IT Security - it-daily.net - Daily relevant IT news for decision-makers

Sandbox Escape

Critical Cursor Vulnerabilities Opened the Door to the Host Operating System

06. July, 2026 - 10:58

Security researchers have uncovered two critical vulnerabilities in the AI development environment Cursor. By using specially crafted prompts, attackers can escape the application’s sandbox and execute code directly on the host operating system — without requiring any user interaction.

EU–US Data Privacy Framework

Transatlantic Data Transfer Shock: EU–US Agreement Shaken by Court Ruling

03. July, 2026 - 10:10

The US Supreme Court has ended the independent oversight of the US Federal Trade Commission (FTC). For privacy organization Noyb, this means the legal basis of the EU–US Data Privacy Framework is no longer valid.

The evolution of Zero Trust

Runtime Identity: When Trust Only Lasts Until the Next Click

29. June, 2026 - 07:25

What if trust was no longer established at login, but had to be earned again with every single action? Runtime Identity marks the end of static permissions.

Social Engineering

Apple Devices Under Attack: New ClickFix Campaign Delivers macOS Malware

25. June, 2026 - 15:45

A new macOS Malware campaign uses ClickFix social engineering and Terminal commands to silently download malicious files, steal passwords and compromise cryptocurrency data.

Supply Chain Attacks increase

New Top 10 Ranking Exposes the World’s Most Dangerous Hacker Groups

25. June, 2026 - 05:16

A new ranking reveals that hacker groups are increasingly targeting supply chains and relying on rented infrastructure with market shares of up to 89 percent.

Eight Years Undetected

Millions of Samsung Devices Exposed to Kernel Attacks

24. June, 2026 - 14:53

A security flaw in Samsung’s KNOX framework that remained undiscovered for years put millions of Galaxy devices at risk of potential kernel-level attacks.

AI agent–driven attack campaign

How a Non-Expert Hacker Compromised 14 Companies Using Claude and Codex

24. June, 2026 - 07:59

A hacker compromised 14 companies using Anthropic’s Claude Code agent and OpenAI’s Codex. The attacker’s lack of technical expertise was compensated for by the AI.

Vulnerability in Oracle Software

Estée Lauder Reports Data Breach Caused by Oracle Vulnerability

22. June, 2026 - 09:01

Estée Lauder reports a data breach. Attackers exploited a vulnerability in Oracle E-Business Suite to steal personal and customer data.

From Attack to Evidence

Forensic Readiness: How to Preserve Evidence After a Cyberattack

22. June, 2026 - 07:31

A strong forensic readiness strategy accelerates business recovery after a security incident and significantly improves the ability of IT forensics teams to investigate what happened.

Infostealer malware

Record-Breaking Data Leak Exposes 24 Billion Login Credentials Online

19. June, 2026 - 10:51

An unprotected server has exposed 24 billion login credentials in plaintext, raising major concerns over the security of billions of online accounts. According to Cybernews, billions of accounts without multi-factor authentication (MFA) are at risk.