Researchers have prototyped an AI-powered internet worm. The coolest thing about the prototype is that it carries its own LLM with it, and runs it on computers that have been broken into. This is the closest to John Brunner’s original…
In Other News: Anthropic Maps AI Threats, Unpatched Comodo Flaw, Palantir Chief Eyed for CISA
Other noteworthy stories that might have slipped under the radar: Ultrahuman data leak, The Gentlemen ransomware analysis, Hola Browser bundles miner. The post In Other News: Anthropic Maps AI Threats, Unpatched Comodo Flaw, Palantir Chief Eyed for CISA appeared first…
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework
Cybersecurity researchers have discovered a previously unreported threat cluster dubbed OP-512 that has been observed targeting Microsoft Internet Information Services (IIS) servers to deploy a bespoke web shell framework. ReliaQuest has assessed with moderate to high confidence that the espionage-focused…
IT Security News Hourly Summary 2026-06-05 15h : 5 posts
5 posts were published in the last hour 13:4 : New Magecart Attack Abuses Stripe as Malware C2 13:4 : Chinese APT VerdantBamboo Uses BRICKSTORM Malware to Compromise Firewalls and Appliances 13:4 : Agentic AI Red Teaming Reveals Zero-Click Human-in-the-Loop…
New Magecart Attack Abuses Stripe as Malware C2
A novel Magecart campaign that weaponizes legitimate cloud services to evade detection: attackers are storing a JavaScript skimmer inside Stripe customer metadata and delivering it to victim checkouts via Google Tag Manager. The combination makes Stripe both the command server…
Chinese APT VerdantBamboo Uses BRICKSTORM Malware to Compromise Firewalls and Appliances
A Chinese state-linked hacking group has been quietly living inside corporate networks for well over a year, using a custom malware toolkit to compromise firewalls, storage systems, and network appliances without ever tripping an alarm. The group, tracked as VerdantBamboo,…
Agentic AI Red Teaming Reveals Zero-Click Human-in-the-Loop Bypass Attack Chains
Artificial intelligence systems are changing the way software operates, but they are also introducing new security risks that many organizations are not fully prepared for. Agentic AI, which refers to AI that can plan and carry out multi-step tasks on…
World Food Programme breach exposes data of 600k vulnerable Gazan families
Those receiving aid in the famine-threatened, war-torn territory told support will remain This article has been indexed from www.theregister.com – Articles Read the original article: World Food Programme breach exposes data of 600k vulnerable Gazan families
Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver
Eighteen months ago, the AI SOC was a marketing line. Today it’s a budget item. The category has crossed over from interesting to inevitable, with billions of dollars now flowing into AI-powered security operations platforms, agentic SOC tools, and AI…
Trend Micro Deep Security Agent Flaw Allows Repeatable Security Bypass
Trend Micro’s Deep Security Agent for Linux contains a design flaw in its behavior-monitoring stack that allows a local, unprivileged attacker to repeatedly force short “blind spots” in which endpoint protections are temporarily bypassed. The issue stems from how the…
Hola Browser Windows Delivery Pipeline Hijacked to Deploy Cryptominer
An undeclared executable bundled with Hola Browser for Windows (version 1.251.91.0) that later proved to be a crypto‑miner. The binary, written to C:\Program Files\Hola\me.exe in affected installs, was not part of the certified footprint, lacked code signing and a timestamp,…
Hackers Leak DentaQuest Information Impacting 2.6 Million
The ShinyHunters extortion group leaked roughly 234 GB of data allegedly stolen from the dental benefits administrator. The post Hackers Leak DentaQuest Information Impacting 2.6 Million appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original…
Attackers obtained encrypted password vaults from some Dashlane user accounts
Dashlane has disclosed new details about a brute-force attack that let a threat actor access some customer accounts and copy encrypted vaults. Dashlane said it found no evidence that the attackers compromised its internal systems. The company first acknowledged the…
Chinese spies using LinkedIn for espionage
Chinese intelligence services are actively exploiting professional networking sites like LinkedIn to conduct espionage operations against Western targets, according to a joint security advisory issued by the FBI, the U.K.’s MI5, and the governments of Australia, Canada, and New Zealand.…
Crypto-miner found in Hola Browser installer
Security researchers at Sophos identified an undeclared crypto-mining executable bundled with Hola Browser during routine AppEsteem Windows Certified Application testing. This article has been indexed from CyberMaterial Read the original article: Crypto-miner found in Hola Browser installer
UN Food Agency Data Breach Exposes Gaza Aid Recipients
The United Nations World Food Programme has confirmed a data breach affecting aid recipients in Gaza, notifying victims through Telegram messages over the weekend. This article has been indexed from CyberMaterial Read the original article: UN Food Agency Data Breach…
Cybercriminals Target FIFA World Cup 2026
Cybercriminals have already established extensive malicious infrastructure targeting the FIFA World Cup 2026, months before the tournament begins on June 11. This article has been indexed from CyberMaterial Read the original article: Cybercriminals Target FIFA World Cup 2026
DoJ Disrupts Southeast Asia Crypto Fraud Networks
The U.S. This article has been indexed from CyberMaterial Read the original article: DoJ Disrupts Southeast Asia Crypto Fraud Networks
Chrome 149 Patches 429 Vulnerabilities
Over 100 bugs are critical or high-severity, mainly use-after-free and insufficient validation of untrusted input flaws. The post Chrome 149 Patches 429 Vulnerabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Chrome 149…
Infosecurity Europe: Practical Lessons From Lloyds’ Agentic AI Security Playbook
Lloyds Banking Group shared its approach for securing agentic AI workflows, with a mix of hands on experimentation and cross functional governance This article has been indexed from www.infosecurity-magazine.com Read the original article: Infosecurity Europe: Practical Lessons From Lloyds’ Agentic…
Hugging Face Transformers Security Flaw Allows Remote Code Execution
A critical security flaw in Hugging Face Transformers, tracked as CVE-2026-4372, has exposed millions of machine learning workflows to silent remote code execution (RCE) through a malicious model configuration. Discovered by Pluto Security researcher Yotam Perkal, the issue allows attackers…
Let’s Encrypt works toward post-quantum certificates at web scale
Let’s Encrypt plans to pursue a post-quantum-safe Web PKI through Merkle Tree Certificates (MTCs), a new approach that adds post-quantum authentication to the web without sacrificing the speed and reliability that have made TLS universal. The project is targeting late…
Infosecurity Europe: OWASP Introduces Agentic AI Security Maturity Framework
The OWASP agentic AI security framework helps organizations assess governance maturity vs adoption and adjust governance as needed This article has been indexed from www.infosecurity-magazine.com Read the original article: Infosecurity Europe: OWASP Introduces Agentic AI Security Maturity Framework
New Gafgyt Variant Targets Linux Systems With Modular Spread Tactics
A new Gafgyt-family botnet, tracked as C0XMO, marks a notable technical shift in IoT malware design: the separation of scanning and propagation into distinct components and multi-architecture payloads that maximize reach across heterogeneous Linux devices. The operator delivered C0XMO by…