A new phishing and malware distribution toolkit called MatrixPDF is turning ordinary PDF files into dangerous interactive lures. Spotted by Varonis researchers The post MatrixPDF Toolkit Turns PDFs Into Lures first appeared on CyberMaterial. This article has been indexed from…
Outlook Bug Causes Repeated Crashes
A significant bug is currently preventing some users from accessing their email through the classic Outlook for Windows desktop application. When affected users attempt The post Outlook Bug Causes Repeated Crashes first appeared on CyberMaterial. This article has been indexed…
Smishing targets routers in Belgium 2025
A newly identified series of smishing attacks has been linked to compromised Milesight Industrial Cellular Routers. Researchers at Sekoia.io’s Threat Detection The post Smishing targets routers in Belgium 2025 first appeared on CyberMaterial. This article has been indexed from CyberMaterial…
Dealership Software Breach Hits 766k
A recent ransomware attack on Motility Software Solutions, a provider of dealer management software, has resulted in a massive data breach affecting The post Dealership Software Breach Hits 766k first appeared on CyberMaterial. This article has been indexed from CyberMaterial…
UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud
Cisco Talos is disclosing details on UAT-8099, a Chinese-speaking cybercrime group mainly involved in SEO fraud and theft of high-value credentials, configuration files, and certificate data. This article has been indexed from Cisco Talos Blog Read the original article: UAT-8099:…
Red Hat Data Breach – Threat Actors Claim Breach of 28K Private GitHub Repositories
An extortion group known as the Crimson Collective claims to have breached Red Hat’s private GitHub repositories, making off with nearly 570GB of compressed data from 28,000 internal repositories. This data theft is being regarded as one of the most…
Zania Raises $18 Million for AI-Powered GRC Platform
The company plans to triple its engineering and go‑to‑market teams and to accelerate its agentic AI platform. The post Zania Raises $18 Million for AI-Powered GRC Platform appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro
Cybersecurity researchers have discovered two Android spyware campaigns dubbed ProSpy and ToSpy that impersonate apps like Signal and ToTok to target users in the United Arab Emirates (U.A.E.). Slovak cybersecurity company ESET said the malicious apps are distributed via fake…
Cybercrims claim raid on 28,000 Red Hat repos, say they have sensitive customer files
570GB of data claimed to be stolen by the Crimson Collective A hacking crew claims to have broken into Red Hat’s private GitHub repositories, exfiltrating some 570GB of compressed data, including sensitive documents belonging to customers. … This article has been…
Reducing Mean Time to Remediation (MTTR) with Automated Policy Workflows
When an incident hits, every second matters. Yet too often, security teams find themselves stalled by manual firewall changes, policy approvals, and coordination across fragmented teams. The result? Prolonged exposure,… The post Reducing Mean Time to Remediation (MTTR) with Automated…
Insider Threat Intelligence Solutions | Trend Analysis Report
Nisos Insider Threat Intelligence Solutions | Trend Analysis Report Identifying potential insider threats requires vigilance and proactive monitoring of key behavioral, technical, and organizational indicators… The post Insider Threat Intelligence Solutions | Trend Analysis Report appeared first on Nisos by…
ProSpy and ToSpy: New spyware families impersonating secure messaging apps
ESET researchers have found two Android spyware campaigns aimed at people looking for secure messaging apps such as Signal and ToTok. The attackers spread the spyware through fake websites and social engineering. Researchers identified two previously unknown spyware families. Android/Spy.ProSpy…
Forrester: Agentic AI-Powered Breach Will Happen in 2026
Forrester predicts agentic AI will be responsible for a major data breach in 2026 This article has been indexed from www.infosecurity-magazine.com Read the original article: Forrester: Agentic AI-Powered Breach Will Happen in 2026
Small Businesses and Ransomware: Navigating the AI Era Threat
Ransomware has evolved from a niche hacker tactic into a mainstream threat, and small businesses are increasingly in… This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the original article: Small Businesses…
TOTOLINK X6000R Routers Hit by Three Vulnerabilities Allowing Remote Code Execution
Three critical security flaws were discovered in firmware version V9.4.0cu.1360_B20241207 of the TOTOLINK X6000R router released on March 28, 2025. These vulnerabilities range from argument injection and command injection to a security bypass that can lead to remote code execution.…
Chrome Security Update – Patch for 21 Vulnerabilities that Allows Attackers to Crash Browser
Google has released Chrome 141 to address 21 security vulnerabilities, including critical flaws that could allow attackers to crash browsers and potentially execute malicious code. The update, rolling out across Windows, Mac, and Linux platforms, patches several high-severity vulnerabilities that…
Sendit tricked kids, harvested their data, and faked messages, FTC claims
Sendit and its CEO are accused of preying on young users—signing them up illegally, misusing their data, and tricking them with bogus messages and hidden fees. This article has been indexed from Malwarebytes Read the original article: Sendit tricked kids,…
Phishing Dominates EU-Wide Intrusions, says ENISA
ENISA reveals phishing and vulnerability exploitation accounted for majority of intrusions in past year This article has been indexed from www.infosecurity-magazine.com Read the original article: Phishing Dominates EU-Wide Intrusions, says ENISA
Termix Docker Image Leaking SSH Credentials (CVE-2025-59951)
A critical vulnerability in the official Termix Docker image puts users at risk of exposing sensitive SSH credentials. The flaw allows anyone with network access to retrieve stored host addresses, usernames, and passwords without logging in. How the Vulnerability Works…
China-linked APT Phantom Taurus uses Net-Star malware in espionage campaigns against key sectors
China-linked APT Phantom Taurus targets government and telecom orgs with Net-Star malware for espionage, using unique tactics over two years. China-nexus APT Phantom Taurus has targeted government and telecom organizations for espionage, using Net-Star malware and distinct TTPs. Phantom Taurus…
1.5 Million Impacted by Allianz Life Data Breach
In July, hackers stole files containing names, addresses, dates of birth, and Social Security numbers from a cloud-based CRM. The post 1.5 Million Impacted by Allianz Life Data Breach appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
IT Security News Hourly Summary 2025-10-02 09h : 2 posts
2 posts were published in the last hour 6:33 : Chekov: Open-source static code analysis tool 6:33 : Building a mature automotive cybersecurity program beyond checklists
Microsoft Outlook for Windows Bug Leads to Crash While Opening Email
Microsoft has confirmed it is investigating a significant bug in the classic Outlook for Windows desktop client that causes the application to fail upon launch. The issue, which appears to be linked to Microsoft Exchange logon attempts, prevents users from…
Breaches set for North America, Outlook bug needs Microsoft support, Air Force admits SharePoint issue
Breach notification letters set to flood North America’s mailboxes New bug in classic Outlook only fixed via Microsoft support Air Force admits SharePoint privacy issue over breach Huge thanks to our sponsor, Nudge Security AI notetakers like Otter AI spread…