IT News

Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.

Breaking news & security alerts
Microsoft 365, Azure, Windows
Insights for sysadmins & MSPs
Independent and practical

All topics

All News

Stay informed with the latest IT news, security updates and product changes.

3 stories foundCybersecurityRemove topic filter

Abstract blockchain network illustration representing malicious payloads stored in smart contracts

ResearchWordPress

EtherHiding ClickFix campaign hits 5,400 hacked small-business sites

Netskope Threat Labs counted more than 5,400 compromised WordPress and PrestaShop sites pulling payloads from a BNB Smart Chain testnet smart contract, serving ClickFix lures and, in a newer variant, a covert WebRTC command channel.

Sep 5, 20269 min read

ServiceNow patching an actively exploited API vulnerability that exposed sensitive customer data.

ResolvedServiceNow Platform (Australia release)

ServiceNow Patches Exploited API Flaw That Exposed Customer Data

ServiceNow patched an unauthenticated API flaw on June 5, 2026, after attackers queried customer instance tables. Affects Australia release. Third major vulnerability in eight months.

Jun 6, 20263 min read

The IronWorm supply-chain attack infecting 36 npm packages with a Rust infostealer and an eBPF rootkit.

Resolvednpm (Node Package Manager)

IronWorm Infects 36 npm Packages with Rust Infostealer and eBPF Rootkit

IronWorm is a Rust-based npm supply chain worm that infected 36 packages via the asteroiddao account. It steals credentials, deploys an eBPF rootkit, communicates over Tor, and self-propagates via stolen npm tokens.

Jun 5, 20263 min read