A new XLoader malware campaign is landing in inboxes as ordinary business orders and price quote requests. The emails look routine, but the attached…
Seven egregious failures of modern web tech
The modern web is a miracle of engineering, but its history is littered with brilliant concepts that flamed out in execution. For every innovation that…
CISA Warns of WordPress Core Vulnerability Exploited in Attacks to Execute Malicious Code
The U.S. Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting a WordPress Core vulnerability that can allow malicious…
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.
Google Patches Over 200 Android Vulnerabilities, Including Critical Zero-Click RCE Flaws
Google has released its November 2026 Android security update, addressing more than 200 vulnerabilities across the operating system, kernel, and hardware…
IT Security News Hourly Summary 2026-11-04 12h : 15 posts
15 posts published in the last hour 10:33The Sandbox Fights Back: Joe Security Launches Adaptive Detonation 10:32Hackers Abuse LuaJIT and Windows Process Injection to Hide XLoader Credential-Stealing Malware 10:32How will we make senior developers? 10:32Protecting OT, IoT and medical devices…
The Sandbox Fights Back: Joe Security Launches Adaptive Detonation
Reinach, Switzerland, 4th November 2026, CyberNewswire
Hackers Abuse LuaJIT and Windows Process Injection to Hide XLoader Credential-Stealing Malware
A new XLoader infection chain. It hides the credential stealer inside an embedded LuaJIT interpreter. It moves it into another Windows process through…
How will we make senior developers?
Something strange is going on in the job market for software developers. Everyone is worried that their job is going to go away and businesses are going…
Protecting OT, IoT and medical devices without disrupting operations
A smarter OT security strategy starts with visibility, context and prioritization.
Going deeper with htmx 4 — combining htmx and JavaScript
htmx lets you add rich functionality to web pages without writing JavaScript . But it also lets you integrate JavaScript if you need it, either by adding…
CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code
Critical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed…
Are AI certifications still worth it? What changed in 2026
Same question, a different answer Earlier this year, in Are AI certifications worth the investment? , I argued that AI certifications ranked among the…
Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques
Chainalysis suffered a cyberattack exposing customer names, emails and user IDs, while investigation data and passwords remain safe. Blockchain analytics…
Chainalysis Warns Customers After “Offensive Agentic” Security Incident
Chainalysis reveals AI-driven attack that led to unauthorized activity
CrowdStrike Brings Enterprise Browser Security to the Falcon Platform
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Brings Enterprise Browser Security to the Falcon Platform
Binance Hack: Fake Job Interviews Helped Hackers Steal $6.34 Billion
Binance explains how North Korean hackers used fake job interviews, malicious developer tools and an internal AI tool…
CrowdStrike Introduces Agentic Adversary Emulation to Counter AI-Enabled Adversaries
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Introduces Agentic Adversary Emulation to Counter AI-Enabled Adversaries
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones…
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
IT Security News Hourly Summary 2026-11-04 11h : 13 posts
13 posts published in the last hour 09:33Top 10 Best Breach & Attack Simulation (BAS) Tools in 2026 [Ranked & Scored] 09:33CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats 09:33U.S. CISA adds WordPress flaw to its Known…
Top 10 Best Breach & Attack Simulation (BAS) Tools in 2026 [Ranked & Scored]
Every SOC believes its controls work; BAS is the machine that checks. By safely running real attacker techniques against production defenses continuously,…
CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…