GitLab has released patches for two vulnerabilities, including a critical-severity code injection flaw that can be exploited without authentication. The…
IT Security News Hourly Summary 2026-08-18 14h : 15 posts
15 posts published in the last hour 11:31Asruex Trojan Found Embedded in GEEKOM Mini PC Realtek Ethernet Driver 11:31Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud 11:31Be careful what you put in “anyone with…
Asruex Trojan Found Embedded in GEEKOM Mini PC Realtek Ethernet Driver
GEEKOM has confirmed that a malware-flagged Realtek LAN driver package was previously accessible through an outdated support page for its mini PCs,…
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the…
Be careful what you put in “anyone with the link” Google Docs
As one developer found out when his Google Doc containing company passwords showed up in Google search results.
Cyber Incident Disrupts Student Services at UT San Antonio
UT San Antonio has taken IT systems offline following a cyber incident, disrupting student registration and tuition payments days before term is due to…
Apple Addresses 28 Security Flaws Across macOS, iOS, and iPadOS
Apple has released security updates for iPhones, iPads, and Macs to address 28 vulnerabilities across its latest operating systems. These updates, issued…
Inside Astaroth’s New Spambot Component
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Inside Astaroth’s New Spambot Component
LLMs and Contextual Integrity
I have been thinking a lot about AI and integrity. Part of that is contextual integrity. I recently found two papers on the topic. “ CIMemories: A…
Heights Finance data breach: What customers need to know
Leaked personal and financial data of around 750,000 US citizens, including SSNs and bank details, could put victims at risk of identity theft and…
JWR Phishing-as-a-Service Kit Uses WebSockets and AES to Run Real-Time Banking Fraud
JWR, an undocumented phishing-as-a-service (PhaaS) framework that turns conventional credential theft into an operator-led, real-time banking and payment…
Can AI Coexist With Privacy? Proton’s Andy Yen Says It Will Have To
Proton’s CEO is a champion of encryption for everyone. So why is he going all in on un-encryptable AI?
300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw
Tracked as CVE-2026-15748, the arbitrary file upload bug allows unauthenticated attackers to upload executable files.
AI Agents Gain Unintended Internet Access During Cybersecurity Evaluations
AI security evaluation firm has disclosed that several frontier AI models unintentionally accessed and acted against real internet-connected systems…
Proton launches free tool to show enterprises what ChatGPT and Claude know about employees
Privacy-focused tech company Proton has launched a free tool designed to show users exactly what large language models such as ChatGPT and Claude have…
CISA Warns of Active Exploitation of Ray-Project Ray Code Injection Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability to its Known Exploited Vulnerabilities (KEV) catalog.…
IT Security News Hourly Summary 2026-08-18 13h : 11 posts
11 posts published in the last hour 10:31Three-quarters of Ransomware Attacks Target Mid-Market Firms 10:31The Cop Who Took On Flock 10:31Uber Eats To Work With Zipline On Drone Deliveries 10:31VMware vCenter Attackers Drop JSP Webshell Disguised as Performance Update 10:31Kimsuky…
Three-quarters of Ransomware Attacks Target Mid-Market Firms
Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit
The Cop Who Took On Flock
After Noel Pichardo called out his city’s embrace of Flock surveillance cameras, he was subjected to five internal affairs investigations in less than two…
Uber Eats To Work With Zipline On Drone Deliveries
Uber Eats to offer food deliveries via drone that lowers items to ground in delivery pod from hundreds of feet in the air
VMware vCenter Attackers Drop JSP Webshell Disguised as Performance Update
A fast-moving campaign is turning a VMware vCenter flaw into a route to full control of virtual infrastructure. Attackers are abusing CVE-2026-59310, a…
Kimsuky Uses Local AI Development Environment to Expand Cyber Espionage Tooling in Operation GitPower
North Korean state-backed threat actor Kimsuky is extending its established espionage playbook with locally hosted artificial intelligence tooling,…
Critical WordPress Plugin Vulnerability Exposes 600,000 Sites to File Upload Attacks
A critical security flaw in the Forminator Forms WordPress plugin could allow unauthenticated attackers to upload malicious PHP files, potentially…
OpenAI tightens defenses after AI agents breach research environment
Following the OpenAI-Hugging Face incident, in which an agentic collective autonomously penetrated OpenAI’s research infrastructure and another company’s…