Hackers stole the information of students, teachers, staff, and parents/guardians from a self-hosted Metabase instance.
Top 10 Best Firewall-as-a-Service (FWaaS) Providers in 2026
Firewall-as-a-service moves inspection, IPS, and policy into the cloud, so every user and site gets the same protection without appliances to size, patch,…
ASUS Control Center Critical Flaw Allows Unauthenticated Attackers to Gain Root Access
ASUS has released a security update for the Control Center Express Agent to address CVE-2026-19397, a high-severity vulnerability related to missing…
Top 10 Best Web Application Firewall (WAF) Solutions in 2026
A web application firewall (WAF) filters malicious HTTP/S traffic SQL injection, cross-site scripting, credential stuffing, and API abuse before it…
IT Security News Hourly Summary 2026-09-08 13h : 20 posts
20 posts published in the last hour 10:32REVSTEALER Malware Disables Window Security to Run a Crypto Miner 10:32ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager 10:32BigBear 2.0 Evilginx2 Phishing Campaign Bypasses Microsoft 365 MFA With Session Cookie…
REVSTEALER Malware Disables Window Security to Run a Crypto Miner
A new malware campaign associated with the REVSTEALER information stealing malware has been discovered using another four additional malicious programs to…
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
We assess with moderate confidence that the attacks are not targeted at a particular organization, but are a part of a cryptocurrency and…
BigBear 2.0 Evilginx2 Phishing Campaign Bypasses Microsoft 365 MFA With Session Cookie Theft
BigBear 2.0 is a phishing operation designed to steal proof that a user has already passed multi-factor authentication. It targets Microsoft 365 accounts…
The 12 Best Managed Firewall Services, Compared and Priced
Best value overall: Fortinet. Delivered directly and through the largest partner network in security, at price points the premium providers can’t approach…
Stealing AI Reasoning Traces
Interesting research: “ Stealing Reasoning Traces from Proprietary LLM APIs “: Abstract: Leading large language model providers now conceal their models’…
Panzer Ransomware Targets Italian Manufacturers and Telecom Firms With ESXi-Ready RaaS
Panzer ransomware has entered Italy amid a sharp rise in attacks. The ransomware-as-a-service, or RaaS, operation surfaced on August 5 and listed a…
The 12 Best Network Security Policy Management Tools, Compared and Priced
Best value overall: Opinnate. It targets the gap the enterprise vendors leave open policy automation at a price mid-market organizations can actually…
U.S. Offers $10 Million Reward for Iranian IRGC Cyber Chief Linked to Critical Infrastructure Attacks
The U.S. Department of State’s Rewards for Justice program has announced a reward of up to $10 million for information leading to the identification or…
The Best DNS Security Solutions, Compared and Priced (2026)
DNS security delivers more blocked attacks per dollar than any other network control when you buy the right shape at the right tier. The value verdict:…
AI Customer Service Bots Can Be Tricked Into Stealing Security Codes and Acting as Victims
AI-powered customer service bots are being given more responsibility inside businesses, including access to customer profiles, billing data, support…
SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws
SAP released 19 new Security Notes addressing four critical vulnerabilities and 15 additional flaws throughout its enterprise portfolio. The vendor also…
Top 10 Best Managed XDR Services in 2026
Managed XDR is MDR with a wider aperture: analysts monitoring correlated telemetry from endpoints, network, email, identity, and cloud rather than…
The 12 Best Antivirus (Endpoint Protection) Software for Business, Compared and Priced
Best value overall: Microsoft Defender for Endpoint — if you hold Microsoft 365 E5, you already own competitive enterprise endpoint protection and the…
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2
Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control (C2), retrieving obfuscated…
U.S. Offers $10 Million Reward for Iranian IRGC Cyber Chief Amir Yaryab
The U.S. Department of State’s Rewards for Justice (RFJ) program has announced a reward of up to $10 million for information leading to the identification…
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware…
BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials
CloudSEK has uncovered BigBear 2.0, a new phishing-as-a-service operation targeting Microsoft 365
AI Customer Service Agents Can Be Hacked to Bypass MFA, Steal OTPs and Expose User Data
Security researchers have demonstrated how vulnerabilities in AI-powered customer service agents can be exploited to bypass identity checks, expose…
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active…