Investigators also sought permission to use an invasive surveillance tool called a cell-site simulators against journalist Georgia Fort and a Minnesota…
Casbaneiro Malware Hides C2 Activity Until Victims Visit Banking Websites
Casbaneiro malware is hiding its main command and control traffic until an infected user visits a targeted banking website. The Windows banking trojan…
Discourse ImageMagick Vulnerability Enables Arbitrary File Read Through Malicious Image Uploads
Security researchers have revealed a critical vulnerability in Discourse, tracked as CVE-2026-55420. This flaw could let a low-privileged user read and…
FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach
The FBI has arrested another suspected ShinyHunters co-conspirator as investigators pursue the group believed to be behind the FBIJobs.gov breach.…
iRhythm Data Breach Impacts at Least 360,000 People
Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.
Nippon Columbia Malware Infection May Have Exposed 8.7 Million Customer Records
Nippon Columbia Group disclosed a malware infection on October 8, 2026, that may have exposed millions of Daiichi Kosho customer and employee records…
Spain, Denmark and the Netherlands win Europol 2026 Excellence Awards in Innovation
At the European Police Chiefs Convention on 29 September 2026, Europol announced the winners of its 2026 Excellence Awards in Innovation. Law enforcement…
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.
CISA Adds Actively Exploited Apache Struts Command Injection Flaw to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2016-3081, a critical command injection vulnerability in Apache Struts, to…
Low-cost Android phones are arriving with malware that owners can’t uninstall
People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender…
IT Security News Hourly Summary 2026-10-12 13h : 13 posts
13 posts published in the last hour 10:31One day to TechCrunch Disrupt: What’s next for AI and software development 10:31Why data work is one step behind on AI 10:31Dark Web Empire Market Co-Creator Raheim Hamilton Gets 40 Years in Prison…
One day to TechCrunch Disrupt: What’s next for AI and software development
First AI gave us code completion, predicting the lines of code, functions, and boilerplate we needed based on what we’d already typed. Then came code…
Why data work is one step behind on AI
One of the reasons programmers “got” agentic AI first, in the sense that it could meaningfully alter their productivity and effectiveness, is because code…
Dark Web Empire Market Co-Creator Raheim Hamilton Gets 40 Years in Prison
Raheim Hamilton, co-creator of the dark web marketplace Empire Market, was sentenced to 40 years for a platform…
Hands-on agentic development with Google’s Antigravity IDE
Google Antigravity IDE is one of the most sophisticated integrated development environments available today. In contrast to Antigravity 2.0 , which…
Imagine there’s no Shiny Hunters – AI could make human hacking crews obsolete
This week on The Kettle, we discuss some arrests and how Mythos’ mathematical expertise has led to a second exploited bug that no human would have found
Is your software product ready for the Cyber Resilience Act?
The European Union is rolling out new cybersecurity requirements for hardware and software products sold in the EU market. Aimed at ensuring that all…
IT Security News Roundup: 2026-10-12 Morning
IT Security News: Morning roundup, 2026-10-12 Summary This morning’s security news highlights a rapid evolution in attack automation, as threat actors increasingly integrate generative AI and autonomous frameworks into their operations while defenders work to establish guardrails. Simultaneously, unpatched perimeter…
WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM
A WhatsApp-delivered financial-document lure is being used to deploy a sophisticated Windows malware chain that injects code into the Task Scheduler…
Net Closes Around ShinyHunters with Another FBI Arrest
The FBI has arrested a Canadian cybersecurity executive as it continues its crackdown on ShinyHunters
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.…
CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records
CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure. CyberXero is…
Hidden implant in Ledger hardware wallets linked to $93M theft
Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11,…
IT Security News Hourly Summary 2026-10-12 12h : 12 posts
12 posts published in the last hour 09:31CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks 09:31Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access 09:31Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick…