Security researchers have discovered a new technique to bypass Kernel Address Space Layout Randomization (KASLR) in Windows 11, potentially weakening a critical security feature designed to prevent attackers from reliably locating kernel components in memory. KASLR works by loading the…
IT Security News Hourly Summary 2025-05-19 21h : 7 posts
7 posts were published in the last hour 18:32 : Hackers Exploit AutoIT Scripts to Deploy Malware Targeting Windows Systems 18:32 : Hackers Exploits Windows Via UAC Bypass Technique to Deploy Remcos RAT 18:32 : Hackers Leverage AutoIT Code to…
DDoSecrets Adds 410GB of TeleMessage Breach Data to Index
DDoSecrets indexes 410GB of breached TeleMessage data, including messages and metadata, from hack tied to unsecured Signal clone used by US government officials. This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read…
A drug developer is buying 23andMe – what does that mean for your DNA data?
The top bidder in the DNA testing firm’s bankruptcy auction, Regeneron vows to prioritize the privacy, security, and ethical use of customer data. This article has been indexed from Latest stories for ZDNET in Security Read the original article: A…
BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software
San Francisco incident response coordination startup banks $15 million in a Series A funding round led by Ballistic Ventures. The post BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software appeared first on SecurityWeek. This article has been indexed…
Microsoft just launched an AI that discovered a new chemical in 200 hours instead of years
Microsoft launches Discovery platform that uses agentic AI to compress years of scientific research into days, transforming R&D across pharmaceuticals, materials science, and semiconductor industries. This article has been indexed from Security News | VentureBeat Read the original article: Microsoft…
SEC SIM-swapper who Googled ‘signs that the FBI is after you’ put behind bars
Proving yet again that crims are bad at search hygiene An Alabama man who SIM-swapped his way into the SEC’s official X account, enabling a fake ETF announcement that briefly pumped Bitcoin, has been sentenced to 14 months in prison…
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CVE-2024-11182 MDaemon Email Server Cross-Site…
Mozilla fixed zero-days recently demonstrated at Pwn2Own Berlin 2025
Mozilla addressed two critical Firefox vulnerabilities that could be potentially exploited to access sensitive data or achieve code execution. Mozilla released security updates to fix two critical vulnerabilities in the Firefox browser that could be potentially exploited to access sensitive…
Hackers Exploit AutoIT Scripts to Deploy Malware Targeting Windows Systems
Cybersecurity researchers have unearthed a sophisticated attack leveraging AutoIT, a long-standing scripting language known for its deep integration with Windows operating systems. Often compared to .NET for its persistence in malicious campaigns, AutoIT’s simplicity and ability to interact with Windows…
Hackers Exploits Windows Via UAC Bypass Technique to Deploy Remcos RAT
A newly identified phishing campaign deploys the Remcos Remote Access Trojan (RAT) using DBatLoader, leveraging a User Account Control (UAC) bypass technique involving mock trusted directories to evade security controls. The attack chain employs obfuscated .cmd scripts, Windows Living Off…
Hackers Leverage AutoIT Code to Deliver Malware Attacking Windows System
A sophisticated malware campaign utilizing multiple layers of AutoIT code has been discovered targeting Windows systems. The attack begins with a seemingly innocent executable file named “1. Project” that initiates a complex infection chain designed to deploy a Remote Access…
Developing with Docker and Sonatype: Building secure software at scale
Docker remains a cornerstone of modern development environments, helping teams containerize applications, speed up delivery pipelines, and standardize across systems. But as container usage grows, so do concerns about software supply chain security, dependency management, and image provenance. The post…
22,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Motors WordPress Theme
On May 2nd, 2025, we received a submission for a Privilege Escalation vulnerability in Motors, a WordPress theme with more than 22,000 sales. This vulnerability makes it possible for an unauthenticated attacker to change the password of any user, including…
UK Legal Aid Agency Hit by Cyberattack, Sensitive Data Stolen
The UK Legal Aid Agency has suffered a major cyberattack, with “significant” sensitive data, including criminal records, stolen.… This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the original article: UK Legal…
Vulnerability Summary for the Week of May 12, 2025
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info admintwentytwenty–UiPress lite | Effortless custom dashboards, admin themes and pages The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to Remote Code…
Procolored: Software für 5.000-Euro-Drucker mit Malware ausgeliefert
Ein Youtuber wollte einen über 5.000 Euro teuren Spezialdrucker testen. Doch die zugehörige Software war monatelang mit Viren verseucht. (Malware, Virus) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Procolored: Software für 5.000-Euro-Drucker mit Malware…
Scope 3, Category 8: What Akamai Is Doing for Customer Reporting
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from Blog Read the original article: Scope 3, Category 8: What Akamai Is Doing for Customer Reporting
Compliance Insights: How to Stop Lateral Movement and Boost Authorization
Stop lateral movement before it starts. Learn how to meet security compliance regulations with layered security, microsegmentation, and smart API protection. This article has been indexed from Blog Read the original article: Compliance Insights: How to Stop Lateral Movement and…
CISA Welcomes Madhu Gottumukkala as the New Deputy Director
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from CISA News Read the original article: CISA Welcomes Madhu Gottumukkala as the New Deputy Director
New Report Finds 67% of Organizations Experienced Cyber Attacks in the Last Year
A disturbing 67% of businesses in eight worldwide markets—the US, UK, Spain, the Netherlands, Germany, France, Belgium, and Ireland—reported having experienced cyberattacks in the previous 12 months, according to the 2024 Hiscox Cyber Readiness Report. This marks the fourth consecutive…
AI Web Application Firewalls Bypassed Using Prompt Injection Techniques
Web Application Firewalls (WAFs) have been a critical defense mechanism protecting web applications from malicious traffic and attacks such as SQL Injection and Cross-Site Scripting (XSS). Traditionally, WAFs relied heavily on pattern matching techniques using regular expressions (regex) or string…
Hacker Charged for Hijacking SEC Account to Promote Fake Bitcoin News
Eric Council Jr., a 26-year-old man from Huntsville, Alabama, was sentenced on May 16, 2025, to 14 months in federal prison followed by three years of supervised release for his role in the high-profile hacking of the U.S. Securities and…
Ivanti EPMM 0-day Vulnerability Actively Exploited in the Wild
Ivanti has disclosed two zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) solution. When chained together, these vulnerabilities allow attackers to execute unauthenticated remote code. Security researchers have confirmed active exploitation in the wild, with the Shadowserver Foundation tracking nearly…