A sophisticated cybercriminal group has been quietly targeting law firms and professional services organizations across the United States since the beginning of 2026. The campaign is financially motivated and relies heavily on deception rather than technical exploits. Victims are manipulated…
The checklist problem behind critical infrastructure cyber safety
An asset owner can meet major federal cyber compliance standards and still run equipment that lacks the engineering to withstand an attack or a failure. New research from George Mason University examines how United States cyber policy defines reasonable care…
Scam Losses Surge – Cybersecurity Today
Cybersecurity Today host David Shipley reports that the FTC says Americans lost $3.5 billion to imposter scams in 2025—nearly triple 2020—with social media tied to $2.1 billion in losses and total fraud reaching about $16 billion, while the FBI estimates…
Cyberattack sees crops kept in the ground
Bitter harvest for Australia’s Mackay Sugar, attacked in peak cane crushing season This article has been indexed from www.theregister.com – Articles Read the original article: Cyberattack sees crops kept in the ground
ISC Stormcast For Wednesday, June 17th, 2026 https://isc.sans.edu/podcastdetail/9976, (Wed, Jun 17th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, June 17th, 2026…
Ghostwriter Hackers Abuse Gmail Admin-Themed Emails to Steal Credentials and 2FA Codes
A state-linked hacker group known as Ghostwriter has launched a wave of targeted phishing attacks aimed at Gmail users, disguising malicious emails as official security alerts from Google. The campaign is designed to trick recipients into handing over their login…
ClickFix Campaign Uses EtherHiding and GULoader to Infect Windows Users via Fake CAPTCHA
A new cyberattack campaign is targeting Windows users through fake CAPTCHA pages, combining three techniques to slip past standard security defenses without raising alarms. The campaign, first observed in April 2026, begins on a compromised European small-business website and ends…
New OnionDrop Loader Campaign Uses gainmsg C2 to Deliver LegionLoader Payloads
A newly identified loader campaign is raising serious concerns across the cybersecurity community. Threat researchers have uncovered an active operation using a sophisticated multi-stage loader called OnionDrop, which is being used to deliver harmful payloads, including the well-known LegionLoader, to…
Infinite Campus: Salesforce Breach Exposed 137,000 Staff Records
Infinite Campus says a Salesforce breach exposed data tied to 137,000 school staff accounts, raising phishing and SaaS security concerns. The post Infinite Campus: Salesforce Breach Exposed 137,000 Staff Records appeared first on TechRepublic. This article has been indexed from…
Apple plans to change its Hide My Email privacy feature that could make it less effective
In the coming weeks, Apple will move anonymously generated emails addresses to a different domain. This article has been indexed from Security News | TechCrunch Read the original article: Apple plans to change its Hide My Email privacy feature that…
IT Security News Hourly Summary 2026-06-17 00h : 1 posts
1 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-06-16
IT Security News Daily Summary 2026-06-16
157 posts were published in the last hour 20:34 : Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society 20:34 : Python dev saved from disaster by intuition…and AI 20:9 : AI is Not Solving Cybersecurity Burnout Yet, New ISSA…
Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society
More than 200 of the world’s elites registered for a retreat whose agenda runs from panels on cult-building and sex to prepping for World War III. An associated app offers matchmaking. This article has been indexed from Security Latest Read…
Python dev saved from disaster by intuition…and AI
I’m sorry, Dave. I can’t install that repo that will totally hose your system. This article has been indexed from www.theregister.com – Articles Read the original article: Python dev saved from disaster by intuition…and AI
AI is Not Solving Cybersecurity Burnout Yet, New ISSA and Omdia Research Warns
Why Cybersecurity Professionals Are Considering the Exit Door in the Age of AI While 83% of organizations are using or planning to adopt AI for cybersecurity, 68% of cybersecurity professionals… The post AI is Not Solving Cybersecurity Burnout Yet, New…
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim’s project hijack the victim’s machine learning model upload and run code inside Google’s serving infrastructure. Palo Alto Networks Unit 42,…
iRhythm Hit by Cyberattack, Patient Data Stolen and Ransom Demanded
iRhythm disclosed a cyberattack via third-party apps where patient and proprietary data was stolen, followed by a ransom demand. iRhythm Technologies is a U.S.-based digital healthcare company specializing in remote cardiac monitoring and arrhythmia detection. Its best-known product is the…
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively. Attacks involving BabaDeda Loader, observed in April 2026, have targeted education…
IT Security News Hourly Summary 2026-06-16 21h : 9 posts
9 posts were published in the last hour 18:38 : Bug in FIFA World Cup internal system gave anyone ability to modify TV stream 18:38 : Critical Fortinet FortiSandbox Vulnerabilities Actively Exploited in Attacks 18:38 : The Half-Life of Threat…
Bug in FIFA World Cup internal system gave anyone ability to modify TV stream
A security researcher said a flaw in FIFA’s online platforms allowed her to access several internal systems, including one that could have allowed her to take control of the TV stream of every World Cup match. This article has been…
Critical Fortinet FortiSandbox Vulnerabilities Actively Exploited in Attacks
Threat actors are actively exploiting multiple critical vulnerabilities in Fortinet’s FortiSandbox platform, with live attack telemetry confirming exploitation attempts over the past 24 hours. Defused has flagged three CVEs under active targeting — including one, CVE-2026-39813, with no previously recorded…
The Half-Life of Threat Intelligence: When Does an IOC Stop Being Useful?
The concept of the IOC — the Indicator of Compromise — sits at the operational heart of modern threat detection. Block the IP. Flag the domain. Quarantine the hash. The logic is clean and satisfying. But embedded in every IOC…
Three critical Fortinet sandbox bugs splattered by unknown attackers
All have patches, so make sure you upgrade to a fixed version This article has been indexed from www.theregister.com – Articles Read the original article: Three critical Fortinet sandbox bugs splattered by unknown attackers
Best Prime Day Tech Deals: Apple, Bose, Garmin, and More
Shop early Amazon Prime Day tech deals on earbuds, mice, routers, doorbells, headphones, smartwatches, Android phones, and fitness watches. The post Best Prime Day Tech Deals: Apple, Bose, Garmin, and More appeared first on TechRepublic. This article has been indexed…