I received the two emails below earlier in the month. They’re vaguely coherent. I suppose I shouldn’t be surprised that the corpus that AIs are training…
ShinyHunters claims another health giant breach, PaperCut rushes second emergency patch, US bans foreign grid tech
Shiny Hunters Claims 284M McKesson Records Stolen, PaperCut Patch Bypassed Again, and White House Bans Foreign Power Grid Tech Host David Shipley covers…
Hackers Abuse Legitimate IT Management Tool to Sneak Into Business Networks
Cybersecurity researchers at Huntress have uncovered a phishing campaign that abuses Faronics Deploy, a legitimate endpoint management platform used by…
Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration
Application security vendor Black Duck has launched its Signal vulnerability scanning engine as an MCP server in the Claude Directory, giving developers…
Wiz Finds Active LiteLLM and MCP Attacks Targeting AI Infrastructure
Wiz observed active attacks on LiteLLM and MCP servers, including credential theft, cryptomining, command execution, and prompt injection.
New ‘Knight Office’ Phishing Kit Steals Microsoft 365 Logins Without Touching a Password
A newly identified phishing-as-a-service kit is being used to hijack Microsoft 365 accounts by stealing victims’ active login sessions rather than their…
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious installers. “The campaign has…
KnowBe4 Names Kurt Mills as Channel Chief to Lead Next Phase of Partner-Led Growth
KnowBe4 has appointed cybersecurity channel veteran Kurt Mills as its new channel chief, as the company looks to strengthen its global partner ecosystem…
Anthropic Tightens Claude Security After Agents Access Live Systems
Anthropic adds real-time monitoring, hardened sandboxes, and stricter training controls after Claude agents accessed live computer systems during tests.
Fake Software Update Installs a Real Crypto Wallet – Rigged So It Can Never Open
Security researchers at Huntress have discovered a malware campaign that tricks victims into installing a real, fully functional copy of Exodus, a popular…
IT Security News Hourly Summary 2026-09-02 20h : 10 posts
10 posts published in the last hour 17:31Hackers Target US and EU Firms With Microsoft 365 Session Hijacking and RMM Abuse 17:31Google Launches Gemini 3.8 Flash Cyber to Identify and Auto-Patch Security Vulnerabilities 17:31GitSpawn Flaws Let Malicious Repositories Execute Code…
Hackers Target US and EU Firms With Microsoft 365 Session Hijacking and RMM Abuse
A wave of cyberattacks across the US and Europe in August exploited the trust businesses place in everyday tools, turning Microsoft 365 logins,…
Google Launches Gemini 3.8 Flash Cyber to Identify and Auto-Patch Security Vulnerabilities
Google has unveiled Gemini 3.8, its latest reasoning and coding model family, introducing a specialized variant called Gemini 3.8 Flash Cyber that is…
GitSpawn Flaws Let Malicious Repositories Execute Code in Claude Code, Codex, Cursor, and Grok
A newly disclosed class of vulnerabilities, dubbed GitSpawn, allows a booby-trapped repository to silently execute code on a developer’s machine the…
Dropbox Says 5,000 Accounts Were Compromised Through Lenovo ID Authentication Flaw
Dropbox has disclosed that approximately 5,000 user accounts were compromised in August after attackers exploited a weakness involving its Lenovo ID…
Firefox on iPhone Can Now Block Ads and Trackers Without Installing an Extension
Mozilla has introduced a built-in Ad Blocker for Firefox on iOS, allowing iPhone users to block many third-party advertisements and ad-related trackers…
How to Write Bug Bounty Report That Gets Paid (2026)
By HOC Team | Last updated: September 02, 2026 | Read time: ~28 min How to Write a…
FBI Investigates Dark Web Service Offering 153 Million Driver’s Licenses
The FBI has opened an investigation into an apparent breach involving identity verification provider IDScan.net after a newly launched dark web service…
Threat Intelligence: Definition, Benefits, and Use Cases
Security teams rarely struggle because they lack data. More often, the challenge is deciding which signals actually deserve attention. Modern security…
Hackers Hijack BGP Routes to Deliver Malicious Virtualizor Update
Hijackers compromised network routes used by Softaculous and redirected traffic to servers where they distributed a rogue Virtualizor update to a limited…
IT Security News Hourly Summary 2026-09-02 19h : 8 posts
8 posts published in the last hour 16:31CrowdStrike Delivers the Next Evolution of the Agentic SOC 16:31Tech support scams look different now. Here’s what to watch for 16:31CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks 16:31SonicWall’s SMA1000 boxes…
CrowdStrike Delivers the Next Evolution of the Agentic SOC
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Delivers the Next Evolution of the Agentic SOC
Tech support scams look different now. Here’s what to watch for
Tech support scams have evolved beyond fake virus warnings. Here’s how scammers reach their targets now, and how to stay safe.
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks