In early 2025, security researchers uncovered a new malware family dubbed Webrat, which at that time was predominantly targeting ordinary users through fake distribution methods. The first propagation involved masking malware as cheats for online games-like Rust, Counter-Strike, and…
Telegram-Based Crypto Scam Networks Are Now Larger Than Any Dark Web Market in History
For years, illegal online marketplaces were closely linked to the dark web. These platforms relied on privacy-focused browsers and early cryptocurrencies to sell drugs, weapons, stolen data, and hacking tools while remaining hidden from authorities. At the time, their…
Google and Apple Deploy Rapid Security Fixes Following Zero-Day Attacks
It has been revealed that a set of advanced zero-day vulnerabilities, utilizing which a highly targeted hacking campaign was targeting private individuals, has been leveraged by Apple as an emergency security patch. Several weeks ago, in an official security…
NIST and MITRE Launch $20 Million AI Research Centers to Protect U.S. Manufacturing and Critical Infrastructure
The National Institute of Standards and Technology (NIST) has announced a new partnership with The MITRE Corporation to establish two artificial intelligence–focused research centers under a $20 million initiative. The effort will explore advanced AI applications, with a strong…
From AI to analog, cybersecurity tabletop exercises look a little different this year
Practice makes perfect It’s the most wonderful time of the year … for corporate security bosses to run tabletop exercises, simulating a hypothetical cyberattack or other emergency, running through incident processes, and practicing responses to ensure preparedness if when a…
IT Security News Hourly Summary 2025-12-26 18h : 1 posts
1 posts were published in the last hour 16:31 : Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code
Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code
Trust Wallet is urging users to update its Google Chrome extension to the latest version following what it described as a “security incident” that led to the loss of approximately $7 million. The issue, the multi‑chain, non‑custodial cryptocurrency wallet service…
This strange magnetism could power tomorrow’s AI
Scientists in Japan have confirmed that ultra-thin films of ruthenium dioxide belong to a newly recognized and powerful class of magnetic materials called altermagnets. These materials combine the best of two magnetic worlds: they’re stable against interference yet still allow…
This tiny chip could change the future of quantum computing
A new microchip-sized device could dramatically accelerate the future of quantum computing. It controls laser frequencies with extreme precision while using far less power than today’s bulky systems. Crucially, it’s made with standard chip manufacturing, meaning it can be mass-produced…
The State of SAP Security: How to Defend Your Organization from Surging ERP Application Attacks
SAP is now a prime cyberattack target and must be treated as a core enterprise security priority. The post The State of SAP Security: How to Defend Your Organization from Surging ERP Application Attacks appeared first on eSecurity Planet. This…
From video games to cyber defense: If you don’t think like a hacker, you won’t win
In supercharged AI race, defenders need to keep up interview According to Remedio CEO Tal Kollender, the only way to beat the bad guys hacking into corporate networks is to “think like a hacker,” and because not everyone is a…
Best of 2025: Survey: Nearly Half of Data Breaches Involved Third-Party Remote Access
A survey of 1,942 IT and IT security practitioners finds nearly half (47%) work for organizations that have experienced a data breach or cyberattack in the past 12 months that involved a third-party that has access to their network. The…
China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware
A China-linked advanced persistent threat (APT) group has been attributed to a highly-targeted cyber espionage campaign in which the adversary poisoned Domain Name System (DNS) requests to deliver its signature MgBot backdoor in attacks targeting victims in Türkiye, China, and…
Cyber Briefing: 2025.12.26
MacSync bypasses macOS security as browser and supply-chain malware spread, ransomware hits utilities, breaches surface, and courts and Interpol act. This article has been indexed from CyberMaterial Read the original article: Cyber Briefing: 2025.12.26
Popular NPM Package lotusbail Exposed as Trojan Stealing WhatsApp Chats
Koi Security uncovers lotusbail, a malicious npm package with 56K downloads that steals WhatsApp messages and installs a persistent backdoor. Learn how to protect your data. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI, and…
Aflac confirms June data breach affecting over 22 million customers
A June data breach exposed the personal information of more than 22 million Aflac customers, the company confirmed. A data breach in June exposed the information of more than 22 million Aflac customers, according to a new statement from the…
The Architect’s Guide to Logging
Every developer and architect thinks they understand logging until they’re staring at a production issue at 3:00 a.m. Realizing that their logs lack context, have no defined structure, and they’re sifting through a wall of text, desperately looking for that…
WordPress Vulnerability Scanner Reveals How Exposed Your Website Really Is
WordPress powers about 43% of all websites worldwide. This makes it an indispensable platform for organizations of all sizes. Unfortunately, that popularity also makes WordPress a prime target for attackers. Hundreds of thousands of WordPress sites get hacked each year,…
Best of 2025: Oracle Hack: From ‘Deny-Deny-Deny’ to ‘Oops-Oops-Oops’
Classic “wordplay:” Larry’s PR angels desperately dance on the head of a pin. The post Best of 2025: Oracle Hack: From ‘Deny-Deny-Deny’ to ‘Oops-Oops-Oops’ appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original…
IT Security News Hourly Summary 2025-12-26 15h : 7 posts
7 posts were published in the last hour 14:2 : These are the cybersecurity stories we were jealous of in 2025 14:2 : PayPal Subscriptions Exploited in Sophisticated Email Scam 13:32 : Malicious Npm Package Steals Whatsapp 13:32 : Romanian…
These are the cybersecurity stories we were jealous of in 2025
The very best reporting and investigative journalism from our friends at other publications. This article has been indexed from Security News | TechCrunch Read the original article: These are the cybersecurity stories we were jealous of in 2025
PayPal Subscriptions Exploited in Sophisticated Email Scam
Hackers have found a clever way to misuse PayPal’s legitimate email system to send authentic looking phishing scams that are able to bypass security filters and look genuine to the end users. Over the last few weeks, users are complaining…
Malicious Npm Package Steals Whatsapp
A fraudulent package discovered in the Node Package Manager registry has been posing as a legitimate utility for interacting with the WhatsApp Web API. This article has been indexed from CyberMaterial Read the original article: Malicious Npm Package Steals Whatsapp
Romanian Water Agency Ransomware Hit
Over the weekend, Romanian cybersecurity authorities identified a significant security breach affecting the majority of the national water authority’s digital infrastructure. This article has been indexed from CyberMaterial Read the original article: Romanian Water Agency Ransomware Hit