Researchers say it took fewer than 20 prompts for a public AI tool to find a flaw (now fixed) allowing anyone on a Zoom call to hijack another…
Gunra Ransomware Exploits Fortinet, Schneider
Cybersecurity agencies from South Korea and the United States have released a joint advisory warning organizations about active Gunra ransomware campaigns…
Five arrests for smuggling migrants across the Bulgarian-Serbian green border
The action day led to:5 arrests (1 High Value Target, 2 police officers and 2 associates)5 locations searched;Seizures include: 3 vehicles used for…
Keep Your Tech Flame Alive: Trailblazer Rachel Bayley
In this Akamai FLAME Trailblazer blog post, Rachel Bayley encourages women to step into the unknown and to be their authentic selves.
Europol-led action against nihilistic violent extremist network “The Com”
An estimated 4 340 URLs related to nihilistic violent extremism were referred during the initiative organised by Europol’s EU Internet Referral Unit – EU…
Compromised FortiGate VPN Opens First Step in Multi-Network Polish Energy Attack
Poland’s energy sector attack has revealed how one compromised remote-access device can become the first step in a wider industrial intrusion. The…
Europol supports operation against amphetamine producers
As part of an extensive investigation led by the German Krefeld Public Prosecutor’s Office and Mönchengladbach Police, officers from the North…
IT Security News Hourly Summary 2026-08-11 15h : 19 posts
19 posts were published in the last hour 12:32 : Deel acquires identity security firm Clarity 12:32 : Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers 12:32 : Plug & Pwn Attack Exploits Windows…
Deel acquires identity security firm Clarity
Global workforce platform Deel has acquired identity security startup Clarity in an undisclosed transaction, marking the company’s fifteenth acquisition…
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every…
Plug & Pwn Attack Exploits Windows PnP to Gain SYSTEM Access With Zero Clicks
Security researchers Alejandro Hernando, also known as 0xedh, and Borja Martínez have unveiled a research project titled “Plug & Pwn.” This project…
Corma Raises $60 Million for Defensive Cybersecurity AI Model
Corma emerged from stealth with seed funding from Sequoia Capital, Khosla Ventures, and Coatue.
Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants
Kaspersky experts have discovered malicious TrueConf software installers. The Head Mare APT group uses them to deliver the PhantomCore and PhantomGraph…
Malicious SIMs can hijack smartphones, steal files, and lock them onto 2G
Researchers have found that compromised or malicious SIM cards can issue commands to some smartphones and cellular-connected devices, allowing attackers…
Deepfake hiccup unmasks suspected digital certificate fraudster
Face-swap software blinked for ‘barely a second,’ giving Spanish cops the break they needed
Windows 11 USB Plug and Play Privilege Escalation
Security researchers have identified a privilege escalation vulnerability in Windows 11 that exploits the operating system’s Plug and Play service to…
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo
Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to…
Chainloop: Open-source supply chain security tool
A new open-source tool called Chainloop provides organizations with an evidence store and policy engine for tracking software supply chain security.
LiteLLM Attack Shows AI Infrastructure Is Becoming a Strategic Software Supply Chain Target
The March 2026 compromise of LiteLLM was more than a short-lived malicious PyPI upload. It demonstrated how an upstream breach in developer tooling can…
Ceva Logistics Data Breach Impacts European Clients
Ceva Logistics disclosed a data breach affecting its European contract logistics operations, with eight warehouses compromised between July 29 and August…
A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices
A malicious SIM card can order the device it sits in to run commands of the attacker’s choosing. On the cellular modules built into electric-vehicle…
Ransom Cartel Leader Sentenced to 16 Years
A federal court has sentenced Maksim Silnikau to 16 years in prison for leading the Ransom Cartel ransomware operation.
Suisan City, California, Responds to Cyber Incident Amid Wave of US Local Government Attacks
Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past…
Mozilla revokes Firefox signing key after unencrypted copy lands in GitHub
Audit logs found no unexpected visitors, but release verification still needs an update