Senator Ron Wyden sent a letter to the U.S. federal watchdog requesting a comprehensive review of how the FBI, DEA, ICE’s HSI, and the Secret Service use…
Deepfake Ads Funnel Investors Into WhatsApp Groups Controlled by Fake Financial Analysts
Investment fraud is increasingly exploiting the one action banks struggle most to block: a payment the customer actively wants to make. Deepfake…
Six Maximum-Severity Flaws Found in Cisco Products
Cisco patched nine critical flaws, including six rated CVSS 10.0, found during internal testing. None are known to be exploited. Cisco released another…
North Korean Hackers Tied to Rust Supply Chain Attack
Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks
Microsoft Patches Exploited Entra ID Vulnerability
A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.
Scientists catch a hidden electronic state forming in just 30 femtoseconds
Scientists watched a light-triggered hidden state form inside a material in only 30 femtoseconds, revealing a step that had never been seen before. The…
IT Security News Hourly Summary 2026-08-21 15h : 11 posts
11 posts published in the last hour 12:31Wazuh and AI For Enhanced SOC Workflows 12:31Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836) 12:31Critical Isolated-vm Vulnerability Leads to RCE on Host 12:31Medical records, SSNs, and bank details exposed in…
Wazuh and AI For Enhanced SOC Workflows
Artificial Intelligence (AI) has become one of this decade’s defining technologies. From healthcare and finance to manufacturing and education,…
Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)
Microsoft has patched a critical remote code execution vulnerability (CVE-2026-69836) in Entra ID, reportedly exploited in the wild. Entra ID is…
Critical Isolated-vm Vulnerability Leads to RCE on Host
The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process.
Medical records, SSNs, and bank details exposed in CareCloud data breach
Healthcare technology provider CareCloud confirmed that 3.75 million people were affected by a March data breach.
New Agent Tesla Malware Variant Boosts Evasion Capabilities
An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed
Bandwidth-Sharing App Can Turn Employee Devices Into Gateways to Internal Networks
A bandwidth-sharing app installed by an employee can quietly turn a work device into a gateway for outside traffic. The software may not behave like…
Attackers impersonate popular AI brands to spread malware
Attackers are impersonating popular AI brands like Perplexity, Claude, ChatGPT, and Copilot to spread information stealers, backdoors, malicious browser…
UAT-10147 Compromises Web Servers to Deploy BadIIS for SEO Fraud and Data Theft
A Chinese-speaking cybercrime group, tracked as UAT-10147, targeting vulnerable Windows and Linux web servers worldwide to deploy BadIIS malware, steal…
Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics
Google tracks three Russia-linked espionage clusters using phishing and legitimate authentication tools to target researchers, diplomats and defense…
Russian Hackers Abuse OAuth and WhatsApp Device Linking to Hijack High-Value Accounts
Suspected Russian cyber-espionage groups are increasingly turning ordinary sign-in and device-linking features into tools for account takeover. Their…
IT Security News Hourly Summary 2026-08-21 14h : 5 posts
5 posts published in the last hour 11:31OpenAI Frontier Models Get Zero Data Retention With Private Safety Processing 11:31Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0 11:31Critical N-Able PassPortal Extension Flaw Gives Attackers Full Password Vault…
OpenAI Frontier Models Get Zero Data Retention With Private Safety Processing
OpenAI has reaffirmed its commitment to Zero Data Retention (ZDR) for eligible API customers using frontier models while introducing the new Private…
Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal…
Critical N-Able PassPortal Extension Flaw Gives Attackers Full Password Vault Access
Cybersecurity researchers have revealed a critical vulnerability in N-able’s PassPortal browser extension that could have allowed a malicious website or…
GitLab Warns of Active Exploitation of Critical GraphQL Flaw
GitLab flaw CVE-2026-19478 is now under active exploitation, allowing unauthenticated attackers to modify or delete public projects. WatchTowr researchers…
IT Security News Hourly Summary 2026-08-21 13h : 5 posts
5 posts published in the last hour 10:31Hackers Hide Agent Tesla Malware Behind Emojis to Steal Browser and Email Passwords 10:31Quarkslab Says Anti-Reversing Software Should Return Plausible Wrong Answers Instead of Crashing 10:02More Incidents of AIs Going Rogue in Cybersecurity…
Hackers Hide Agent Tesla Malware Behind Emojis to Steal Browser and Email Passwords
A business email compromise campaign is using emoji-filled JScript to conceal an Agent Tesla v4 infostealer designed to steal browser, email, and…