IT Security - it-daily.net - Daily relevant IT news for decision-makers

Over 5,000 stolen credentials

Phishing Service BigBear Bypassed MFA at 258 Companies

10. September, 2026 - 09:26

A framework operated as Phishing-as-a-Service called BigBear 2.0 has bypassed multi-factor authentication at 258 organizations, stealing more than 5,000 Microsoft 365 credentials in the process.

Employee badges

Ransomware Group Storm Claims Attack on Boeing and Airbus Supplier

08. September, 2026 - 07:52

The ransomware group Storm, which only first surfaced in August 2026, has listed small US aviation supplier Star Aviation from Kentucky as a victim.

Compromised GitLab credentials

AI-Driven Ransomware Operation Uncovered

08. September, 2026 - 05:15

Cybernews has discovered a server on which an affiliate of the ransomware group The Gentlemen was running an almost fully AI-driven extortion operation.

Attackers exploit existing trust

Shai-Hulud Worm Scans 469 Locations for Credentials

07. September, 2026 - 14:51

Security researchers at GitGuardian have found that a new variant of the Shai-Hulud infostealer worm scans 469 different locations for credentials.

Fake job interview

Hackers Spread Malware via Fake Coding Tests

03. September, 2026 - 09:04

According to a Kaspersky analysis, the Iranian hacker group Nimbus Manticore is deploying two previously unknown malware families named NodeRabbit and PollCat.

Applicants lured into sideloading

Fake Indeed Apps Spread Spyware among Android Job Seekers

03. September, 2026 - 05:54

Security researchers at Malwarebytes warn of fake job postings on the major job platform Indeed.

AI coding agent as a tool for real attacks

Hackers Used AI Assistant Cursor for Attacks on Corporate Networks

02. September, 2026 - 07:38

An investigation shows how the extortion group Aur0ra used Cursor to exploit already compromised corporate networks.

Router abused as proxy network

New Linux Botnet Evooo1Bot Turns Routers into Traffic Relay Nodes

02. September, 2026 - 06:25

Fortinet has discovered the new Linux botnet Evooo1Bot, which turns gateway devices into SOCKS5 relay nodes and additionally steals data.

Control console without access protection

NASA Software AIT-GUI Allowed Spacecraft Commands Without any Login

01. September, 2026 - 09:49

Security researchers have disclosed a vulnerability chain in AIT-GUI, the browser-based control console for NASA/JPL’s open-source AMMOS Instrument Toolkit.

When Outages Become Normal

Vulnerabilities Are Getting Cheaper, but Downtime Remains Expensive

24. August, 2026 - 07:25

AI is accelerating the search for security vulnerabilities, while attackers are increasingly disabling the very tools designed to stop them. What can still detect an attack when EDR and other security controls have already been taken offline?