Google patched 12 Chrome flaws, including an actively exploited V8 zero-day that could enable remote code execution through a crafted webpage. Google…
Chinese-Speaking Hackers Use Claude, Qwen and DeepSeek AI Agents to Attack Government Systems
Chinese-speaking threat operators have been observed using Claude, Qwen and DeepSeek-powered AI agents as operational components in a second intrusion…
14 Fake macOS Installers Linked to DPRK Campaign Deliver Credential-Stealing RAT
Mac users are being targeted with 14 fake application installers that appear to offer familiar software but instead start a credential-stealing…
Microsoft Teams is about to make QR code phishing much harder
Microsoft is preparing a new feature for Teams users that will help them stay safe from QR code phishing. Teams will automatically hide QR codes sent by…
TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft
TP-Link has released security updates for two vulnerabilities found in its Archer AX55 v4 wireless router. These vulnerabilities could allow attackers on…
Dahua Camera Backdoor Survives Password Changes and Factory Resets on Compromised Devices
A large campaign has compromised more than 14,000 internet-connected Dahua cameras, exposing how vulnerable surveillance equipment can become a gateway to…
IT Security News Hourly Summary 2026-09-04 11h : 7 posts
7 posts published in the last hour 08:31Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day 08:31Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws 08:31Indirect Prompt Injection: How Hackers Attack RAG Applications (2026) 08:31GPT-6 Astra Scores 100%…
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The…
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Plex is urging users to update their instances to the latest version following the release of an update that patches multiple security flaws. The fixes…
Indirect Prompt Injection: How Hackers Attack RAG Applications (2026)
By HOC Team | Last updated: September 04, 2026 | Read time: ~28 min Indirect Prompt Injection: How…
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
OpenAI on Thursday officially unveiled GPT‑6 Astra, which it described as the “world’s most intelligent and aligned model.” The development comes days…
Microsoft Challenges Data Centre Cost Recovery, After Public Pledge
Microsoft files appeal to Virginia effort to recover costs for data centre power infrastructure, after pledge to protect consumers
Microsoft 365 Direct Send Bypass Lets Attackers Spoof Internal Users Without Credentials
A Microsoft 365 email security-control bypass that lets attackers submit unauthenticated messages posing as internal users by leaving one SMTP field…
IT Security News Hourly Summary 2026-09-04 10h : 8 posts
8 posts published in the last hour 07:31Court records breach, Breeze Comet hits Brazil, Aesto records breach 07:31Critical Chrome 0-Day Vulnerability Actively Exploited in the Wild 07:31Dark Web Service Nexus Sells 153M+ Driver’s Licenses 07:31Google Chrome V8 Flaw Actively Exploited…
Court records breach, Breeze Comet hits Brazil, Aesto records breach
U.S. and Canadian court records breached in Thomson Reuters incident Cybercrime Breeze Comet causing problems in Brazil Aesto record system hit by data…
Critical Chrome 0-Day Vulnerability Actively Exploited in the Wild
Google has released an emergency Chrome security update that fixes a critical zero-day vulnerability already being exploited in real-world attacks. The…
Dark Web Service Nexus Sells 153M+ Driver’s Licenses
FBI probes suspected breach at IDScan.net after dark web service Nexus offered 153M+ US and Canadian driver’s license scans. A dark web identity theft…
Google Chrome V8 Flaw Actively Exploited in the Wild, Update Released
Google has released an urgent update for Chrome Stable to address CVE-2026-85046, a high-severity type confusion vulnerability in the V8 JavaScript and…
Smart Ring Maker Oura Plans IPO Amid Revenue Surge
Finland-founded smart ring maker Oura files for US IPO, amid surge in demand for lightweight fitness-tracking devices
CrowdStrike Falcon Zero-Day Lets Attackers Escalate Privileges on Windows Systems
A recently released proof-of-concept, named FalconFlank, claims to reveal a local privilege escalation vulnerability in the CrowdStrike Falcon Sensor on…
Contagious Interview Operators Move Beyond Git Hooks With Trojanized Mac Applications
North Korea-linked Contagious Interview operators have expanded their developer-targeting malware delivery operation beyond booby-trapped Git hooks and…
IT Security News Hourly Summary 2026-09-04 09h : 5 posts
5 posts published in the last hour 06:32Hackers Compromise More Than 14,500 Dahua Security Cameras in Massive Campaign 06:31Popular Chrome Extensions Weaponized to Steal Crypto From 80,000 Users 06:31September 2026 Patch Tuesday forecast: All we need is more time 06:01A…
Hackers Compromise More Than 14,500 Dahua Security Cameras in Massive Campaign
A large-scale campaign dubbed Operation CameraSwarm compromised at least 14,530 Dahua IP cameras and related surveillance devices in just 35 days.…
Popular Chrome Extensions Weaponized to Steal Crypto From 80,000 Users
Security researchers have uncovered a malicious campaign that used Chrome’s extension system to steal cryptocurrency from tens of thousands of users.…