve Router…
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email
Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite what it thinks it knows about you. A single email can trick that agent into saving a false “fact” about…
⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That’s supposed to be the good news. The catch is that the attackers have the same tools, pointed the other way, and they…
Open Directory Exposes Three Evilginx Phishing Operators
Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA This article has been indexed from www.infosecurity-magazine.com Read the original article: Open Directory Exposes Three Evilginx Phishing Operators