A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning…
Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Hackers Linked to China Install StormEncryptor Ransomware
Threat actor links to China Microsoft has revealed that a financially motivated hacker linked to China, called Storm-1175 has installed an earlier…
Surfshark vs NordVPN: Which VPN Is Better in 2026?
Compare Surfshark vs NordVPN for security, speed, pricing, streaming, privacy, and device support to find the VPN that best fits your needs.
Five Healthcare Organizations Report Data Breaches
Five small healthcare organizations across the United States have reported data breaches exposing patient protected health information, with incidents…
2.86 Billion Credentials Flood Criminal Markets as Enterprise Access Moves Upmarket
Stolen login data is so abundant that criminal markets can sell it for almost nothing. Meanwhile, verified entry into large companies commands far higher…
Akira ransomware scum blocked victim’s security tools – and broke their own encryptor
Gives a whole new meaning to Safe Mode
Microsoft Defender ShieldBreak zero-day
A new zero-day vulnerability affecting Microsoft Defender has been publicly disclosed by a threat actor called Nightmare Eclipse.
7 Best SIEM Tools & Software for 2026
Find the best security information and event management (SIEM) tool for your organization. Compare the top solutions now.
Signal launches Automatic Key Verification
Signal has introduced Automatic Key Verification (AKV), a new security feature that helps detect if someone has secretly tampered with encryption keys to…
Fake CCleaner Download Installs GhostDesk Chrome Spyware on Windows PCs
Windows users looking for a familiar cleanup utility are being steered toward a convincing counterfeit download page. The file they receive installs…
Deepfake identity fraud arrest in Spain
Spanish National Police have arrested a suspect in Murcia for allegedly using deepfake technology to defeat video-based identity verification systems.
13-Minute WindRelay Malware Attack Uses SpyNote RAT and NFC Relay Malware to Drain Victim Accounts
A new Android fraud operation shows how quickly a convincing phone call can turn into financial loss. The campaign combines the SpyNote remote-control…
OpenAI Launches GPT-5.6-Cyber Model
OpenAI has introduced GPT-5.6-Cyber, a specialized artificial intelligence model tailored for cybersecurity use cases.
IT Security News Hourly Summary 2026-08-12 15h : 13 posts
13 posts were published in the last hour 12:31 : Think Hotel Wi-Fi Is Safe? Hackers Have Several Ways to Prove You Wrong 12:31 : NIST Seeks Public Input on AI-Ready NVD Modernization 12:31 : CISA Warns Critical Metabase SQL…
Think Hotel Wi-Fi Is Safe? Hackers Have Several Ways to Prove You Wrong
For many travelers, connecting to hotel Wi-Fi is one of the first things they do after checking in. But while some guests use the network for banking and…
NIST Seeks Public Input on AI-Ready NVD Modernization
The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research
CISA Warns Critical Metabase SQL Injection Flaw Lets Unauthenticated Attackers Gain Admin Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical SQL injection vulnerability in Metabase, adding it to its Known…
This Coin-Sized Device Can Hack a Boeing 737
Security researchers found that in less than 60 seconds, they could open a hatch on a plane’s exterior, plug in a tiny device, and redirect the aircraft’s…
Hackers Exploit Critical VMware vCenter Flaw to Deploy Reverse SSH Across 47 Countries
Threat researchers have identified an active campaign exploiting the critical VMware vCenter vulnerability CVE-2026-59310, with 361 victim IP addresses…
CAV3RN Uses Google Apps Script as C2 Relay to Hide Malware Traffic Behind Google Infrastructure
CAV3RN is a modular espionage framework that is becoming harder to see on a network. Its newest communication component hides remote-control traffic…
Fake VPN Extensions Put Operators in Adversary-in-the-Middle Position Over Chrome Traffic
A Chrome Web Store operation that turns “free VPN” extensions into browser-wide traffic relays controlled by a single proxy provider. The campaign…
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully…
Ceva Logistics Operations Disrupted by Cyberattack
Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers.