IT Security - it-daily.net - Daily relevant IT news for decision-makers

Cybersecurity Simplification Strategy

EU Publishes Practical Guidance for Cyber Resilience Act Compliance

30. July, 2026 - 06:09

The European Commission aims to support manufacturers and developers ahead of the September deadline. A new guidance document featuring 67 practical examples is designed to answer open questions surrounding the Cyber Resilience Act.

Before the Hugging Face Breach

JFrog Confirms Zero Day Attack Involving OpenAI Models

30. July, 2026 - 05:21

JFrog has confirmed that OpenAI AI models exploited a previously unknown vulnerability in the company’s self hosted Artifactory software.

MFA Bypassing

Hackers Manipulate Hotel Wi-Fi for Microsoft 365 Theft

28. July, 2026 - 13:13

Attackers alter DNS settings in hotel Wi-Fi networks to redirect users to fake Microsoft 365 pages and steal credentials.

New Names for Cybercriminals

Google Cleans Up Its Hacker Naming System

28. July, 2026 - 05:05

The Google Threat Intelligence Group is overhauling its tracking system for cyber threat actors. Instead of cryptic abbreviations such as APT41, the group will use two part codenames to make threat tracking easier to navigate.

Shaping The Digital Future

US Ruling Turns Data Sovereignty Into a Competitive Advantage

27. July, 2026 - 10:16

On June 29, the U.S. Supreme Court ruled in Trump v. Slaughter that the independence of the Federal Trade Commission (FTC) is unconstitutional.

Malvertising via Search Engines

Bing Ads Spread Fake Claude App Delivering SectopRAT Malware

27. July, 2026 - 09:19

Attackers used manipulated Bing ads to distribute SectopRAT malware, compromising at least 29 organizations.

Malware Attacks Target Developers

“ClaudeFix”: When Shared AI Chats Become Malware Traps

25. July, 2026 - 05:36

Security researchers at Zscaler have uncovered a new attack campaign in which cybercriminals use manipulated AI chats to distribute malware.

Machine Key Theft

Rotate Credentials: SharePoint Vulnerability Puts Enterprise Networks at Risk

24. July, 2026 - 10:02

Security researchers are tracking attacks against Microsoft SharePoint systems exploiting the vulnerability CVE-2026-50522. Attackers are stealing machine keys from compromised servers.

Operations Remain Uninterrupted

Stadler Rail Rejects $12.3 Million Ransom Demand After Cyberattack

24. July, 2026 - 05:59

Swiss train manufacturer Stadler Rail has rejected a ransom demand of 10 million Swiss francs, equivalent to approximately $12.3 million US dollars, from the Everest group following a data breach at a supplier.