Hackers are conducting a large-scale automated scanning campaign against internet-exposed Vite development servers, attempting to steal AWS credentials,…
AWS Security Reference Architecture: A deep dive into PCI DSS compliance
Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data…
Nintendo Switch Vulnerability Allows Attackers to Run Unauthorized Code on Your Console
Nintendo has patched a high-severity vulnerability in the original Nintendo Switch that could let a nearby attacker execute unauthorized code and access…
IT Security News Hourly Summary 2026-09-14 20h : 8 posts
8 posts published in the last hour 17:31Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries 17:31New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing 17:02Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to…
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to…
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently…
Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin
On August 21 and August 22, 2026, Wordfence Argus, created by the Wordfence Threat Intelligence team, identified two independent critical vulnerability…
FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security
Palo Alto Networks has achieved FedRAMP Moderate authorization for Quantum-Safe Security (QSS), a turnkey Automated Cryptography Discovery and Inventory…
WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution
WordPress has announced it’s launching an automated security review for every release of a plugin before it’s distributed through the WordPress.org update…
New York Seizes a Dozen Celebrity Deepfake Websites
In the biggest-ever legal action against harmful deepfake websites, the Manhattan District Attorney’s Office has seized 12 sites that collectively…
One Click on a Malicious Link Lets Hackers Backdoor Sogou Input Method Users
A single click on a malicious link could have given attackers a direct path into Windows systems running Sogou Input Method. The flaw turned a commonly…
IT Security News Hourly Summary 2026-09-14 19h : 15 posts
15 posts published in the last hour 16:32WhatsApp’s New Restricted Chat Feature Locks Conversation on Your Primary Phone 16:32Your Company’s Phishing Tests Are Measuring the Wrong Thing 16:32Malicious Twitch Extension Exposes OAuth Tokens of 30,000 Chrome and Firefox Users 16:32Using…
WhatsApp’s New Restricted Chat Feature Locks Conversation on Your Primary Phone
WhatsApp is developing a new privacy control called Restricted Chat that will keep selected conversations accessible only from a user’s primary mobile…
Your Company’s Phishing Tests Are Measuring the Wrong Thing
When a phishing simulation returns a low click rate, security teams tend to relax. Leadership checks a compliance box. The program gets renewed. But a…
Malicious Twitch Extension Exposes OAuth Tokens of 30,000 Chrome and Firefox Users
A browser extension promoted as a Twitch viewing helper has been found sending live account tokens through servers controlled by its operator. The add-on,…
Using AI for Weapons Development
Last week, Anthropic released a long and detailed document describing current misuses of their Claude models. I’m still reading it, but I wanted to flag…
Cyclops Blink Evolves Into x86-64 Linux Implant With Packet Sniffing and Internal Network Scanning
Cyclops Blink has returned in a form that gives attackers a deeper view inside corporate networks. The malware was found on compromised Cisco Firewall…
FedRAMP Moderate Authorization for Palo Alto Networks’ Quantum-Safe Security
Palo Alto Networks has achieved FedRAMP Moderate authorization for Quantum-Safe Security (QSS), a turnkey Automated Cryptography Discovery and Inventory…
New ZcopyReaper Linux Kernel Vulnerability Enables Privilege Escalation Attacks
A new Linux kernel vulnerability dubbed ZcopyReaper allows an unprivileged local attacker to escalate privileges and potentially gain root-level control.…
Lost Phone Reporting Flaws Could Let Hackers Block Any Mobile Device for $4
A new security investigation has revealed serious weaknesses in the systems used by mobile carriers to block lost or stolen phones. Researchers found that…
AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions
A critical vulnerability in the AWS Systems Manager Agent could let authenticated attackers bypass remote-host port-forwarding restrictions and access…
CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento
Security teams increasingly outflanked by AI agents
A report warns that non-human identities are growing beyond the ability of existing systems to track.
Mantax Otax Targets Android Phones With Spyware and Ransomware
Mantax Otax Android malware steals messages, PINs, and files, monitors screens, and uses ransomware and harassment to pressure victims into paying.