Information security
Information security
[ follow ]
#cybersecurity
Information security
fromThe Hacker News
1 day agoCISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026
CISA added five security flaws to its KEV catalog, urging federal agencies to patch them by April 3, 2026.
Information security
fromwww.scientificamerican.com
1 day agoGlassWorm malware hides in invisible open-source code
Invisible Unicode characters can hide malicious code, compromising open-source components and challenging trust in software development.
fromFortune
1 day agoCompanies are now on the front lines of war. They need to act like it | Fortune
Iran's current campaign reflects a deliberate shift toward attacking economic infrastructure and commercial actors. Data centers in the Gulf have faced physical, cyber, and hybrid strikes aimed at disrupting the digital backbone of global commerce.
Information security
Information security
fromComputerworld
3 days agoCISA urges IT to harden endpoint management systems after cyberattack by pro-Iranian group
CISA urges organizations to harden endpoint management system configurations, particularly Microsoft Intune, following a pro-Iranian threat actor's compromise of Stryker's systems.
fromWIRED
3 days agoUS Takes Down Botnets Used in Record-Breaking Cyberattacks
The US Department of Justice, working with the cybercrime-fighting agency within the US Department of Defense known as the Defense Criminal Investigative Service, announced that it had dismantled four massive botnets in a single operation, removing the command-and-control servers used to commandeer the hacker-run armies of compromised devices known by the names JackSkid, Mossad, Aisuru, and Kimwolf.
Information security
Information security
fromZDNET
3 days agoI tested NordVPN's free scam checker against a real threat in my inbox - here's how it did
NordVPN launched a free AI-powered scam checker tool that detects suspicious links, files, text, and images by identifying malicious databases and common scam patterns like scare tactics and artificial urgency.
Information security
fromSecurityWeek
3 days agoCritical ScreenConnect Vulnerability Exposes Machine Keys
ConnectWise released a security update for ScreenConnect addressing CVE-2026-3564, a critical vulnerability allowing attackers to access cryptographic machine keys by encrypting previously exposed cryptographic material in server configuration files.
#microsoft-intune-security
Information security
fromTheregister
3 days agoMicrosoft Intune: Lock it down, warn feds after Stryker
Iran-linked Handala attacked Stryker using compromised Microsoft Intune to wipe devices; CISA urges companies to implement least privilege access controls and follow Microsoft security best practices.
#ios-security
Information security
fromThe Hacker News
3 days agoDarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover
DarkSword, a new iOS exploit kit targeting iPhones running iOS 18.4-18.7, has been deployed by multiple threat actors since November 2025 to steal credentials and cryptocurrency wallet data.
Information security
fromTheregister
4 days agoSnoops plant info-stealing malware on iPhones, Google warns
DarkSword exploit kit targets iOS 18.4-18.7, exploiting six vulnerabilities to deploy backdoors stealing messages, location data, cryptocurrency wallets, and account credentials from iPhone users.
Information security
fromSecurityWeek
4 days ago'DarkSword' iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors
Security researchers discovered DarkSword, a sophisticated iOS exploit kit used by Russian state-sponsored hackers and commercial spyware vendors to compromise Apple devices with minimal user interaction.
Information security
fromTheregister
3 days agoUnknown attackers exploit another critical SharePoint bug
Unknown attackers are actively exploiting CVE-2026-20963, a critical Microsoft SharePoint deserialization vulnerability that enables unauthenticated remote code execution, prompting CISA to mandate federal agency patching within three days.
Information security
fromComputerWeekly.com
3 days agoApple issues first Background patch for WebKit browser flaw | Computer Weekly
Apple released a security update addressing CVE-2026-20643, a WebKit vulnerability allowing attackers to bypass the Same Origin Policy and access data from other websites through maliciously crafted web content.
#iphone-security
Information security
fromTechRepublic
3 days agoNew Apple Hack: Up to 270M iPhones Vulnerable to 'DarkSword' Exploit
DarkSword, a powerful iPhone exploit kit discovered on compromised Ukrainian websites, silently compromises unpatched iPhones through watering hole attacks without leaving traditional traces.
