A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock websites and online services offline. Researchers at QiAnXin’s XLab have tracked it since February…
Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data
New Microsoft research shows how attackers can hijack AI agents that act on a user’s behalf, using nothing more than a poisoned tool description to make the agent quietly hand over company data to an outsider. The trick is that the agent…
libssh2 CVE-2026-55200 Shows Why Outbound SSH Is an Attack Surface
The critical libssh2 CVE-2026-55200 flaw inverts SSH security: the remote server attacks the connecting client, no credentials needed. A public PoC is out and the official patched release has not shipped. libssh2 CVE-2026-55200 Shows Why Outbound SSH Is an Attack…
New EvilTokens Attack Exposes Browser Visibility Gap in Enterprise SOCs
EvilTokens phishing hides takeover clues until browser execution leaving SOC teams needing deeper visibility to validate threats faster and reduce account risk. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original…
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote code execution (RCE) vulnerability…
Modern Enterprises: How to Evaluate the Security and Compliance of Office Software
Learn how modern businesses can judge office software for ISO 27001 certification, GDPR-aligned data handling, encryption, and safer PDF workflows with clarity. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original…
Huntress CEO says threat hunter used ‘poor judgment’ in alerting ransomware crim about law enforcement probe
Ex-employee claims this ‘meets the definition of an insider threat’ This article has been indexed from www.theregister.com – Articles Read the original article: Huntress CEO says threat hunter used ‘poor judgment’ in alerting ransomware crim about law enforcement probe
Hackers Steal Data of 4.38 Million Aflac Japan Customers
Hackers stole data from 4.38 million Aflac Japan customers after accessing its systems for 10 days before the breach was detected. Aflac Japan disclosed that hackers stole the personal information of 4.38 million customers and agents after gaining access to…
A Defining Moment in Identity Security
Artificial intelligence (AI) is changing the enterprise faster than most security models were built to handle. In just a few years, it has become part of everyday enterprise work. And soon, AI … The post A Defining Moment in Identity…
New BioShocking Attack Allows Attackers to Trick AI Browser and Leak Credentials
A newly disclosed attack technique dubbed “BioShocking” is raising concerns across the cybersecurity community after researchers demonstrated that AI-powered browsers can be manipulated to leak sensitive data and bypass built-in safety controls. Security researchers at LayerX revealed that attackers can…
False Positive or First Sign of a Breach? How Tier 1 SOC Analysts Can Tell the Difference Faster
Imagine a Tier 1 analyst receiving an alert: an employee’s laptop has connected to an unfamiliar domain. The detection is not dramatic. No ransomware note. No obvious malware verdict. No endpoint isolation. Just a domain, an IP address, a timestamp, and a medium-severity…
Securing AI agents: When AI tools move from reading to acting
MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool descriptions to trigger unauthorized actions, and how to detect, contain, and prevent it. The post Securing AI agents: When AI…
What’s new in Microsoft Security: June 2026
This month’s updates help security and IT teams strengthen identity and multicloud foundations, protect data wherever it lives, and secure the developer workflows powering AI innovation. The post What’s new in Microsoft Security: June 2026 appeared first on Microsoft Security…
Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day
Nissan says employees’ data was stolen via the Oracle PeopleSoft zero-day campaign This article has been indexed from www.infosecurity-magazine.com Read the original article: Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day
DHS proposes new system for public-private infrastructure security collaboration
The Trump administration eliminated the previous framework in 2025, sparking backlash from experts and infrastructure operators. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: DHS proposes new system for public-private infrastructure security collaboration
Critical flaw in SimpleHelp exploited in attacks targeting sensitive credentials
Researchers found two previously undisclosed malware samples used to steal AI assistant tokens and other valuable secrets. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Critical flaw in SimpleHelp exploited in attacks targeting…
IT Security News Hourly Summary 2026-06-30 18h : 18 posts
18 posts were published in the last hour 16:3 : An Ingredient List Doesn’t Stop the Worm: What SBOMs Can and Can’t Do 16:3 : Nissan Americas Hit in Global Oracle PeopleSoft Data Breach 16:3 : Five Eyes Warns New…
An Ingredient List Doesn’t Stop the Worm: What SBOMs Can and Can’t Do
On March 28, 2024, a Microsoft engineer named Andres Freund noticed something almost nobody would have bothered chasing: SSH logins on a system he was benchmarking were taking 500 milliseconds instead of the usual 100. He ran a memory profiler…
Nissan Americas Hit in Global Oracle PeopleSoft Data Breach
The Vulnerability Hackers found a serious zero-day vulnerability in Oracle’s software, which is being listed as CVE-2026-35273, sparking entire waves of attacks. Security researchers have also linked UNC6240 to infrastructure… The post Nissan Americas Hit in Global Oracle PeopleSoft Data…
Five Eyes Warns New AI Models Pose Urgent Cyber Risk
The Five Eyes intelligence alliance has issued a stark warning that the latest generation of artificial intelligence could reshape the cyber threat landscape much faster than most organizations expect. In a joint advisory, intelligence and cybersecurity leaders from the…
GPT-5.6 Sol Debuts With Enhanced Cyber Protections, Limited to Trusted Partners
An open preview of OpenAI’s next-generation GPT-5.6 model family has been introduced under tight control, marking an important milestone in the advancement of frontier artificial intelligence with an equal emphasis on cybersecurity and responsible deployment. The release is anchored…
Post-Quantum Cryptography Readiness Becomes a Strategic Cybersecurity Priority for Enterprises
Though practical quantum computers may still be years away, organizations are already preparing for the security risks they could create. Post-quantum cryptography has shifted from research into real-world planning as experts warn current encryption could eventually become vulnerable. Rather…
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses when unsuspecting users initiate a transaction. The cryptocurrency clipper activity has been codenamed Silent Swap by McAfee Labs. “The campaign…
Critical SimpleHelp Vulnerability Exploited For Malware Delivery
Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware This article has been indexed from www.infosecurity-magazine.com Read the original article: Critical SimpleHelp Vulnerability Exploited For Malware Delivery