Cybersecurity researchers at ETH Zurich have disclosed a critical new Spectre-based attack called VMSCAPE that exploits incomplete branch predictor isolation in virtualized cloud environments. The attack, tracked as CVE-2025-40300, affects multiple generations of AMD and Intel processors and enables malicious virtual machines to…
Attackers are coming for drug formulas and patient data
In the pharmaceutical industry, clinical trial data, patient records, and proprietary drug formulas are prime targets for cybercriminals. These high-value assets make the sector a constant focus for attacks. Disruptions to research or medicine distribution can have life-threatening consequences. “During…
CISOs brace for a new kind of AI chaos
AI is being added to business processes faster than it is being secured, creating a wide gap that attackers are already exploiting, according to the SANS Institute. The scale of the problem Attackers are using AI to work at speeds…
Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories
A security weakness has been disclosed in the artificial intelligence (AI)-powered code editor Cursor that could trigger code execution when a maliciously crafted repository is opened using the program. The issue stems from the fact that an out-of-the-box security setting…
IT Security News Hourly Summary 2025-09-12 06h : 3 posts
3 posts were published in the last hour 4:3 : New infosec products of the week: September 12, 2025 3:33 : EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks 3:33 : Microsoft Teams Introduces Automatic Alerts for…
Cornwell Quality Tools Suffers Data Breach, 100,000 User Records Exposed
Cornwell Quality Tools, a leading automotive and industrial tool supplier, has confirmed a significant data breach that compromised the personal information of 103,782 individuals. The cybersecurity incident occurred on December 12, 2024, when unauthorized attackers gained access to the company’s…
Microsoft Exchange Online Outage for Users Accessing Email via Exchange Online Methods
Microsoft is investigating a significant Exchange Online service disruption that is preventing users in North and South America from accessing their mailboxes. The ongoing incident, tracked under the ID EX1151485 in the admin center, impacts all methods of connecting to…
Are cybercriminals hacking your systems – or just logging in?
As bad actors often simply waltz through companies’ digital front doors with a key, here’s how to keep your own door firmly locked tight This article has been indexed from WeLiveSecurity Read the original article: Are cybercriminals hacking your systems…
Ransomware, vendor outages, and AI attacks are hitting harder in 2025
Ransomware, third-party disruptions, and the rise of AI-powered attacks are reshaping the cyber risk landscape in 2025. A new midyear analysis from Resilience shows how these forces are playing out in real-world incidents and how they are changing the financial…
New infosec products of the week: September 12, 2025
Here’s a look at the most interesting products from the past week, featuring releases from Cynomi, DataLocker, Gigamon, Lookout, and Relyance AI. Cynomi simplifies vendor risk management Cynomi’s TPRM provides MSPs and MSSPs with a scalable way to deliver these…
EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks
Combining AI-generated code and social engineering, EvilAI operators are executing a rapidly expanding campaign, disguising their malware as legitimate applications to bypass security, steal credentials, and persistently compromise organizations worldwide. This article has been indexed from Trend Micro Research, News…
Microsoft Teams Introduces Automatic Alerts for Malicious Links from Attackers
Microsoft to enhance security for its Teams platform by automatically warning users about malicious links in chat messages. The new feature, part of Microsoft Defender for Office 365, is designed to protect users from phishing, spam, and malware attacks by…
Exabeam Extends Proven Insider Threat Detection to AI Agents with Google Cloud
BROOMFIELD, Colo. & FOSTER CITY, Calif. – September 9, 2025 – At Google Cloud’s pioneering Security Innovation Forum, Exabeam, a global leader in intelligence and automation that powers security operations, today announced the integration of Google Agentspace and Google…
ISC Stormcast For Friday, September 12th, 2025 https://isc.sans.edu/podcastdetail/9610, (Fri, Sep 12th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, September 12th, 2025…
MSI’s new $999 gaming laptop beats the Razer Blade 14 in a few ways (with one concern)
The MSI Katana 15 is a well-rounded 15-inch gaming laptop at an approachable price point. But there’s a trade-off with its design. This article has been indexed from Latest news Read the original article: MSI’s new $999 gaming laptop beats…
These budget open-ear headphones just got cheaper, plus get a free Anker charger – here’s how
Soundcore’s V40i open-ear headphones are on sale for $20 off, plus they come with a free Anker Nano USB-C charging block until October 5. This article has been indexed from Latest news Read the original article: These budget open-ear headphones…
IT Security News Hourly Summary 2025-09-12 00h : 4 posts
4 posts were published in the last hour 23:1 : IT Security News Daily Summary 2025-09-11 21:33 : I tried the Apple Watch Series 11, and it’s so close to making my Oura Ring obsolete 21:33 : I tested the…
IT Security News Daily Summary 2025-09-11
210 posts were published in the last hour 21:33 : I tried the Apple Watch Series 11, and it’s so close to making my Oura Ring obsolete 21:33 : I tested the best Apple and Samsung smartwatches right now –…
Top 10 Best Mobile Application Penetration Testing Services in 2025
Mobile Application Penetration Testing is a critical cybersecurity service in 2025, focusing on a unique and rapidly evolving attack surface. These tests go beyond static code analysis to assess an app’s runtime behavior, server-side interactions, and how it handles sensitive…
Apple’s latest iPhone security feature just made life more difficult for spyware makers
Buried in an ocean of flashy novelties announced by Apple this week, the tech giant also revealed new security technology for its latest iPhone 17 and iPhone Air devices. This new security technology was made specifically to fight against surveillance…
Meta ignored child sex abuse in VR, say whistleblowers
Two former Meta employees accused it of downplaying the dangers of child abuse in its virtual reality “metaverse” environment. This article has been indexed from Malwarebytes Read the original article: Meta ignored child sex abuse in VR, say whistleblowers
We’re number 1! America now leads the world in surveillanceware investment
Atlantic Council warns US investors are fueling a market that undermines national security After years of being dominated by outsiders, the computer surveillance software industry is booming in the United States as investors rush into the ethically dodgy but highly…
BSidesSF 2025: Understanding IRSF Fraud: Protecting Against SMS Exploitation
Creator, Author and Presenter: Vien Van, Senthil Sivasubramanian Our deep appreciation to Security BSides – San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the…
I tried the Apple Watch Series 11, and it’s so close to making my Oura Ring obsolete
Sleep Scores are a welcome addition to Apple’s sleep-tracking tech. But there’s another feature that would help manage my stress. This article has been indexed from Latest news Read the original article: I tried the Apple Watch Series 11, and…