Information security
fromArs Technica
3 days agoHundreds of millions of iPhones can be hacked with a new tool found in the wild
DarkSword, a sophisticated iPhone hacking technique discovered in use by Russian hackers, can silently compromise hundreds of millions of iOS devices running older operating system versions through infected websites.
Information security
fromWIRED
4 days agoHundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild
A sophisticated iPhone hacking technique called DarkSword enables attackers to silently compromise iOS devices through infected websites, affecting hundreds of millions of users running older iOS versions.
Information security
fromInfoQ
4 days agoAI Model Discovers 22 Firefox Vulnerabilities in Two Weeks
Claude Opus 4.6 discovered 22 security vulnerabilities in Firefox within two weeks, with 14 classified as high-severity, demonstrating AI's capability to identify security flaws in established codebases faster than human researchers.
Information security
fromSecurityWeek
3 days agoCISA Warns of Attacks Exploiting Recent SharePoint Vulnerability
Microsoft SharePoint vulnerability CVE-2026-20963, a critical remote code execution flaw, is being exploited in the wild despite Microsoft's assessment indicating exploitation is less likely.
Information security
fromThe Hacker News
3 days agoNew Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data
Perseus, a new Android malware evolved from Cerberus and Phoenix, actively targets users through dropper apps for device takeover and financial fraud, with primary focus on Turkey and Italy.
fromThe Hacker News
3 days ago54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security
Ransomware gangs, especially those with ransomware-as-a-service (RaaS) programs, frequently produce new builds of their encryptors, and ensuring that each new build is reliably undetected can be time-consuming. More importantly, encryptors are inherently very noisy (as they inherently need to modify a large number of files in a short period); making such malware undetected is rather challenging.
Information security
Information security
fromSecurityWeek
3 days ago1stProtect Emerges From Stealth With $20 Million in Funding
1stProtect launched with $20 million in funding, offering an endpoint security platform that prevents cyberattacks by monitoring system behavior and enforcing security policies at the operating system level in real time.
Information security
fromTechzine Global
3 days agoRubrik adds Google Workspace backup with air-gapped protection
Rubrik launched Data Protection for Google Workspace with air-gapped backups, rapid recovery capabilities, and identity resilience protection across Gmail, Google Drive, and Okta environments.
fromKotaku
3 days agoGacha Game Distributes Malware, Apologizes With 10 Free Pulls
Umbral Stealer is an infostealer virus that can record keystrokes and take screenshots. In basic terms, it attempts to harvest sensitive information from the machines it infects, as it's primarily geared towards stealing users' passwords and cryptocurrency. The virus was distributed via a patch to Duet Night Abyss' launcher, which went live on Steam at 7:39 am UTC on March 18.
Information security
Information security
fromThe Hacker News
4 days agoInterlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
Interlock ransomware exploits critical Cisco Secure Firewall vulnerability CVE-2026-20131 as zero-day since January 26, 2026, enabling unauthenticated remote code execution with root privileges.
Information security
fromTechzine Global
4 days agoLinux Foundation Receives $12.5 Million for Open Source Security
The Linux Foundation receives $12.5 million in grants from major tech companies to address security challenges in open source software caused by AI-generated vulnerability reports overwhelming maintainers.
Information security
fromThe Hacker News
4 days ago9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors
Nine critical vulnerabilities in low-cost IP KVM devices from multiple manufacturers allow unauthenticated attackers to gain root access and control compromised systems at the BIOS/UEFI level.
Information security
fromThe Hacker News
4 days agoProduct Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels
Security teams struggle to connect isolated tool data into coherent attack paths; CSMA platforms unify security tools to discover and prioritize viable threats to critical assets.
Information security
fromThe Cipher Brief
4 days agoAmerica Is Digitally Fragile - and Our Adversaries Know It
America faces unprecedented vulnerability as critical infrastructure systems are digitally dependent and interconnected, while adversaries possess capabilities to penetrate and pre-position for exploitation before conflict begins.
Information security
fromThe Hacker News
4 days agoOFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs
OFAC sanctioned six individuals and two entities for operating a North Korean IT worker scheme that defrauds U.S. businesses and generates illicit revenue for weapons of mass destruction programs.
