An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows… This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: “TTF Trap” Phishing…
Tag: EN
In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint
Noteworthy stories that might have slipped under the radar: OpenClaw AI agents exploited via WhatsApp, ransomware hits naval defense firm TKMS, Lidl discloses data breach. The post In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint…
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part of a campaign using fake job postings and coding challenges. “Any user who ran the…
23andMe Faces New Security Mandates in $18m Data Breach Settlement
23andMe has agreed to an $18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirements This article has been indexed from www.infosecurity-magazine.com Read the original article: 23andMe Faces New Security Mandates in $18m…
Cyber Briefing: 2026.07.17
Generative AI scams, rapid-fire ransomware, and non-consensual deepfakes: The tactical shift driving aggressive new law enforcement and local government intervention. This article has been indexed from CyberMaterial Read the original article: Cyber Briefing: 2026.07.17
New Starland RAT Steals Browser Credentials and Scans for Over 40 Crypto Wallets
A financially motivated, Russian-speaking threat actor tracked as UAT-11795, orchestrating a large-scale campaign since at least June 2025. A sophisticated Python-based remote access trojan dubbed “Starland RAT,” alongside a stealthy in-memory PowerShell implant known as the “WLDR agent.” The operation…
The State of Hybrid SASE: Built-In vs. Bolted-On
Hybrid SASE is not a label – it is an architectural commitment. Many enterprises pay twice for SASE: once for the platform, and again for the overhead of integrating and managing components never designed to work as one architecture. Check…
Hackers Hide Lua Loaders in Fake TTF Files to Deploy Remcos, XWorm, and Agent Tesla
Hackers are increasingly abusing trusted file formats and lightweight scripting environments to evade detection, with a newly observed campaign leveraging Lua-based loaders. Disguised as TrueType (.ttf) font files to deploy commodity malware, including Remcos RAT, Agent Tesla, XWorm, and Snake…
AWS Cost Explorer Bug Shows Trillion-Dollar Billing Estimates
AWS customers worldwide were startled after the AWS Billing and Cost Management Console and Cost Explorer began displaying extraordinarily high projected cloud costs. Some organizations reported estimated monthly bills reaching trillions of dollars, triggering budget alerts and prompting concerns over…
New Windows LegacyHive 0-Day Vulnerability Allows Hackers to Gain Admin Access
A Windows zero-day vulnerability, dubbed LegacyHive (MSNightmare), abuses the User Profile Service to enable local privilege escalation, tampering with administrator accounts, and admin-level code execution. LegacyHive targets the Windows User Profile Service (ProfSvc), which is responsible for loading and unloading user…
LegacyHive Windows Zero-Day Lets Attackers Hijack Administrator Registry Hives
A newly disclosed Windows local privilege-escalation vulnerability, dubbed LegacyHive, could allow a standard user to load and modify the per-user registry classes hive of an administrator account. The proof-of-concept (PoC), published by researcher NightmareEclipse under the MSNightmare/LegacyHive GitHub repository, abuses…
Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
One compromised Shark robot vacuum could unlock remote access to many others. This article has been indexed from Malwarebytes Read the original article: Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
Scammers weaponize FaceTime for social engineering
Apple has alerted iPhone and iPad users to an ongoing social engineering campaign where attackers abuse FaceTime calls to steal credentials and financial information. This article has been indexed from CyberMaterial Read the original article: Scammers weaponize FaceTime for social…
Women’s Care & Pulmonary Sleep Breaches
Two healthcare providers have disclosed significant data breaches exposing sensitive patient information. This article has been indexed from CyberMaterial Read the original article: Women’s Care & Pulmonary Sleep Breaches
Ransomware halts Fairlife dairy production
Coca-Cola-owned Fairlife has suspended production at all its US dairy facilities following a ransomware attack that compromised production-related systems. This article has been indexed from CyberMaterial Read the original article: Ransomware halts Fairlife dairy production
1Password integrates with Claude AI for secure authentication
1Password has released a beta integration with Anthropic’s Claude AI assistant that enables the AI to handle website authentication without accessing user passwords or credentials. This article has been indexed from CyberMaterial Read the original article: 1Password integrates with Claude…
AWS Billing Bug Displays Trillion-Dollar Cost Estimates to Cloud Customers
Amazon Web Services (AWS) is currently investigating a significant billing issue affecting its Cost Explorer tool. This problem caused some cloud customers to see alarmingly inflated cost estimates, with figures reportedly reaching into the trillions of dollars. AWS Support acknowledged…
Hackers Breached an IIS Server and Deployed Ransomware Across the Network the Next Day
Hackers leveraged a compromised Microsoft IIS server to gain initial access and deploy a previously unseen ransomware payload across an enterprise network within 24 hours, highlighting a highly coordinated and operationally mature intrusion chain observed in June 2026. The campaign…
Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive
(Video) Artificial intelligence is transforming cybersecurity, but are governance, compliance, and security practices evolving fast enough to keep up? The post Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive appeared first on SecurityWeek. This article has been indexed…
Spirals ransomware locks down victim systems in under 24 hours
A previously unknown ransomware strain called Spirals was used last month in an attack against an IT services company in South Asia, where attackers went from initial access to data theft and encrypting the network in less than 24 hours,…