Microsoft uncovered Whisper Leak, a side-channel attack that lets network snoopers infer AI chat topics despite encryption, risking user privacy. Microsoft revealed a new side-channel attack called Whisper Leak, which lets attackers who can monitor network traffic infer what users…
Ransomware Surge Poses Geopolitical and Economic Risks, Warns Joint Cybersecurity Report
A new joint report released this week by Northwave Cyber Security and Marsh, a division of Marsh McLennan, warns that ransomware attacks targeting small and medium-sized businesses have sharply increased, creating serious geopolitical, economic, and national security concerns. Northwave…
Google Chrome to Show Stronger Warnings for Insecure HTTP Sites Starting October 2025
Google is taking another major step toward a safer web experience. Starting October 2025, Google Chrome will begin displaying clearer and more prominent warnings when users access public websites that do not use HTTPS encryption. The move is part…
Hackers Exploit AI Stack in Windows to Deploy Malware
The artificial intelligence (AI) stack built into Windows can act as a channel for malware transmission, a recent study has demonstrated. Using AI in malware Security researcher hxr1 discovered a far more conventional method of weaponizing rampant AI in a…
IT Security News Hourly Summary 2025-11-09 15h : 3 posts
3 posts were published in the last hour 14:4 : Your “Private” Grok AI Chat Public: The Big Privacy Mistake 14:4 : WhatsApp’s “We See You” Post Sparks Privacy Panic Among Users 13:36 : Ernst & Young Exposes 4TB Database…
Your “Private” Grok AI Chat Public: The Big Privacy Mistake
As a security researcher, I recently came across something surprising and important: private conversations with the Grok AI… The post Your “Private” Grok AI Chat Public: The Big Privacy Mistake appeared first on Hackers Online Club. This article has been…
WhatsApp’s “We See You” Post Sparks Privacy Panic Among Users
WhatsApp found itself in an unexpected storm this week after a lighthearted social media post went terribly wrong. The Meta-owned messaging platform, known for emphasizing privacy and end-to-end encryption, sparked alarm when it posted a playful message on X…
Ernst & Young Exposes 4TB Database Backup Online, Leaking Company Secrets
Ernst & Young (EY), one of the world’s largest accounting firms, reportedly left a massive 4TB SQL database backup exposed online, containing highly sensitive company secrets and credentials accessible to anyone who knew where to find it. The backup,…
Cybersecurity Alert as PolarEdge Botnet Hijacks 25,000 IoT Systems Globally
Researchers at Censys have found that PolarEdge is rapidly expanding throughout the world, in an alarming sign that connected technology is becoming increasingly weaponised. PolarEdge is an advanced botnet orchestrating large-scale attacks against Internet of Things (IoT) and edge…
IT Security News Hourly Summary 2025-11-09 12h : 2 posts
2 posts were published in the last hour 10:36 : Security Affairs newsletter Round 549 by Pierluigi Paganini – INTERNATIONAL EDITION 10:36 : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 70
Security Affairs newsletter Round 549 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. China-linked…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 70
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter SesameOp: Novel backdoor uses OpenAI Assistants API for command and control Weaponized Military Documents Deliver Advanced SSH-Tor Backdoor to…
Week in review: Cisco fixes critical UCCX flaws, November 2025 Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Securing real-time payments without slowing them down In this Help Net Security interview, Arun Singh, CISO at Tyro, discusses what it takes to secure real-time…
IT Security News Hourly Summary 2025-11-09 09h : 1 posts
1 posts were published in the last hour 7:6 : Stanford discovers an extraordinary crystal that could transform quantum tech
Stanford discovers an extraordinary crystal that could transform quantum tech
Stanford scientists found that strontium titanate improves its performance when frozen to near absolute zero, showing extraordinary optical and mechanical behavior. Its nonlinear and piezoelectric properties make it ideal for cryogenic quantum technologies. Once overlooked, this cheap, accessible material now…
New Whisper Leak Toolkit Exposes User Prompts to Popular AI Agents within Encrypted Traffic
A sophisticated side-channel attack that exposes the topics of conversations with AI chatbots, even when traffic is protected by end-to-end encryption. Dubbed “Whisper Leak,” this vulnerability allows eavesdroppers such as nation-state actors, ISPs, or Wi-Fi snoopers to infer sensitive prompt…
IT Security News Hourly Summary 2025-11-09 06h : 2 posts
2 posts were published in the last hour 4:34 : Herodotus Trojan Mimics Human Typing to Steal Banking Credentials 4:6 : Chinese Hackers Attack Prominent U.S Organizations
Herodotus Trojan Mimics Human Typing to Steal Banking Credentials
A newly discovered Android malware, Herodotus, is alarming cybersecurity experts due to its unique ability to imitate human typing. This advanced technique allows the malware to avoid fraud detection systems and secretly steal sensitive financial information from unsuspecting users.…
Chinese Hackers Attack Prominent U.S Organizations
Chinese cyber-espionage groups attacked U.S organizations with links to international agencies. This has now become a problem for the U.S, as state-actors from China keep attacking. Attackers were trying to build a steady presence inside the target network. Series of…
IT Security News Hourly Summary 2025-11-09 03h : 4 posts
4 posts were published in the last hour 1:34 : Investment in NHIs: A Justified Security Strategy? 1:34 : NHIs: A Budget-Friendly Solution for Modern Cybersecurity? 1:33 : Capable and Secure: Revolutionizing NHIs Management 1:33 : Ensuring Stability in Cyber…
Investment in NHIs: A Justified Security Strategy?
How Do Non-Human Identities (NHIs) Transform Cloud Security? Can your organization afford to overlook the security of Non-Human Identities? Machine identities have become as crucial as human identities, bringing unique challenges and opportunities for cybersecurity experts around the globe. The…
NHIs: A Budget-Friendly Solution for Modern Cybersecurity?
How Are Non-Human Identities Reshaping Cybersecurity Solutions? How often have you considered the role of machine identities? With more enterprises migrate their operations to the cloud, the management of Non-Human Identities (NHIs) has become paramount. These machine identities, which include…
Capable and Secure: Revolutionizing NHIs Management
Are Your Non-Human Identities Truly Secure? When we delve deeper where cloud environments dominate, the concept of Non-Human Identities (NHIs) is increasingly coming to the forefront of cybersecurity discussions. But what exactly are NHIs, and why is their management crucial…
Ensuring Stability in Cyber Security with NHIs
Are Organizations Maximizing the Potential of Non-Human Identities? The importance of managing Non-Human Identities (NHIs) cannot be overstated. But how effectively are organizations leveraging these capabilities to enhance stable cybersecurity? NHIs—often referred to as machine identities—are pivotal in safeguarding secrets…