Threat actors have started weaponizing AI-generated PowerShell code to map Active Directory (AD) environments, marking a notable shift from off-the-shelf hacking tools to bespoke, “vibe-coded” malware. Security researchers at Huntress recovered and reconstructed one such script, dubbed Untitled1.ps1, from an…
Debian 13 Released With Security Updates, Bug Fixes and Driver Updates
The Debian Project has released Debian 13.6, the latest maintenance update for Debian 13 “trixie.” The point release focuses on security corrections and fixes for serious software issues across the operating system’s package collection. Debian 13.6 is not a new…
Ghostcommit attack hides malicious AI instructions in images
A proof-of-concept attack hides prompt injection in a PNG file, turning routine code reviews into a path for secret theft. This article has been indexed from Malwarebytes Read the original article: Ghostcommit attack hides malicious AI instructions in images
Tidal Cyber connects assets, vulnerabilities, and threats through Threat-Led Defense
Tidal Cyber has announced Threat-Led Asset Visibility and Vulnerability Prioritization, new innovations extending the company’s Threat-Led Defense platform. The announcement marks a significant advancement in defensive security, shifting the industry beyond static asset inventories, CVSS scoring, and disconnected exposure management…
Adaptive Malware Could Evade Signature Detection by Regenerating Its Attack Capabilities
Adaptive, AI-driven malware could challenge a foundational assumption in enterprise defense: that a malicious program’s exploitation logic remains fixed after deployment. New research on adaptive computer worms argues that a self-replicating agent paired with an onboard reasoning loop could assess…
Hackers Can Exploit RabbitMQ OAuth Flaw to Access Every Message, Queue, and User
Security researchers have disclosed two access-control vulnerabilities in RabbitMQ, the open-source message broker used in an estimated 8% of all containers running today, that could allow attackers to seize full administrative control of a broker or silently map out sensitive…
Goodbye, Skeleton Keys: Why Machine Identity Broke IAM, and What SPIFFE Is Doing About It
Cloudflare published its own forensic timeline of the Salesloft Drift breach down to the minute, and it’s worth sitting with the detail for a second. At 11:51 on August 9, 2025, an actor researchers track as GRUB1 tried to validate…
Email Agent Hijacking: The Hidden Threat That Breaks Post-Delivery Security
Key takeaways AI agents create a new email attack surface because they can process content before humans see it Email Agent Hijacking hides instructions in email content to manipulate AI interpretation, decisions, or outputs Post-delivery controls are too late when…
AI Agents are Only As Effective as Their Harness
Every AI vendor is talking about agents – autonomous systems that handle complex tasks without constant human input. The promise is real. But one question gets asked too rarely: what makes an agent reliable enough to trust with your network security? The…
Lumen expands managed detection and response with Cortex XSIAM integration
Lumen Technologies has announced Lumen Defender Advanced Managed Detection and Response (AMDR) for Palo Alto Networks Cortex XSIAM. Attackers are increasingly operating earlier in the lifecycle while AI is accelerating threat speed. This expanded service will bring together Lumen’s managed…
Cloudflare Precursor uses continuous behavioral analysis to stop advanced bots
Cloudflare has announced the general availability of Precursor, a next-generation, continuous behavioral validation engine for bot management. Precursor runs seamlessly inside web browsers to monitor entire user sessions in order to detect bot automation. Unlike static CAPTCHAs, it analyzes ongoing…
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox operations targeting Microsoft 365 accounts. Distributed via Telegram and costing $400 a…
New compliance guidance available: HITRUST i1 on AWS
We are pleased to announce the publication of a new AWS compliance implementation guidance: HITRUST i1 Compliance on AWS: Customer Implementation Guidance with an Illustrative Healthcare Platform. Healthcare organizations seeking HITRUST i1 certification increasingly rely on Amazon Web Services (AWS)…
EU Targets FSB-Linked Hackers in New Sanctions Over Cyber Sabotage
EU sanctions target nine people and four entities tied to Russia’s FSB over a 15-year cyberespionage and critical infrastructure sabotage campaign. The European Union imposed sanctions on Monday targeting nine individuals and four entities linked to a Russian cyberespionage and…
Novel OAuth Client ID Spoofing Technique Targets Cloud Environments
New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments This article has been indexed from www.infosecurity-magazine.com Read the original article: Novel OAuth Client ID Spoofing Technique Targets Cloud Environments
APT-C-60 Uses Proton Drive for SpyGlace
The APT-C-60 threat actor has continued targeting Japanese organizations with a spear-phishing campaign that abuses Proton Drive, Windows shortcut files, trusted developer platforms, and native Windows utilities to deliver the SpyGlace malware. This article has been indexed from CyberMaterial Read…
AssuranceAmerica Breach Exposes 7M Licenses
U.S. This article has been indexed from CyberMaterial Read the original article: AssuranceAmerica Breach Exposes 7M Licenses
Debian 13.6 Rolls Out Vital Security Fixes
The Debian Project has officially rolled out Debian 13.6, marking the sixth stable point update for the “trixie” distribution family. This article has been indexed from CyberMaterial Read the original article: Debian 13.6 Rolls Out Vital Security Fixes
EU and UK sanction Russian GRU cyber hackers
The European Union and the United Kingdom have launched a coordinated wave of sanctions against dozens of Russian individuals and entities accused of executing state-directed cyber and hybrid warfare across Europe. This article has been indexed from CyberMaterial Read the…
ESET H1 2026 Report and Major Data Breaches
The ESET H1 2026 threat report reveals that cybercriminals are rapidly evolving existing attack frameworks by integrating AI-flavored lures, enhanced social engineering, and advanced defense evasion techniques. This article has been indexed from CyberMaterial Read the original article: ESET H1…
IT Security News Hourly Summary 2026-07-13 15h : 10 posts
10 posts were published in the last hour 12:33 : Attackers Combine MCP Recon With Cloud Metadata SSRF to Steal Service Account Tokens 12:32 : iPhone and MacBook Forensics Investigation Exposes £113,000 Property Fraud Operation 12:32 : Cybersecurity M&A Roundup:…
Attackers Combine MCP Recon With Cloud Metadata SSRF to Steal Service Account Tokens
Internet-wide reconnaissance is expanding beyond conventional application targets to include Model Context Protocol (MCP) services, AI assistant configuration files, and locally exposed LLM endpoints. A 14-day review of Apache and ModSecurity logs from a small, low-traffic shared host found roughly…
iPhone and MacBook Forensics Investigation Exposes £113,000 Property Fraud Operation
A digital forensics investigation from Belkasoft into an iPhone and a damaged MacBook has helped secure the conviction of Jason Cunningham, a rent-to-rent property operator who defrauded landlords and investors of more than £113,000 through forged contracts and false promises.…
Cybersecurity M&A Roundup: 37 Deals Announced in June 2026
Significant cybersecurity M&A deals announced by 1Password, Accenture, Cisco, F5, Rubrik, and SailPoint. The post Cybersecurity M&A Roundup: 37 Deals Announced in June 2026 appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Cybersecurity…