A new selfie video verification feature could make recovering your Google Account easier. But it also creates new security and privacy concerns. This article has been indexed from Malwarebytes Read the original article: Google wants to store a selfie video…
Google launches CodeMender AI security tool
Google has launched a preview version of CodeMender, an AI agent designed to identify security vulnerabilities in code, confirm whether they can be exploited, and automatically generate fixes for developers to review and apply. This article has been indexed from…
Cl0p Targets Internet-Exposed Windchill Servers in Global Engineering Data-Theft Campaign
Cl0p ransomware affiliates are actively exploiting internet-exposed PTC Windchill and FlexPLM deployments in a global data-theft campaign targeting high-value engineering environments. Observed post-exploitation activity includes filesystem enumeration via files such as “flst.txt,” followed by staging and exfiltration of sensitive engineering…
Foxit PDF Reader Flaw Lets Local Attackers Gain SYSTEM Privileges via DLL Sideloading
A recently disclosed vulnerability in Foxit PDF Reader may allow a local attacker with existing code execution to elevate their privileges to NT AUTHORITY\SYSTEM. This issue, tracked as CVE-2026-57239, affects Foxit PDF Reader installations prior to version 2026.2 and arises…
Meta tackles AI-generated accounts with a free Facebook verification badge
Meta has introduced Facebook Verified, a free badge meant to show that a person behind a profile has completed identity verification through a selfie check. (Source: Meta) The company says the goal is to give users a signal that they…
OpenAI Models Breach Hugging Face During Cyber Test
OpenAI’s artificial intelligence models escaped containment during a controlled cybersecurity test, exploiting previously unknown vulnerabilities to breach Hugging Face’s production infrastructure. This article has been indexed from CyberMaterial Read the original article: OpenAI Models Breach Hugging Face During Cyber Test
Hotel Wi-Fi DNS Poisoning Campaign Targets Corporate Credent
Cybersecurity researchers at ReliaQuest have identified an active DNS poisoning campaign targeting Wi-Fi infrastructure at hotels, conference centers, and other hospitality venues frequented by corporate employees. This article has been indexed from CyberMaterial Read the original article: Hotel Wi-Fi DNS…
South Korea Diplomatic Academy Data Breach
South Korea’s Foreign Ministry has confirmed a significant data breach affecting the Korea National Diplomatic Academy’s online education platform, exposing personal information of diplomatic personnel. This article has been indexed from CyberMaterial Read the original article: South Korea Diplomatic Academy…
AegisAI Raises $36M for AI Email Security
Email security startup AegisAI has closed a $36 million Series B funding round, with participation from Battery Ventures, Accel, and Foundation Capital. This article has been indexed from CyberMaterial Read the original article: AegisAI Raises $36M for AI Email Security
EU warns TikTok on child safety defaults
The European Commission has issued preliminary findings against TikTok under the Digital Services Act, identifying significant gaps in how the platform protects children. This article has been indexed from CyberMaterial Read the original article: EU warns TikTok on child safety…
Illinois Man Pleads Guilty to Phishing 4,500 Snapchat Users to Steal Private Photos
An Illinois man has pleaded guilty to a phishing and account-compromise scheme that targeted thousands of Snapchat users, leading to the theft of private images from numerous women. Federal prosecutors stated that Kyle Svara, 27, of Oswego, Illinois, admitted to…
KnowBe4’s Unveils Custom AI Video Builder
KnowBe4, the global leader in digital workforce security, securing both AI agents and humans, today announced the launch of Custom AI Video Builder, a new capability that lets security admins create custom, AI-generated training videos and deploy them directly into…
Microsoft Confirms No Bloatware Ads in Windows 11; LG Disables McAfee Pop-ups
Microsoft has moved quickly to shut down unwanted antivirus advertising after users discovered that connecting an LG monitor could silently install companion software and trigger a McAfee trial pop-up on Windows 11. The issue surfaced when owners of premium LG…
ChonkyChicken Malware Steals Chrome Credentials, Moves Laterally and Spies on Victims
ChonkyChicken is a newly identified remote access trojan designed to turn one infected Windows device into a platform for credential theft, network movement, and surveillance. The malware is part of the TAG-195, also called Golden Chickens or Venom Spider, malware-as-a-service…
FakeAgent Campaign Uses Malicious Bing Ads and Claude.ai Artifacts to Infect Corporate Users
A dangerous new malware campaign is tricking corporate workers who simply want a desktop version of a popular AI assistant. Between July 21 and July 22, 2026, at least 29 organizations saw unusual software installs and hidden persistence on their…
JetBrains Fixes Critical IntelliJ IDEA Code Execution Flaw and Four TeamCity Vulnerabilities
JetBrains has released security updates to address a critical code execution vulnerability in IntelliJ IDEA, alongside four high-severity vulnerabilities in TeamCity. Development teams and CI administrators are urged to apply these patches immediately to prevent potential remote attacks. JetBrains published…
Apache Syncope Release Patches for Multiple RCE and SQL Injection Vulnerabilities
Apache has issued critical security updates for its Syncope identity and access management (IAM) platform to address multiple vulnerabilities, including remote code execution (RCE), SQL injection, privilege escalation, server-side request forgery (SSRF), and information disclosure. These flaws affect various versions…
IT Security News Hourly Summary 2026-07-24 15h : 7 posts
7 posts were published in the last hour 13:4 : Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers 13:4 : ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link 12:32 : Thailand’s…
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers
A crafted SVG submitted to Bing’s image search ran commands as NT AUTHORITY\SYSTEM on Microsoft’s production image-processing workers, and as root on the Linux machines in the same fleet. XBOW’s testing got the same result on workers across different hosts…
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence (AI) agent inside a victim’s organization. The vulnerability has been…
Thailand’s Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged
Hunt.io uncovered a cyber-espionage attack on Thailand’s Finance Ministry using Hermes AI agent and Hades malware for reconnaissance and persistence. Researchers at Hunt.io have uncovered an intrusion targeting Thailand’s Ministry of Finance that offers a rare look inside a live…
Beyond the Play Store: How Android threats really spread
Some threats never pass through the Play Store. Others arrive later in seemingly legitimate updates. Here’s how Malwarebytes detects both. This article has been indexed from Malwarebytes Read the original article: Beyond the Play Store: How Android threats really spread
Uncle Sam tells overseas cybercrooks their visas are canceled
Policy targets online scammers, sextortionists, and potentially their immediate families This article has been indexed from www.theregister.com – Articles Read the original article: Uncle Sam tells overseas cybercrooks their visas are canceled
AegisAI Raises $36 Million for AI-Powered Email Security
The company has raised a total of $49 million in funding, including from Battery Ventures, Accel and Foundation Capital. The post AegisAI Raises $36 Million for AI-Powered Email Security appeared first on SecurityWeek. This article has been indexed from SecurityWeek…