Information security
fromFortune
4 days agoExclusive: RunSybil, a startup using AI to automate penetration testing, raises $40M in VC funding in round led by Khosla Ventures | Fortune
RunSybil secured $40 million in funding to deploy AI agents that autonomously conduct continuous penetration testing on live software systems to identify security vulnerabilities.
Information security
fromTechCrunch
4 days agoRussians caught stealing personal data from Ukrainians with new advanced iPhone hacking tools | TechCrunch
Russian-linked hackers deployed Darksword spyware targeting Ukrainian iPhone users to steal personal data and cryptocurrency, revealing advanced iPhone exploits may be more prevalent than previously believed.
Information security
fromThe Hacker News
4 days agoClaude Code Security and Magecart: Getting the Threat Model Right
Magecart attacks hide malicious code in dynamically loaded third-party assets and EXIF metadata, bypassing repository-based static analysis tools like Claude Code Security because the code never enters the source repository.
fromThe Hacker News
4 days agoApple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS
The vulnerability, tracked as CVE-2026-20643 (CVSS score: N/A), has been described as a cross-origin issue in WebKit's Navigation API that could be exploited to bypass the same-origin policy when processing maliciously crafted web content.
Information security
Information security
fromSecuritymagazine
5 days agoThreat Actors Target the Entire Retail Supply Chain
Threat actors exploit shared supply chain vulnerabilities between wholesalers and retailers, with over 70% of retailers and 60% of wholesalers having exposed credentials, enabling widespread initial access.
fromThe Hacker News
4 days agoUbuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit
This flaw (CVE-2026-3888) allows an unprivileged local attacker to escalate privileges to full root access through the interaction of two standard system components: snap-confine and systemd-tmpfiles. While the exploit requires a specific time-based window (10-30 days), the resulting impact is a complete compromise of the host system.
Information security
#ai-security
Information security
fromThe Hacker News
5 days agoAI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds
Security leaders lack adequate tools and skills to defend AI systems, with visibility gaps and skills shortages creating critical vulnerabilities in AI infrastructure security.
Information security
fromTechRepublic
5 days agoResearchers Uncover New Phishing Risk Hidden Inside Microsoft Copilot
Attacker-controlled text in emails can manipulate Microsoft Copilot summaries through cross-prompt injection attacks, inserting deceptive alerts into trusted AI interfaces that users find more convincing than suspicious emails.
Information security
fromDevOps.com
5 days agoHarness Extends AI Security Reach Across Entire DevOps Workflow - DevOps.com
Harness launched AI security capabilities including automatic code securing during AI-assisted development and a module discovering, testing, and protecting AI components within applications.
Information security
fromTechzine Global
5 days agoHarness secures AI code and AI apps with two new modules
Harness launches AI Security and Secure AI Coding modules to detect, test, and protect AI components throughout the application lifecycle while scanning AI-generated code for vulnerabilities in real time.
Information security
fromTechRepublic
5 days agoOpenClaw, the Fastest-Adopted Software Ever, Is Also a Security Blind Spot
OpenClaw, an open-source AI agent running locally without admin privileges, poses unprecedented security risks by accessing all employee systems simultaneously with persistent memory across sessions.
Information security
fromThe Hacker News
5 days agoAI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE
Amazon Bedrock AgentCore Code Interpreter's sandbox allows outbound DNS queries, enabling attackers to exfiltrate data and establish command-and-control channels despite network isolation configuration.
Information security
fromThe Hacker News
5 days agoLeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
LeakNet ransomware group uses ClickFix social engineering via compromised websites for initial access, employing a Deno-based C2 loader to execute payloads in memory, followed by consistent post-exploitation sequences detectable before ransomware deployment.
Information security
fromBleepingComputer
5 days agoGlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX
GlassWorm supply-chain campaign compromised 433 components across GitHub, npm, and VSCode/OpenVSX, using a single Solana blockchain address for command-and-control across coordinated attacks targeting cryptocurrency wallets and developer credentials.
Information security
fromComputerWeekly.com
5 days agoBeyond integration theatre: Building stronger cyber platforms | Computer Weekly
Integration layers between security platforms, not the platforms themselves, have become the primary enterprise security risk requiring rigorous governance of delegated trust.
[ Load more ]