Prolific ShinyHunters group claims to have stolen data from nearly 400 websites in Experience Cloud attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: ShinyHunters Targets Hundreds of Websites in New Salesforce Campaign
Chinese Customers Flock To Open-Source AI Agent
Around 1,000 people line up at Tencent headquarters in Shenzhen for free installation of AI agent OpenClaw, amid growing tech craze This article has been indexed from Silicon UK Read the original article: Chinese Customers Flock To Open-Source AI Agent
Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
Menlo Park, USA, 10th March 2026, CyberNewswire This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools
OpenAI to Acquire Promptfoo to Address Vulnerabilities in AI Systems
OpenAI has announced the acquisition of Promptfoo, an artificial intelligence security platform designed to help enterprises identify and fix vulnerabilities in their AI systems during development. Once the acquisition is finalized, OpenAI plans to integrate Promptfoo’s advanced security evaluation technology…
Cloudflare Pingora Flaws Enable Request Smuggling and Cache Poisoning Attacks
In a recent security advisory, Cloudflare disclosed multiple HTTP request smuggling and cache poisoning vulnerabilities in its open-source Pingora framework. Tracked under the identifiers CVE-2026-2833, CVE-2026-2835, and CVE-2026-2836, these flaws specifically impact standalone Pingora deployments that are exposed directly to…
Phishing campaign spoofs local officials to steal permit fees
The FBI is warning about a phishing scheme in which cybercriminals impersonate city and county officials to solicit fraudulent payments for planning and zoning permits. Criminals mine publicly available permit data to find likely targets and make their outreach appear…
TfL Confirms 10 Million Affected By 2024 Hack
Transport for London confirms that personal data on around 10 million people was taken by hackers in massive breach, following BBC report This article has been indexed from Silicon UK Read the original article: TfL Confirms 10 Million Affected By…
Law enforcement disrupted Tycoon 2FA phishing-as-a-service platform
Authorities disrupted the Tycoon 2FA phishing-as-a-service platform used to send millions of phishing emails to over 500,000 orgs worldwide. The joint effort, led by Microsoft, Europol, and industry partners, aimed to target the infrastructure of Tycoon 2FA phishing-as-a-service platform responsible…
iPhone Exploit Toolkit Used by Russian Spies Likely Originated from U.S. Contractor
A powerful iPhone exploit kit named “Coruna,” initially created for Western intelligence by U.S. contractor L3Harris, has fallen into the hands of Russian spies and Chinese cybercriminals. The Coruna toolkit features 23 different hacking components designed to compromise Apple iPhones.…
Apache ZooKeeper Vulnerability Allow Attackers to Access Sensitive Data
Two “Important” severity vulnerabilities have been disclosed in Apache ZooKeeper, a widely used service for configuration management and naming in distributed applications, making timely security updates critical. These newly discovered flaws could allow attackers to access sensitive configuration data or…
Anthropic Sued the U.S. Government for Labelling Claude as ‘Supply Chain Risk’
Artificial intelligence leader Anthropic has filed an unprecedented lawsuit against the United States government after being designated a “supply chain risk”. The legal action, filed in a California federal court on Monday, targets the executive office of President Donald Trump,…
Rising Cyber Threats Linked to Ongoing Middle East Conflict
A geopolitical crisis has historically been fought on physical battlefields, but its effects are seldom confined to borders in the modern threat landscape. While tensions are swirling across the Middle East as a result of the United States’ military operations…
Escape lands $18 million funding to scale AI-driven offensive security automation
Escape has raised $18 million in Series A funding to automate the entire security lifecycle with AI agents. The round, led by Balderton Capital with participation from Uncorrelated Ventures and existing investors Iris Capital and Y Combinator, will help lean…
Ukraine Deploys Robot Battalion To Fight Russia
Unmanned ground robots reportedly being used extensively on front lines to defend Ukrainian positions, attack Russian troops with machine guns This article has been indexed from Silicon UK Read the original article: Ukraine Deploys Robot Battalion To Fight Russia
Datadog MCP server delivers live observability to AI agents and IDEs
Datadog has announced the general availability of its MCP Server. For developers embedding AI agents into development and operational workflows, the Datadog MCP Server provides access to live observability data, enabling teams to debug with their preferred AI coding agents…
SailPoint expands AI-powered identity security with adaptive identity framework
SailPoint announced significant advancements to its AI-powered SailPoint Platform, introducing the first in a series of capabilities that advance its adaptive identity vision, an approach designed to address the critical security challenges of IT environments. New features include: Privilege: SailPoint…
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
Salesforce has warned of an increase in threat actor activity that’s aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by making use of a customized version of an open-source tool called AuraInspector. The activity, per the company, involves…
InstallFix spreads fake Claude sites, UNC4899 breaches crypto, UK cyber-fraud crackdown
InstallFix attacks spread fake Claude code sites UNC4899 breaches crypto firm via trojanized file UK launches cyber-fraud crackdown unit Get links to all the stories in our show notes: https://cisoseries.com/cybersecurity-news-installfix-spreads-fake-claude-sites-unc4899-breaches-crypto-uk-cyber-fraud-crackdown/ Huge thanks to our sponsor, Dropzone AI It is 3…
Russian Hackers Target Signal, WhatsApp
Widespread informal use of encrypted consumer apps make them prime target for social engineering-based espionage hacks, Dutch officials say This article has been indexed from Silicon UK Read the original article: Russian Hackers Target Signal, WhatsApp
iPhone Hacking Toolkit Tied to Russian Espionage May Have Originated in the U.S.
A highly advanced iPhone hacking toolkit, originally developed for Western intelligence agencies, has leaked into the hands of Russian spies and Chinese cybercriminals. The exploit framework, known internally as “Coruna,” was likely created by Trenchant, the hacking and surveillance division…
IT Security News Hourly Summary 2026-03-10 09h : 11 posts
11 posts were published in the last hour 8:5 : SurxRAT Android Malware Uses LLMs for Phishing and Data Theft 8:4 : Chinese APT Campaign Targets Qatar With PlugX Lures Tied to Middle East Conflict 8:4 : Signed Malware Masquerading…
SurxRAT Android Malware Uses LLMs for Phishing and Data Theft
A new Android Remote Access Trojan (RAT) named SurxRAT, which is being sold as a commercial malware platform through a Telegram-based malware‑as‑a‑service (MaaS) ecosystem. The malware, marketed under the SURXRAT V5 branding, enables cybercriminals to create customized Android malware builds…
Chinese APT Campaign Targets Qatar With PlugX Lures Tied to Middle East Conflict
A Chinese-linked advanced persistent threat group known as Camaro Dragon launched a targeted cyberespionage campaign against entities in Qatar just one day after the outbreak of new hostilities in the Middle East on March 1, 2026. The group used war-themed…
Signed Malware Masquerading as Teams, Zoom Apps Drops RMM Backdoors
A newly uncovered phishing campaign is actively targeting enterprise users by disguising malware as widely used workplace applications, including Microsoft Teams, Zoom, and Adobe Acrobat Reader. What makes this threat stand out is that the malicious files carry legitimate-looking digital…